$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: epi62t6GBzrKBq6aDaA2Ck+PXjyn2k+ZVn1338z2AxU= Subject key identifier: 8E:67:7C:A2:11:F8:62:FD:5C:8B:65:0E:41:71:D8:AD:E4:5A:10:87 Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 0466 Signing time: Tue 07 May 2024 01:46:02 +0000 Manifest this update: Tue 07 May 2024 01:46:01 +0000 Manifest next update: Tue 14 May 2024 01:46:01 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: +AYxBJL6aLD5pH7XA6RYhEHEq+vJ39a+fs0HBLDednU=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: nPFntpiH3e+VxnHZACKr8y86wdGV/j1zFhWwhLBnbJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: May 7 01:46:01 2024 GMT Not After : May 14 01:46:01 2024 GMT Subject: CN=663987da-4260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:21:cc:34:04:c1:dd:38:92:bc:6e:2b:b9: 98:ef:f8:4a:0b:71:1d:6d:62:ac:cc:eb:a8:16:aa: 7b:71:1d:84:65:b6:3e:ce:b1:a2:b2:1b:ef:1c:17: 26:34:ea:b3:ec:48:34:a3:e8:51:ea:fc:69:16:ec: 5e:10:49:a2:09:2b:3f:11:85:25:fc:29:f5:a0:4f: 13:32:f3:5b:7e:3a:47:c4:2d:e8:0a:30:df:b1:09: 7c:f1:7b:9e:c3:3e:1d:b7:c7:1a:88:78:40:64:8d: a7:9e:b6:5d:33:30:4c:81:a2:47:3a:64:70:b9:fd: 5d:8c:33:d0:63:bb:24:ea:5f:c3:7f:88:35:82:2a: c1:fc:f3:4a:b9:10:be:65:e0:e7:70:24:a3:1e:60: f5:80:76:6a:1a:cf:ec:4b:e2:4b:79:84:80:a9:38: d1:cf:b6:a4:37:b7:2c:52:7b:ce:5b:e5:34:80:7a: 9c:8c:12:0e:0a:68:80:d1:c1:94:e8:9f:89:91:58: 42:25:50:dc:cf:22:2b:95:5b:37:7b:27:40:5d:d0: a7:fe:e4:0a:ec:f7:14:74:de:6b:87:7b:38:6b:53: f5:26:46:db:68:0b:2c:a2:73:86:c3:7b:43:e4:6a: 50:ec:b5:00:f2:6e:8d:dd:0c:a2:11:e8:fe:2b:89: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:67:7C:A2:11:F8:62:FD:5C:8B:65:0E:41:71:D8:AD:E4:5A:10:87 X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:73:81:78:0f:5a:e4:dc:82:ad:3a:3e:2a:c9:b5:1c:31:da: 54:8c:b4:d1:aa:36:db:30:98:a4:a7:73:ef:33:94:95:64:b0: 52:bc:70:c1:aa:82:9a:89:02:35:b2:c7:eb:dd:fe:6d:08:49: 17:0d:e5:9c:2b:03:5a:5a:97:70:f4:49:35:dc:78:54:8a:68: e8:87:7d:56:13:c7:8f:b5:cb:8e:29:48:a5:0e:f0:ad:3b:84: ed:96:06:1a:44:fe:88:93:df:53:80:17:f3:4b:a4:c8:29:ce: 63:18:bd:43:ff:f7:27:ed:fa:c8:ed:f7:29:d6:3c:65:9f:08: 9f:b4:14:a4:66:17:38:d6:af:61:36:4e:a6:c1:0f:0a:3f:9c: e6:fb:26:57:7b:f3:d6:af:32:db:de:5e:17:c7:48:cc:97:8e: 30:fb:87:a1:65:4e:c6:f8:27:d7:65:6a:5c:5f:7a:f9:b2:02: ba:6e:59:55:44:ae:e4:bb:25:d1:7c:13:e7:bf:ae:92:f3:06: 7f:83:5e:7a:96:ba:38:d0:f2:8f:de:e2:6a:36:db:db:55:97: ae:f4:45:b8:56:2b:6b:4c:a4:48:ca:ee:15:3b:82:1c:6d:24: cc:78:a9:4e:0b:75:80:12:cc:19:a1:30:5e:8f:f0:bd:92:60: 5d:b2:58:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjQwNTA3MDE0NjAxWhcNMjQwNTE0MDE0NjAxWjAYMRYwFAYD VQQDEw02NjM5ODdkYS00MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKMhzDQEwd04krxuK7mY7/hKC3EdbWKszOuoFqp7cR2EZbY+zrGishvvHBcm NOqz7Eg0o+hR6vxpFuxeEEmiCSs/EYUl/Cn1oE8TMvNbfjpHxC3oCjDfsQl88Xue wz4dt8caiHhAZI2nnrZdMzBMgaJHOmRwuf1djDPQY7sk6l/Df4g1girB/PNKuRC+ ZeDncCSjHmD1gHZqGs/sS+JLeYSAqTjRz7akN7csUnvOW+U0gHqcjBIOCmiA0cGU 6J+JkVhCJVDczyIrlVs3eydAXdCn/uQK7PcUdN5rh3s4a1P1JkbbaAssonOGw3tD 5GpQ7LUA8m6N3QyiEej+K4kM2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5nfKIR +GL9XItlDkFx2K3kWhCHMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzc4F4D1rk3IKtOj4qybUcMdpUjLTRqjbbMJikp3PvM5SVZLBSvHDB qoKaiQI1ssfr3f5tCEkXDeWcKwNaWpdw9Ek13HhUimjoh31WE8ePtcuOKUilDvCt O4TtlgYaRP6Ik99TgBfzS6TIKc5jGL1D//cn7frI7fcp1jxlnwiftBSkZhc41q9h Nk6mwQ8KP5zm+yZXe/PWrzLb3l4Xx0jMl44w+4ehZU7G+CfXZWpcX3r5sgK6bllV RK7kuyXRfBPnv66S8wZ/g156lro40PKP3uJqNtvbVZeu9EW4VitrTKRIyu4VO4Ic bSTMeKlOC3WAEswZoTBej/C9kmBdslie -----END CERTIFICATE-----Generated at Tue May 7 03:10:19 2024 by rpki-client on console-ams.rpki-client.org