$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: hINe7dYssQCEl/TyXlL561ysljRsXPW6dDHE58SjPuw= Subject key identifier: B6:07:D6:6D:46:FE:AA:AF:43:F2:A9:88:65:95:10:DF:21:F5:D2:AB Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1D3E Signing time: Thu 02 May 2024 16:33:42 +0000 Manifest this update: Thu 02 May 2024 16:33:41 +0000 Manifest next update: Thu 09 May 2024 16:33:41 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: qrQQH1vcS94pBdb4RPDB8Z+kCaF0C65iVZGLBQW3jd0=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: ZhT9VI27PKDytmI9SXJDcHjMH8fcz38embDIJ/ZKbEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7507 (0x1d53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: May 2 16:33:41 2024 GMT Not After : May 9 16:33:41 2024 GMT Subject: CN=6633c065-762d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:7b:75:2b:a2:23:59:37:c6:06:c8:16:70: f2:2b:12:d0:ac:e2:cc:6c:b0:a3:49:e2:4e:15:18: be:5c:c3:19:f9:d3:6b:13:78:4a:5f:19:ff:26:4d: 5b:28:66:5e:6b:7f:0c:a6:48:6e:15:37:77:bd:1e: b1:b1:f3:c7:b4:72:92:f1:15:86:9f:b9:f1:99:15: cd:f8:eb:8d:41:87:8b:55:5c:57:4f:d5:da:93:b0: d7:d3:0a:fc:90:a8:5d:32:b7:89:3e:1f:20:41:7e: 53:76:af:2d:92:e9:22:a4:fc:a2:34:24:dd:07:3b: bb:d4:b3:e8:94:49:91:73:51:f8:a8:4c:f3:24:58: a8:b4:5e:25:e2:be:d6:f7:70:95:d1:4e:78:fa:57: 37:e5:f3:cc:fa:f8:5a:87:75:9b:f5:f2:c4:a6:75: 0f:9f:09:7c:78:af:0b:76:18:a6:9a:5a:a3:2f:2b: d8:ca:79:d6:3e:b5:04:7b:29:24:7c:ab:29:87:e0: cd:73:a6:19:80:80:b5:d5:0d:5f:65:9e:89:6a:80: 60:c9:37:6a:c0:15:fb:70:da:86:48:97:e0:e9:64: cb:fe:05:33:d8:ad:e5:f8:21:98:85:f6:21:94:08: c9:93:05:81:02:2d:37:4b:dc:d8:3d:f9:97:8d:1d: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:D6:6D:46:FE:AA:AF:43:F2:A9:88:65:95:10:DF:21:F5:D2:AB X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:68:91:70:29:09:a4:ab:ab:a2:6d:65:45:68:66:47:d5:b2: 0a:60:e6:8f:06:94:90:a7:80:06:e1:21:a7:15:ed:6d:a3:58: d5:5e:c7:9b:8c:38:d5:e6:f9:c9:df:e8:1c:04:ab:28:ef:19: 40:8d:8c:2d:f5:d7:c2:00:82:8e:6f:b5:42:ef:d3:11:3e:2c: 96:d3:8f:53:f8:3a:69:ff:51:95:54:2d:3d:65:64:a2:0c:01: 02:bb:e2:f4:41:20:26:16:4b:a0:70:b8:e0:9d:fe:30:ef:a4: aa:81:bf:7b:bd:92:24:9b:6c:05:b2:2a:3a:8e:80:6b:5b:fe: 3a:68:ab:4f:35:13:91:06:18:f9:71:75:17:88:8e:83:be:81: 8e:f6:61:ba:92:13:16:ab:09:d8:13:31:d6:df:7a:e4:ab:15: 7f:49:d6:02:0f:62:a8:28:29:3f:b2:c2:c1:f5:9c:91:41:a9: db:52:f8:10:0b:6e:fc:5a:d2:fa:89:06:4f:65:00:d3:9e:ac: 0c:3c:5a:a4:d1:76:7c:e1:fd:64:2c:5b:1e:41:45:e1:4a:4e: 9d:de:1a:8b:f8:5e:10:f1:eb:84:e5:7f:4d:c7:f2:a3:10:cb: b3:9c:a7:84:5f:9b:a1:47:a9:8b:a7:3a:d0:7f:23:f0:a1:8c: bf:8a:d7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjQwNTAyMTYzMzQxWhcNMjQwNTA5MTYzMzQxWjAYMRYwFAYD VQQDEw02NjMzYzA2NS03NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKx7dSuiI1k3xgbIFnDyKxLQrOLMbLCjSeJOFRi+XMMZ+dNrE3hKXxn/Jk1b KGZea38MpkhuFTd3vR6xsfPHtHKS8RWGn7nxmRXN+OuNQYeLVVxXT9Xak7DX0wr8 kKhdMreJPh8gQX5Tdq8tkukipPyiNCTdBzu71LPolEmRc1H4qEzzJFiotF4l4r7W 93CV0U54+lc35fPM+vhah3Wb9fLEpnUPnwl8eK8LdhimmlqjLyvYynnWPrUEeykk fKsph+DNc6YZgIC11Q1fZZ6JaoBgyTdqwBX7cNqGSJfg6WTL/gUz2K3l+CGYhfYh lAjJkwWBAi03S9zYPfmXjR3BoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYH1m1G /qqvQ/KpiGWVEN8h9dKrMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsaJFwKQmkq6uibWVFaGZH1bIKYOaPBpSQp4AG4SGnFe1to1jVXseb jDjV5vnJ3+gcBKso7xlAjYwt9dfCAIKOb7VC79MRPiyW049T+Dpp/1GVVC09ZWSi DAECu+L0QSAmFkugcLjgnf4w76Sqgb97vZIkm2wFsio6joBrW/46aKtPNRORBhj5 cXUXiI6DvoGO9mG6khMWqwnYEzHW33rkqxV/SdYCD2KoKCk/ssLB9ZyRQanbUvgQ C278WtL6iQZPZQDTnqwMPFqk0XZ84f1kLFseQUXhSk6d3hqL+F4Q8euE5X9Nx/Kj EMuznKeEX5uhR6mLpzrQfyPwoYy/itdw -----END CERTIFICATE-----Generated at Thu May 2 17:43:10 2024 by rpki-client on console-fra.rpki-client.org