$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json) Hash identifier: /WyyGP+8l9O6AcC9ltiRiqv/263GOh8O+P5IlLm4eu0= Subject key identifier: B1:0F:20:2C:7B:1F:FC:C6:E7:6E:DB:4C:2E:B6:12:10:21:1E:A8:50 Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft Manifest number: 0111 Signing time: Sat 25 May 2024 05:38:59 +0000 Manifest this update: Sat 25 May 2024 05:38:59 +0000 Manifest next update: Sat 01 Jun 2024 05:38:59 +0000 Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: ncav8KGlWkuhmDsiSc3OuMqSbC0rqei+lG1bUUFpstc=) 2: 9FD3C9A876CD11ED8D13115FC4F9AE02.roa (hash: 9NOS/qzTtQlZINQzhiSdEH0DxdfVySuxtQS2iMKS2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Validity Not Before: May 25 05:38:59 2024 GMT Not After : Jun 1 05:38:59 2024 GMT Subject: CN=66517973-33d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:b3:50:24:be:5f:87:94:1e:c7:52:37:40: ff:09:4c:8d:27:8c:e1:c9:84:01:59:ff:e3:10:2b: de:5c:1e:84:97:12:cd:51:ca:3b:76:63:90:fa:3a: 85:ae:32:04:44:dc:88:02:c2:73:d6:4c:2c:b7:7d: d4:65:a0:bb:67:33:d1:6a:1c:a0:22:49:3e:d4:d5: 6e:ea:af:29:1b:3b:18:88:e2:7a:2d:69:c7:f1:11: 09:e2:bd:14:65:b2:70:b3:d9:c2:3b:b4:95:e7:cb: ab:be:4d:37:eb:8c:bb:4a:44:ce:2d:38:93:73:99: 4d:38:11:04:98:e0:e9:a1:8a:34:d0:72:ec:88:7b: 00:5a:f6:13:8f:41:2a:47:f9:4a:c9:92:32:00:47: 23:c7:94:c7:d8:33:2b:2e:b5:8a:6d:13:a5:10:4f: f9:a3:bd:c5:12:47:e6:69:e7:8e:64:b3:23:ce:6c: 2d:fa:19:0e:5f:32:ff:b8:ee:99:02:a4:f0:5c:e2: 7d:f5:6f:a9:1c:a8:aa:47:46:73:34:22:a6:b8:2c: b6:0b:64:2a:ae:a9:24:de:af:13:35:9e:a5:b0:94: be:0f:10:ac:21:ba:56:69:46:57:24:6b:77:2b:89: 61:21:cd:c1:3d:30:b8:8a:44:f0:11:53:21:49:32: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:20:2C:7B:1F:FC:C6:E7:6E:DB:4C:2E:B6:12:10:21:1E:A8:50 X509v3 Authority Key Identifier: keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7e:12:c4:02:a6:6c:f0:5f:54:e2:cb:b5:d0:e4:ba:3e:25: 74:34:92:51:ce:df:fd:29:b0:89:8f:72:2b:9c:24:1b:f8:3a: 54:21:0f:4f:31:d7:00:71:d7:83:f7:30:8c:5c:5c:37:c5:1a: d7:14:e5:8c:68:68:2c:f9:bb:db:2c:d8:87:6c:18:f6:87:56: 4b:2f:94:e0:a4:6f:93:d7:3e:72:ac:cc:43:ac:1c:6a:bc:3f: 9c:35:05:fe:00:11:42:56:d8:30:aa:46:d1:09:73:b0:38:f3: 90:e1:81:11:c2:21:0a:ab:0f:ca:3c:9c:a2:33:93:c3:ce:5d: 89:d8:ef:b7:3f:0c:97:30:b4:78:86:79:ad:38:65:3b:d1:6d: 99:d9:0b:8c:0e:03:e5:49:db:87:d3:95:1c:47:f4:d7:2a:e9: 24:b7:95:73:ca:5f:30:a8:a1:24:4b:7f:01:1c:e3:2a:24:b9: c8:a0:db:ed:27:44:dc:42:d3:c7:f7:f0:fe:4d:dd:e2:c7:d1: 01:ae:5d:44:11:30:c8:11:48:87:9f:8b:53:74:96:eb:98:aa: de:02:d0:79:f6:21:97:97:71:5e:6a:de:a0:da:32:98:20:72: 7c:42:19:47:85:37:cc:af:97:4b:52:9e:5d:23:b1:f3:16:2a: bb:fa:c6:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzQTUxMTAvBgNVBAUTKDM1MUNFRURDMzdGODA1NDcyRjFCNjFCQUM2NDNGRTU0 RUUwMTg5NkIwHhcNMjQwNTI1MDUzODU5WhcNMjQwNjAxMDUzODU5WjAYMRYwFAYD VQQDEw02NjUxNzk3My0zM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzizUCS+X4eUHsdSN0D/CUyNJ4zhyYQBWf/jECveXB6ElxLNUco7dmOQ+jqF rjIERNyIAsJz1kwst33UZaC7ZzPRahygIkk+1NVu6q8pGzsYiOJ6LWnH8REJ4r0U ZbJws9nCO7SV58urvk0364y7SkTOLTiTc5lNOBEEmODpoYo00HLsiHsAWvYTj0Eq R/lKyZIyAEcjx5TH2DMrLrWKbROlEE/5o73FEkfmaeeOZLMjzmwt+hkOXzL/uO6Z AqTwXOJ99W+pHKiqR0ZzNCKmuCy2C2Qqrqkk3q8TNZ6lsJS+DxCsIbpWaUZXJGt3 K4lhIc3BPTC4ikTwEVMhSTL55QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEPICx7 H/zG527bTC62EhAhHqhQMB8GA1UdIwQYMBaAFDUc7tw3+AVHLxthusZD/lTuAYlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNBNS9DQjU0OUQyQzc2 QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJVY3ZHMkc2eGtQLVZPNEJp V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05SenUzRGY0QlVjdkcyRzZ4a1AtVk80QmlXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNBNS9DQjU0OUQyQzc2QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJV Y3ZHMkc2eGtQLVZPNEJpV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9fhLEAqZs8F9U4su10OS6PiV0NJJRzt/9KbCJj3IrnCQb+DpUIQ9P MdcAcdeD9zCMXFw3xRrXFOWMaGgs+bvbLNiHbBj2h1ZLL5TgpG+T1z5yrMxDrBxq vD+cNQX+ABFCVtgwqkbRCXOwOPOQ4YERwiEKqw/KPJyiM5PDzl2J2O+3PwyXMLR4 hnmtOGU70W2Z2QuMDgPlSduH05UcR/TXKukkt5Vzyl8wqKEkS38BHOMqJLnIoNvt J0TcQtPH9/D+Td3ix9EBrl1EETDIEUiHn4tTdJbrmKreAtB59iGXl3Feat6g2jKY IHJ8QhlHhTfMr5dLUp5dI7HzFiq7+sYG -----END CERTIFICATE-----Generated at Sat May 25 06:26:53 2024 by rpki-client on console-fra.rpki-client.org