$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: yIQulA2vuPWOGhiGkNMZNlPa3MXdE27tNiECSb5USzk= Subject key identifier: 39:10:5F:0C:DC:9C:AF:6E:21:FE:47:D5:CE:5C:4D:85:39:9A:60:41 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 0737 Signing time: Fri 26 Apr 2024 22:28:48 +0000 Manifest this update: Fri 26 Apr 2024 22:28:47 +0000 Manifest next update: Fri 03 May 2024 22:28:47 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: mv3vj+nipb/IdTVjf1s3qyrn3FTuutgGgrjRmbdNTYc=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: vN/dANQFbTJxxRHMI9ZludqJZ1NmcGlANCvolM21fwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Apr 26 22:28:47 2024 GMT Not After : May 3 22:28:47 2024 GMT Subject: CN=662c2a9f-246b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:a0:05:d4:2b:36:27:cf:1a:86:78:d5:e0: 94:41:a2:0f:30:59:93:26:ad:ab:b6:6f:65:62:71: a2:b0:40:c2:66:ef:2d:bc:d0:13:25:15:cd:5f:22: 8b:19:e2:d5:57:df:cf:5a:5f:18:8b:9c:a5:bd:21: 0c:ba:14:e1:67:20:dc:7f:7d:bf:69:96:32:70:96: 5e:b9:dd:7e:26:13:97:4d:45:57:41:e6:50:5f:69: 75:1f:8c:da:71:20:49:9f:a2:ed:97:2d:8b:5a:bd: f3:59:94:4d:8e:17:71:2d:a8:d2:3e:b3:1f:0f:66: 74:f1:ba:49:77:68:29:91:7d:dc:ae:93:fd:cb:9b: 38:91:96:34:17:a1:71:53:48:7c:1e:7b:6e:97:d3: 8c:50:6b:3d:be:5f:09:00:db:72:b4:32:0c:be:bb: 88:39:5e:e8:19:4b:8f:67:94:f9:f6:2d:19:0f:bc: 73:fa:9c:8f:a5:25:be:f7:e0:49:55:88:38:58:35: 6d:73:91:74:91:c7:c0:57:18:31:07:ab:0f:a0:61: 19:69:11:46:8c:d2:f1:5c:e6:3f:f9:bd:3d:3d:3a: 09:86:8d:ab:3a:97:d4:d7:2f:4a:e5:5d:58:8b:bb: 7d:59:16:69:a1:27:23:d5:2d:43:8a:de:e3:3a:55: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:5F:0C:DC:9C:AF:6E:21:FE:47:D5:CE:5C:4D:85:39:9A:60:41 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:fc:62:2d:30:8a:0c:6c:36:b4:db:b4:d9:92:7e:91:33: b7:e3:93:8e:dc:57:43:b7:f7:a4:e6:4a:23:db:78:3d:25:91: c2:56:ac:b9:00:92:77:d2:1e:c8:5e:30:0a:12:7d:ce:24:0a: 9b:92:31:e2:a1:0f:3b:a6:a8:5c:d5:8f:0e:40:fd:3a:b8:e2: 26:4b:86:5d:6a:f8:fa:ea:7d:3a:e5:c9:0e:18:fa:7d:11:6e: 20:a8:44:c7:55:17:56:3d:d5:4d:64:bd:fc:fc:8e:5a:dd:f4: e8:16:7a:65:85:ed:3f:dd:65:53:8f:f7:d1:72:52:e9:07:b1: 58:8c:dc:f1:8c:ff:45:cf:f5:bf:f2:b4:4b:7d:a6:ee:e6:51: d1:5b:1f:48:eb:66:a5:2f:84:0a:f7:80:a8:31:e6:d9:32:07: 21:40:aa:db:0d:1e:fd:e4:96:9a:2f:64:c2:4b:f6:72:37:e9: 65:3e:8f:46:a9:2c:f3:07:81:fc:a2:f6:88:7b:7c:b4:f8:cb: f9:44:2c:1d:5a:a8:1c:2b:16:fc:95:53:bd:ab:ec:57:07:1b: 1b:ca:5b:b1:22:43:00:6f:ed:9a:03:55:fa:aa:36:41:c9:13: d4:ac:cc:16:6e:bf:4d:f4:0c:7d:cb:cd:29:62:a4:a2:79:fb: 09:38:a1:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjQwNDI2MjIyODQ3WhcNMjQwNTAzMjIyODQ3WjAYMRYwFAYD VQQDEw02NjJjMmE5Zi0yNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF2gBdQrNifPGoZ41eCUQaIPMFmTJq2rtm9lYnGisEDCZu8tvNATJRXNXyKL GeLVV9/PWl8Yi5ylvSEMuhThZyDcf32/aZYycJZeud1+JhOXTUVXQeZQX2l1H4za cSBJn6Ltly2LWr3zWZRNjhdxLajSPrMfD2Z08bpJd2gpkX3crpP9y5s4kZY0F6Fx U0h8Hntul9OMUGs9vl8JANtytDIMvruIOV7oGUuPZ5T59i0ZD7xz+pyPpSW+9+BJ VYg4WDVtc5F0kcfAVxgxB6sPoGEZaRFGjNLxXOY/+b09PToJho2rOpfU1y9K5V1Y i7t9WRZpoScj1S1Dit7jOlUPDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkQXwzc nK9uIf5H1c5cTYU5mmBBMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO0fxiLTCKDGw2tNu02ZJ+kTO345OO3FdDt/ek5koj23g9JZHCVqy5 AJJ30h7IXjAKEn3OJAqbkjHioQ87pqhc1Y8OQP06uOImS4Zdavj66n065ckOGPp9 EW4gqETHVRdWPdVNZL38/I5a3fToFnplhe0/3WVTj/fRclLpB7FYjNzxjP9Fz/W/ 8rRLfabu5lHRWx9I62alL4QK94CoMebZMgchQKrbDR795JaaL2TCS/ZyN+llPo9G qSzzB4H8ovaIe3y0+Mv5RCwdWqgcKxb8lVO9q+xXBxsbyluxIkMAb+2aA1X6qjZB yRPUrMwWbr9N9Ax9y80pYqSiefsJOKGr -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org