$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: Y1DzqS+Ja/R7cTRf9JV9eHc8YqW3G7RgFJ2ziAXMSeU= Subject key identifier: 11:15:6C:1A:C1:4C:94:8A:C5:F7:77:23:8D:95:D1:00:09:86:C2:91 Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 0128 Signing time: Sun 05 May 2024 05:12:18 +0000 Manifest this update: Sun 05 May 2024 05:12:17 +0000 Manifest next update: Sun 12 May 2024 05:12:17 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: 21wMK8XOJzjj0KP9EbqKel13irjc7b06FqhsDbrI5yY=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: HIZgcNvtl7XXseeo2awaZPyaH+BjS1/nfvVEOdVq/qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: May 5 05:12:17 2024 GMT Not After : May 12 05:12:17 2024 GMT Subject: CN=66371531-8902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:b5:09:20:a6:d9:74:53:20:9d:07:be:e9: 91:2b:d2:79:b9:1d:3d:46:07:0b:9d:41:09:fd:c6: 87:45:63:94:1a:bb:a8:ac:8a:b2:be:35:2d:0d:74: 6c:4a:f5:4d:23:70:fc:e2:06:4b:e7:29:e5:8d:55: 46:d5:98:07:c8:f0:ed:cb:e3:c2:3f:a2:2e:78:4c: 0b:f2:58:bf:85:47:c4:bd:50:b2:78:54:31:b9:e6: 9b:d3:9a:1f:b0:95:13:e9:28:ac:4d:ab:07:55:a3: 3c:90:48:7c:c4:80:a2:ab:cd:33:e0:87:e2:db:4a: 07:05:c0:87:64:ab:5e:a6:2a:ab:6c:c6:cc:62:2b: 62:36:cf:40:0e:0d:bb:04:cc:2d:8a:94:a5:4d:ce: de:75:ec:57:51:df:15:44:ea:38:ab:46:27:18:7f: c6:c9:8a:18:47:b4:15:54:ae:8c:28:3d:45:f9:64: 2c:93:8c:aa:5d:1f:55:bb:fd:56:36:c8:b1:57:a7: 7f:ce:92:9d:6c:a0:6c:6b:dd:b7:28:02:3c:28:b2: 65:1c:09:84:2f:d9:ee:9b:81:59:11:6b:68:19:f5: a6:63:88:db:ff:a5:aa:10:24:06:28:66:24:5d:5d: 53:c3:e7:bc:d0:9b:7b:57:af:7f:65:97:73:51:a6: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:15:6C:1A:C1:4C:94:8A:C5:F7:77:23:8D:95:D1:00:09:86:C2:91 X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ee:19:66:ea:5a:8a:6c:8a:71:86:55:6a:71:83:ad:c2:51: 23:d5:b3:1b:7e:0a:61:f3:c9:8e:67:0d:d9:91:36:18:c5:56: 10:31:50:99:73:4a:76:eb:2a:ee:82:35:fa:6e:9b:c5:d9:f6: 79:68:64:70:41:78:17:7e:3b:4a:64:00:35:5a:64:80:8e:e9: 8c:ac:df:49:91:1b:ba:be:37:c7:b2:f2:12:58:23:a6:c8:b6: c1:c8:56:25:d0:da:d9:55:dc:80:49:a5:b5:7f:56:26:02:68: 39:a9:e5:48:43:b2:5c:b2:8c:23:7e:1a:eb:f8:5c:20:ba:87: 26:78:ec:1c:2a:f4:6c:28:bc:86:c5:d1:98:b2:fa:40:e3:a2: 06:5f:5a:fa:d5:28:5a:e9:93:b1:2e:bc:e6:99:a2:bd:e0:cb: 3b:36:ab:20:37:f2:86:c1:70:d8:09:4f:a5:49:c9:92:5e:c1: a3:53:d5:15:cf:a8:84:88:f4:dd:fb:15:e1:93:4a:25:fd:25: 72:73:21:f7:19:73:70:05:b5:61:63:d7:2f:32:eb:e0:80:b2: b7:d1:e3:50:e4:b8:b9:03:20:a0:4b:f4:55:9e:e2:d5:cd:b4: 32:90:90:40:26:51:08:40:ab:62:ae:f6:d5:22:09:da:67:9b: ca:68:ff:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjQwNTA1MDUxMjE3WhcNMjQwNTEyMDUxMjE3WjAYMRYwFAYD VQQDEw02NjM3MTUzMS04OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hq1CSCm2XRTIJ0HvumRK9J5uR09RgcLnUEJ/caHRWOUGruorIqyvjUtDXRs SvVNI3D84gZL5ynljVVG1ZgHyPDty+PCP6IueEwL8li/hUfEvVCyeFQxueab05of sJUT6SisTasHVaM8kEh8xICiq80z4Ifi20oHBcCHZKtepiqrbMbMYitiNs9ADg27 BMwtipSlTc7edexXUd8VROo4q0YnGH/GyYoYR7QVVK6MKD1F+WQsk4yqXR9Vu/1W NsixV6d/zpKdbKBsa923KAI8KLJlHAmEL9num4FZEWtoGfWmY4jb/6WqECQGKGYk XV1Tw+e80Jt7V69/ZZdzUaZuPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEVbBrB TJSKxfd3I42V0QAJhsKRMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/7hlm6lqKbIpxhlVqcYOtwlEj1bMbfgph88mOZw3ZkTYYxVYQMVCZ c0p26yrugjX6bpvF2fZ5aGRwQXgXfjtKZAA1WmSAjumMrN9JkRu6vjfHsvISWCOm yLbByFYl0NrZVdyASaW1f1YmAmg5qeVIQ7Jcsowjfhrr+FwguocmeOwcKvRsKLyG xdGYsvpA46IGX1r61Sha6ZOxLrzmmaK94Ms7NqsgN/KGwXDYCU+lScmSXsGjU9UV z6iEiPTd+xXhk0ol/SVycyH3GXNwBbVhY9cvMuvggLK30eNQ5Li5AyCgS/RVnuLV zbQykJBAJlEIQKtirvbVIgnaZ5vKaP8J -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org