$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: HnINWob+dHxZ+PoW84T6Rj3fuLXtEERaO/8K0IMUZ6c= Subject key identifier: D8:F9:B5:A8:C3:4B:1D:FD:33:71:82:49:A1:8A:5E:3D:1D:4C:1A:19 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 33DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 33CF Signing time: Thu 02 May 2024 15:11:18 +0000 Manifest this update: Thu 02 May 2024 15:11:17 +0000 Manifest next update: Thu 09 May 2024 15:11:17 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: WpEPGydAt3xVAo9OAPEu9U7zaXI7nWNxBvFxl72RHfw=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: Y9VWafh22KU7OnWVXkmUJUXKGTh789Edf5KDIHOIQCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13275 (0x33db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: May 2 15:11:17 2024 GMT Not After : May 9 15:11:17 2024 GMT Subject: CN=6633ad15-0c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:4a:e1:05:07:0f:97:57:b4:57:40:5c:92: df:04:b6:5f:5e:cb:11:8e:16:5e:eb:5d:be:53:a0: 5b:0c:b9:b4:5f:04:01:b2:4b:aa:2c:05:03:ae:a1: a4:c5:d7:e2:6c:66:b0:50:05:40:49:11:5e:46:8e: 7f:02:bf:d9:df:e8:ca:17:2f:bc:24:85:5b:25:e1: 6c:92:03:e4:c5:d4:f5:cc:af:87:eb:7e:0a:0c:5c: 66:1f:56:4d:c9:b2:a2:71:75:b4:e6:b4:b2:61:dd: c5:ea:c8:70:b1:e9:07:70:9a:9b:2c:d8:f2:73:bc: 98:6d:a6:c0:bd:82:5d:7e:33:b5:2c:45:74:7b:ca: 38:cc:49:4c:6d:bf:bd:d7:9c:6e:29:11:4c:1d:d7: c2:23:a0:72:a9:dd:96:3b:ba:8d:86:aa:e1:f2:7f: 1c:f8:ff:b1:2d:ba:23:53:cd:35:94:b8:49:c9:7d: 62:98:7e:ba:ae:f6:14:79:9f:8f:8e:3a:73:e9:a8: 67:9d:a0:50:2a:f7:16:2e:81:d4:44:d1:ab:0e:66: 4d:ab:98:87:d8:25:9c:99:eb:a5:0e:61:20:14:49: f6:00:d4:6f:61:96:36:47:09:16:2d:7b:cc:24:75: 92:f3:d8:ad:bf:52:4c:d6:7b:78:31:18:d2:0e:6e: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:B5:A8:C3:4B:1D:FD:33:71:82:49:A1:8A:5E:3D:1D:4C:1A:19 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:fe:93:37:e7:fd:90:58:18:59:62:86:52:b7:3e:6e:e8:19: 5b:dd:2c:fd:d1:fd:73:b3:02:33:5a:17:cb:13:8a:39:53:eb: 8c:ba:ac:d5:5c:51:2a:b4:ee:d4:47:eb:f9:2c:f1:da:4d:22: 93:8c:40:47:a2:7f:58:74:d2:00:85:37:16:e0:ef:c7:ff:88: 4e:64:ea:c1:79:82:67:06:32:ec:4a:89:29:5c:91:43:3a:61: 51:be:f4:5a:ec:98:bf:8a:9b:6e:d8:4d:0c:9a:76:bc:ef:27: 6e:e8:a5:f1:ff:d2:3e:c6:cd:40:90:19:05:59:f0:88:20:35: 70:62:9b:15:fc:d9:3b:2d:0b:f5:36:26:c1:d1:cb:2a:a2:e8: 8b:55:f7:01:75:dc:88:13:6b:6d:76:3d:03:65:84:e2:69:af: 5b:84:40:f5:a6:6b:9f:f8:fd:a3:e2:ec:d6:ed:ca:87:2d:74: ad:5d:3a:f3:64:5a:97:e3:96:aa:72:5a:db:01:39:33:ca:6f: 12:7c:07:5e:65:ff:63:2c:70:7f:a6:63:f7:25:8d:1c:35:ce: 4b:ec:da:34:3c:15:ff:10:fa:fd:ac:8c:f4:78:19:93:a3:d8: ca:e5:bf:5b:84:fb:96:de:66:b2:11:73:d7:56:65:ae:7c:21: b1:b8:95:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjQwNTAyMTUxMTE3WhcNMjQwNTA5MTUxMTE3WjAYMRYwFAYD VQQDEw02NjMzYWQxNS0wYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3xK4QUHD5dXtFdAXJLfBLZfXssRjhZe612+U6BbDLm0XwQBskuqLAUDrqGk xdfibGawUAVASRFeRo5/Ar/Z3+jKFy+8JIVbJeFskgPkxdT1zK+H634KDFxmH1ZN ybKicXW05rSyYd3F6shwsekHcJqbLNjyc7yYbabAvYJdfjO1LEV0e8o4zElMbb+9 15xuKRFMHdfCI6Byqd2WO7qNhqrh8n8c+P+xLbojU801lLhJyX1imH66rvYUeZ+P jjpz6ahnnaBQKvcWLoHURNGrDmZNq5iH2CWcmeulDmEgFEn2ANRvYZY2RwkWLXvM JHWS89itv1JM1nt4MRjSDm7SgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj5tajD Sx39M3GCSaGKXj0dTBoZMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7/pM35/2QWBhZYoZStz5u6Blb3Sz90f1zswIzWhfLE4o5U+uMuqzV XFEqtO7UR+v5LPHaTSKTjEBHon9YdNIAhTcW4O/H/4hOZOrBeYJnBjLsSokpXJFD OmFRvvRa7Ji/iptu2E0Mmna87ydu6KXx/9I+xs1AkBkFWfCIIDVwYpsV/Nk7LQv1 NibB0csqouiLVfcBddyIE2ttdj0DZYTiaa9bhED1pmuf+P2j4uzW7cqHLXStXTrz ZFqX45aqclrbATkzym8SfAdeZf9jLHB/pmP3JY0cNc5L7No0PBX/EPr9rIz0eBmT o9jK5b9bhPuW3mayEXPXVmWufCGxuJXU -----END CERTIFICATE-----Generated at Thu May 2 17:43:45 2024 by rpki-client on console-fra.rpki-client.org