$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json) Hash identifier: mTrEdBA1c0jYRS9MOumCJAkigRhWL+4cAUDL7mBb5iI= Subject key identifier: 17:AD:97:28:94:00:0C:5F:2D:D9:BC:3D:CB:ED:E2:20:8C:6A:5A:CA Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft Manifest number: 0151 Signing time: Fri 03 May 2024 04:59:25 +0000 Manifest this update: Fri 03 May 2024 04:59:25 +0000 Manifest next update: Fri 10 May 2024 04:59:25 +0000 Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: z2jZYMqW65Z73A/5MT9vS/DpW3ZVt1472vvduhYB5Zo=) 2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: tFNYEcp1qebl+b5vQFwsNNGqa31iH52HgM1l7UFEEsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Validity Not Before: May 3 04:59:25 2024 GMT Not After : May 10 04:59:25 2024 GMT Subject: CN=66346f2d-f890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:da:0e:70:8d:93:17:24:da:9c:0e:44:a7: 6a:c5:2a:6c:71:db:a4:4f:c9:ea:98:58:5c:2b:da: 6e:d2:70:fb:59:20:7d:09:38:4f:0f:65:49:07:d3: ad:be:79:bf:a0:01:fd:bf:c6:76:2c:e7:c4:9e:c3: ca:6c:ae:9f:5c:ac:d5:a1:3a:08:1b:58:d9:71:20: fc:52:2a:cd:b0:7c:1e:bd:38:2e:11:30:8e:0b:12: e0:d3:f8:59:2f:fa:a1:ed:07:1e:18:e6:cc:e7:a5: ea:3a:c2:19:95:03:3a:7a:d7:56:bc:8d:35:c4:ba: 72:37:b9:00:02:57:fb:d2:87:d2:48:10:c2:a2:c4: 29:6d:01:c4:14:d3:fd:6e:f6:d2:71:7d:11:03:80: b8:8d:da:c0:bd:78:38:f4:8e:c3:ad:3a:d3:87:6f: c2:3c:05:ae:63:4f:e5:45:a8:0b:fb:b4:5e:e2:c5: 8d:2c:83:48:db:4e:19:74:ae:79:16:cb:37:ae:ca: 53:55:bb:01:ae:ee:f9:86:2e:0c:b4:5a:8e:dc:62: 27:e5:da:4f:f5:0d:af:ee:24:13:8e:a9:e0:bb:e1: 4a:87:0e:a2:fd:19:74:f2:43:63:de:91:2c:70:c5: 75:cc:af:90:88:6d:d3:0d:af:df:a1:83:ff:21:fb: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AD:97:28:94:00:0C:5F:2D:D9:BC:3D:CB:ED:E2:20:8C:6A:5A:CA X509v3 Authority Key Identifier: keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:39:c3:4a:b1:7b:3f:36:b3:29:26:d0:0f:7e:88:e7:09: 28:ba:cd:11:93:af:3d:15:41:6d:b0:f9:97:e5:84:15:e3:3a: 83:0b:3a:9f:f3:72:f2:e9:52:58:df:70:0f:fb:23:58:00:e1: 82:87:f8:49:d8:b6:e3:a0:b5:e4:3f:09:a1:e2:85:58:66:06: 1c:35:e8:be:a1:66:26:6d:55:62:6a:0b:8c:8b:b2:11:d0:6d: da:bb:74:30:b3:f5:45:1a:ea:88:7b:9d:ca:eb:c6:ed:49:a5: df:a7:7c:b9:9b:55:fa:9a:de:34:49:3b:fa:e8:0e:d7:fa:43: 00:17:b4:27:59:f2:a5:e2:b4:f5:04:4f:87:99:68:d3:cb:de: 88:0e:be:34:46:ef:e7:d4:3b:94:bb:d4:13:56:e9:54:f1:52: b0:15:82:21:64:8d:f8:48:b1:61:2a:14:0c:bd:5e:9d:e9:3c: fe:b0:30:e0:49:fb:b6:ef:d4:e5:59:b5:56:bc:b2:b1:fb:55: b8:a8:75:d4:a6:02:6d:b2:44:36:18:8b:94:81:e5:3c:c7:bf: 3c:9c:98:fc:9a:7f:b6:a1:bb:e9:52:5e:ad:b6:fc:3a:d0:6c: 8d:16:19:3c:b4:03:ae:e8:0e:ed:95:2a:62:e1:fc:91:4a:db: 6e:5a:51:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5 MzExMEEyMDgwHhcNMjQwNTAzMDQ1OTI1WhcNMjQwNTEwMDQ1OTI1WjAYMRYwFAYD VQQDEw02NjM0NmYyZC1mODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zXaDnCNkxck2pwORKdqxSpscdukT8nqmFhcK9pu0nD7WSB9CThPD2VJB9Ot vnm/oAH9v8Z2LOfEnsPKbK6fXKzVoToIG1jZcSD8UirNsHwevTguETCOCxLg0/hZ L/qh7QceGObM56XqOsIZlQM6etdWvI01xLpyN7kAAlf70ofSSBDCosQpbQHEFNP9 bvbScX0RA4C4jdrAvXg49I7DrTrTh2/CPAWuY0/lRagL+7Re4sWNLINI204ZdK55 Fss3rspTVbsBru75hi4MtFqO3GIn5dpP9Q2v7iQTjqngu+FKhw6i/Rl08kNj3pEs cMV1zK+QiG3TDa/foYP/IfuhywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBetlyiU AAxfLdm8Pcvt4iCMalrKMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACtznDSrF7PzazKSbQD36I5wkous0Rk689FUFtsPmX5YQV4zqDCzqf 83Ly6VJY33AP+yNYAOGCh/hJ2LbjoLXkPwmh4oVYZgYcNei+oWYmbVViaguMi7IR 0G3au3Qws/VFGuqIe53K68btSaXfp3y5m1X6mt40STv66A7X+kMAF7QnWfKl4rT1 BE+HmWjTy96IDr40Ru/n1DuUu9QTVulU8VKwFYIhZI34SLFhKhQMvV6d6Tz+sDDg Sfu279TlWbVWvLKx+1W4qHXUpgJtskQ2GIuUgeU8x788nJj8mn+2obvpUl6ttvw6 0GyNFhk8tAOu6A7tlSpi4fyRSttuWlEp -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org