$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: fHBvbRVlBVYqcYMOs1npfKZOHGa216JYx06KTuXDbEk= Subject key identifier: 49:FC:29:21:69:8A:DD:13:E4:7F:03:A1:A8:2D:E9:4B:1F:3E:21:30 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 0831 Signing time: Fri 26 Apr 2024 21:44:13 +0000 Manifest this update: Fri 26 Apr 2024 21:44:13 +0000 Manifest next update: Fri 03 May 2024 21:44:13 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: LkG/tZh68nz133jzi4GsbDBAUyZyYWtukZTVPXfhMbY=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: gEu0ijhyj0r+0z14Ka2hm7sOceLx+LnbF4hfMxdOez4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Apr 26 21:44:13 2024 GMT Not After : May 3 21:44:13 2024 GMT Subject: CN=662c202d-93dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:3e:bc:38:fe:74:2c:27:38:9e:c7:78:97: 50:c0:09:03:69:4b:b6:83:02:b0:f5:22:3c:e7:45: 3a:d5:bb:18:95:73:d4:53:fb:a9:40:24:a1:52:b3: bf:0b:85:b7:2d:32:2a:35:2c:75:36:d3:78:ee:81: 34:1f:ed:01:fd:3a:33:0f:00:20:61:c9:e0:52:c5: 05:c1:a8:f7:89:70:ff:c8:c3:2a:94:9e:7c:31:3d: b6:d4:67:3a:80:b9:95:c1:12:7d:85:d9:e5:e5:34: 72:f9:95:d7:7f:1e:7c:09:ca:a5:31:ea:a0:c3:e7: 50:60:d8:3a:6d:37:bc:87:70:52:cd:98:ae:04:1c: 61:42:b2:fc:f7:49:75:2c:d8:2b:7e:75:dc:00:ad: 29:52:d2:12:af:c5:c9:3c:42:68:50:d1:3e:75:50: e3:c0:41:88:c9:12:35:8a:d6:ba:f8:be:07:e6:75: a9:72:6b:f5:2c:7a:39:0c:22:34:7a:6c:df:58:3a: b1:0f:22:71:27:0e:16:ce:43:8c:a0:76:10:3e:4e: dc:63:5f:4c:27:ac:c9:82:0f:92:fc:7c:2c:37:da: 0b:30:75:50:59:ec:9c:fa:f7:e7:8b:f4:c0:48:2e: 7d:a3:a8:d7:cc:bd:ff:ee:cd:1e:4c:35:7e:61:32: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:29:21:69:8A:DD:13:E4:7F:03:A1:A8:2D:E9:4B:1F:3E:21:30 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a0:11:5c:cd:42:80:5d:fc:a0:56:e8:c5:79:5d:82:00:54: 7f:04:63:b9:dd:ac:ca:59:0e:dc:8b:48:8e:17:74:5b:99:e6: 39:a1:a2:88:e3:84:50:e1:e2:62:27:e8:0c:b9:34:68:58:58: 19:b4:bb:15:aa:e2:97:f8:be:81:0f:88:86:a3:1b:7a:2f:2b: 86:16:fe:ae:c0:05:a0:06:15:fe:4b:ce:a7:61:ae:cd:1d:6c: dc:bb:9f:e8:4d:1d:f3:33:1f:5f:c2:83:87:d0:5e:11:36:ae: 04:76:10:11:95:63:a6:80:d5:46:d9:73:e4:ca:28:a8:8d:cb: 06:54:94:c4:b6:dc:2f:a2:cf:27:f3:90:9c:3b:d6:e1:db:b8: 26:6a:49:53:92:bf:4d:d5:5f:05:3b:26:cf:d0:73:e8:50:7f: 03:e9:5e:db:8e:47:b8:c1:b5:41:30:59:2e:fa:95:a5:f6:20: 46:51:3f:01:cf:32:cd:a6:ab:5d:af:35:5c:d1:dd:56:5c:4d: 20:c0:ea:59:c3:b2:41:fe:6e:6c:fe:4f:2c:83:5c:fb:d6:13: c6:82:f0:a9:00:79:58:38:e3:52:f7:3c:73:f4:55:51:08:f2: cb:3e:63:92:33:fa:85:74:04:44:ab:9b:38:bc:4d:a9:0b:02: dc:b4:d1:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjQwNDI2MjE0NDEzWhcNMjQwNTAzMjE0NDEzWjAYMRYwFAYD VQQDEw02NjJjMjAyZC05M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy4+vDj+dCwnOJ7HeJdQwAkDaUu2gwKw9SI850U61bsYlXPUU/upQCShUrO/ C4W3LTIqNSx1NtN47oE0H+0B/TozDwAgYcngUsUFwaj3iXD/yMMqlJ58MT221Gc6 gLmVwRJ9hdnl5TRy+ZXXfx58CcqlMeqgw+dQYNg6bTe8h3BSzZiuBBxhQrL890l1 LNgrfnXcAK0pUtISr8XJPEJoUNE+dVDjwEGIyRI1ita6+L4H5nWpcmv1LHo5DCI0 emzfWDqxDyJxJw4WzkOMoHYQPk7cY19MJ6zJgg+S/HwsN9oLMHVQWeyc+vfni/TA SC59o6jXzL3/7s0eTDV+YTLJDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEn8KSFp it0T5H8Doagt6UsfPiEwMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6oBFczUKAXfygVujFeV2CAFR/BGO53azKWQ7ci0iOF3RbmeY5oaKI 44RQ4eJiJ+gMuTRoWFgZtLsVquKX+L6BD4iGoxt6LyuGFv6uwAWgBhX+S86nYa7N HWzcu5/oTR3zMx9fwoOH0F4RNq4EdhARlWOmgNVG2XPkyiiojcsGVJTEttwvos8n 85CcO9bh27gmaklTkr9N1V8FOybP0HPoUH8D6V7bjke4wbVBMFku+pWl9iBGUT8B zzLNpqtdrzVc0d1WXE0gwOpZw7JB/m5s/k8sg1z71hPGgvCpAHlYOONS9zxz9FVR CPLLPmOSM/qFdAREq5s4vE2pCwLctNHG -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:58 2024 by rpki-client on console-ams.rpki-client.org