$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: PPnrFWI2eSX+IdudHGlXp1OpVsfHQh4fx3pZWQdrWns= Subject key identifier: 84:12:CF:0E:95:A1:AF:4B:B8:D7:87:62:74:89:EB:7A:D5:EF:56:24 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0BB3 Signing time: Sat 04 May 2024 19:20:29 +0000 Manifest this update: Sat 04 May 2024 19:20:28 +0000 Manifest next update: Sat 11 May 2024 19:20:28 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: CZI1TzDeJ1gKW8M3EZGO/36rTQGFlhEXKWianpMi6mU=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: 6gIjrF99/wAv0IJmO9Ky10oDg62lrui5eFj9go2VtnY=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nC5w9TCzp4SV3Db1Ys8xIWCRbyZvrHjrm8RrtnxmKcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: May 4 19:20:28 2024 GMT Not After : May 11 19:20:28 2024 GMT Subject: CN=66368a7d-0664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:29:0c:d4:f9:6a:70:24:0b:df:ab:b7:50: 6f:14:34:c4:46:45:53:bb:9a:a0:83:fc:6f:b6:80: ac:1f:f6:7a:94:17:43:ef:43:4e:c4:a8:fd:ce:5d: 54:00:9f:9c:f6:df:83:f9:be:13:03:d5:d3:28:5f: f8:2c:e9:aa:21:18:9e:07:65:71:67:02:23:b0:82: 92:fa:9c:a6:b5:40:db:ef:d6:0d:82:c0:64:65:d1: c8:2c:a3:7d:44:6d:a2:d8:d2:68:2d:c5:46:67:16: 6a:83:6a:77:ab:06:8a:23:4c:8a:33:71:81:0b:31: 18:cf:0a:9a:34:26:20:23:1a:2f:a5:1b:81:ee:5f: b3:be:72:2b:81:87:34:0a:a7:af:b9:e4:dd:3a:9b: c4:e3:f8:75:73:5f:91:0c:08:d4:e9:73:71:2a:e9: 1f:b1:d3:15:82:e1:0e:68:62:8c:26:a6:d2:ae:d4: be:26:3d:21:fa:db:0d:42:8b:de:55:ad:b2:d8:bc: 38:38:9f:76:1b:19:87:30:0e:86:22:a8:72:8a:73: 24:c7:4f:b9:22:0c:76:1d:2b:c1:d7:84:5d:ee:41: 3c:45:28:36:84:0d:06:97:a1:53:03:80:fa:74:e4: ab:08:0c:20:0c:27:9e:c7:cf:d5:46:f7:10:08:03: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:CF:0E:95:A1:AF:4B:B8:D7:87:62:74:89:EB:7A:D5:EF:56:24 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:98:64:74:a2:4d:cc:88:bc:a7:d0:01:f0:a4:f4:d5:8d:5f: 90:60:ea:67:0f:87:a3:07:89:c4:e8:18:42:a1:6b:24:e2:08: 8d:37:4d:1a:7d:b3:29:ef:6d:84:b9:98:3e:65:84:80:2c:ff: 39:aa:fa:22:79:8f:ed:6e:21:7c:d5:af:91:dd:5a:25:24:5a: 17:f3:5c:b7:c0:0b:3e:66:7c:a7:1f:27:f3:cb:4b:33:0c:3c: c7:f7:3d:90:c2:29:9b:57:84:47:1b:96:3b:7d:c0:dc:b1:65: 3b:dd:7b:04:bb:21:8a:b8:be:ad:1f:81:42:c8:7e:92:86:09: da:bc:45:89:36:a3:5e:4f:7a:ec:83:b6:82:4b:b4:c7:02:73: 0c:b0:dd:79:98:85:84:3b:3f:f8:bb:ea:54:06:7f:52:8d:0a: d0:57:72:8f:23:4a:a6:9d:40:c1:f8:ce:ed:28:d5:e8:07:3a: 41:cd:cc:78:9d:0e:ab:2b:e0:f2:98:d9:57:06:fe:fd:eb:cc: 6a:ad:cd:e3:90:b9:a6:5d:12:e8:e1:b4:53:62:36:c5:ae:bd: 40:f9:97:41:d5:5b:4f:15:a0:6e:cb:12:c8:ac:2e:76:83:5a: 53:29:33:90:f9:ab:cf:c8:bc:59:77:e8:bc:ca:1f:70:96:a6: 3f:16:43:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjQwNTA0MTkyMDI4WhcNMjQwNTExMTkyMDI4WjAYMRYwFAYD VQQDEw02NjM2OGE3ZC0wNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy30pDNT5anAkC9+rt1BvFDTERkVTu5qgg/xvtoCsH/Z6lBdD70NOxKj9zl1U AJ+c9t+D+b4TA9XTKF/4LOmqIRieB2VxZwIjsIKS+pymtUDb79YNgsBkZdHILKN9 RG2i2NJoLcVGZxZqg2p3qwaKI0yKM3GBCzEYzwqaNCYgIxovpRuB7l+zvnIrgYc0 CqevueTdOpvE4/h1c1+RDAjU6XNxKukfsdMVguEOaGKMJqbSrtS+Jj0h+tsNQove Va2y2Lw4OJ92GxmHMA6GIqhyinMkx0+5Igx2HSvB14Rd7kE8RSg2hA0Gl6FTA4D6 dOSrCAwgDCeex8/VRvcQCAMvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQSzw6V oa9LuNeHYnSJ63rV71YkMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlmGR0ok3MiLyn0AHwpPTVjV+QYOpnD4ejB4nE6BhCoWsk4giNN00a fbMp722EuZg+ZYSALP85qvoieY/tbiF81a+R3VolJFoX81y3wAs+ZnynHyfzy0sz DDzH9z2QwimbV4RHG5Y7fcDcsWU73XsEuyGKuL6tH4FCyH6ShgnavEWJNqNeT3rs g7aCS7THAnMMsN15mIWEOz/4u+pUBn9SjQrQV3KPI0qmnUDB+M7tKNXoBzpBzcx4 nQ6rK+DymNlXBv7968xqrc3jkLmmXRLo4bRTYjbFrr1A+ZdB1VtPFaBuyxLIrC52 g1pTKTOQ+avPyLxZd+i8yh9wlqY/FkOU -----END CERTIFICATE-----Generated at Sat May 4 20:37:14 2024 by rpki-client on console-fra.rpki-client.org