$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: Ts5Hoi2CFCD0I05QPUjGvW3YenaDGTgu0xrIRrAoq4k= Subject key identifier: C5:C6:84:12:5C:57:26:31:A9:FA:2B:1E:89:F6:E8:B2:6D:C1:0D:43 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 065A Signing time: Fri 26 Apr 2024 23:35:54 +0000 Manifest this update: Fri 26 Apr 2024 23:35:54 +0000 Manifest next update: Fri 03 May 2024 23:35:54 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: uiYvwsPI2pknDMWVP7VCPq65l6eRICip50SDWqyXVsQ=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: qiBZQI2a1Ynnwr8NZC+JZxXJpm/2uK+g5xqt3jGkNKM=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: CD2XZGcer+kAB85rmOAMuyU4/KGzzo0Ink+wv2m7taY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Apr 26 23:35:54 2024 GMT Not After : May 3 23:35:54 2024 GMT Subject: CN=662c3a5a-823e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:3e:4c:1d:9f:b6:b5:bd:e0:8e:cb:27:1e: 87:6e:3e:30:48:02:a1:94:22:3b:1d:66:4e:9c:36: a6:f5:0b:8a:72:f5:8f:e4:5b:12:a8:9c:8b:be:49: 32:32:f3:2f:f0:94:c7:03:d2:87:2d:50:59:54:d3: dc:de:0a:63:ab:1c:31:fa:e9:64:9d:54:35:f8:12: d6:57:cb:e9:b2:ef:7c:5e:c8:dc:b6:f1:9f:27:3e: d2:cf:21:bc:f5:6f:48:40:73:57:e5:b5:14:8e:b0: b8:1f:78:d2:e5:ec:65:63:75:43:ac:47:a4:bd:05: 8d:e0:88:ab:2f:90:aa:63:d9:55:c1:6a:a4:ba:eb: 36:82:42:90:fc:f0:26:3c:4e:ee:51:e2:37:58:68: f7:b8:ea:37:f3:64:ec:6f:50:b6:d0:28:6f:62:70: 21:6d:d9:f5:0d:e8:77:1b:d7:94:f1:52:91:f1:f3: c7:98:7d:25:92:1d:27:5d:3e:b1:0b:ef:cc:3d:74: 57:8e:ea:79:ea:5c:16:9e:dc:15:7b:d6:61:60:50: aa:f0:31:ff:a5:96:75:77:ef:2e:82:08:96:a8:9c: c0:79:03:a9:a7:c7:2c:8c:1e:55:6e:84:1c:b0:c7: 42:6e:f1:09:5d:8b:50:b8:00:34:31:34:9f:6a:12: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:84:12:5C:57:26:31:A9:FA:2B:1E:89:F6:E8:B2:6D:C1:0D:43 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:05:63:b6:8c:86:49:99:21:b8:63:0f:ff:f7:62:71:3c:4c: 21:fc:8f:fe:c8:3b:6a:d9:a0:5a:fc:b6:01:ed:d0:b8:f5:58: f0:b2:72:d5:09:49:87:5f:66:19:ad:bb:e1:b2:56:94:10:f3: d1:c5:ea:b9:07:c4:33:81:29:a0:b6:e1:5c:3b:6a:7f:61:1f: c6:d0:78:26:f3:ea:58:9c:4a:31:7c:06:9c:13:16:2d:36:e3: f2:ff:6f:0d:6a:d7:0f:72:7d:4e:3f:3a:bb:0e:66:1a:ba:fe: 8c:eb:25:1e:ed:b3:58:77:87:cd:19:19:99:cc:42:f5:8c:d0: 92:21:7e:5d:42:f1:56:d2:9b:b4:ba:f7:50:57:e4:d3:bf:94: 7f:b5:43:4b:05:af:90:44:08:d0:cc:1a:9d:63:38:21:4d:5f: d0:a3:64:89:ca:24:90:ae:b6:76:3a:54:7a:1f:44:d5:65:f4: 32:b0:f4:af:0b:97:b6:36:04:79:92:a8:ff:a9:21:72:07:69: 41:80:ff:83:3a:f9:ff:74:1c:ca:fe:51:d3:8c:0b:d2:a8:45: e3:47:54:4a:e3:54:94:b7:eb:ed:88:03:7b:d4:cd:72:68:67: d3:19:a1:90:60:25:9c:d9:19:4d:6f:6a:18:f8:99:fd:3d:26: cb:18:29:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjQwNDI2MjMzNTU0WhcNMjQwNTAzMjMzNTU0WjAYMRYwFAYD VQQDEw02NjJjM2E1YS04MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/g+TB2ftrW94I7LJx6Hbj4wSAKhlCI7HWZOnDam9QuKcvWP5FsSqJyLvkky MvMv8JTHA9KHLVBZVNPc3gpjqxwx+ulknVQ1+BLWV8vpsu98XsjctvGfJz7SzyG8 9W9IQHNX5bUUjrC4H3jS5exlY3VDrEekvQWN4IirL5CqY9lVwWqkuus2gkKQ/PAm PE7uUeI3WGj3uOo382Tsb1C20ChvYnAhbdn1Deh3G9eU8VKR8fPHmH0lkh0nXT6x C+/MPXRXjup56lwWntwVe9ZhYFCq8DH/pZZ1d+8uggiWqJzAeQOpp8csjB5VboQc sMdCbvEJXYtQuAA0MTSfahKEBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXGhBJc VyYxqforHon26LJtwQ1DMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUBWO2jIZJmSG4Yw//92JxPEwh/I/+yDtq2aBa/LYB7dC49VjwsnLV CUmHX2YZrbvhslaUEPPRxeq5B8QzgSmgtuFcO2p/YR/G0Hgm8+pYnEoxfAacExYt NuPy/28NatcPcn1OPzq7DmYauv6M6yUe7bNYd4fNGRmZzEL1jNCSIX5dQvFW0pu0 uvdQV+TTv5R/tUNLBa+QRAjQzBqdYzghTV/Qo2SJyiSQrrZ2OlR6H0TVZfQysPSv C5e2NgR5kqj/qSFyB2lBgP+DOvn/dBzK/lHTjAvSqEXjR1RK41SUt+vtiAN71M1y aGfTGaGQYCWc2RlNb2oY+Jn9PSbLGCkr -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:58 2024 by rpki-client on console-ams.rpki-client.org