$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: WtWYZkE7wEIEzsAPOvzJ2ETnqquOEL21e/JTES00UcQ= Subject key identifier: 90:84:50:B2:5A:FF:A2:E1:21:3B:EF:C5:9A:EF:18:A1:21:8A:D0:8A Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 044E Signing time: Wed 01 May 2024 02:11:23 +0000 Manifest this update: Wed 01 May 2024 02:11:22 +0000 Manifest next update: Wed 08 May 2024 02:11:22 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: +5UMjKv2sfu8Ac/0CdcChbEbz3ZXmVjtse5VGZ2D2do=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: uEUCdVpssQbDsyH148j9fHL3eQ9b5lWk+qpOvr2o/UY=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: mklNmAZOw0jaBMPiEhT18LXhIbCQK9ShVit8BHBRwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: May 1 02:11:22 2024 GMT Not After : May 8 02:11:22 2024 GMT Subject: CN=6631a4cb-1232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:49:f4:3d:9d:fb:55:4a:fc:c1:28:27:c6: e9:17:0c:69:e5:57:1c:f9:1d:f5:9a:46:1c:b9:89: be:08:12:ae:b4:62:4c:15:02:1f:a4:7c:0c:c1:d2: 30:74:8f:92:f0:c4:6c:07:1d:1a:87:72:6d:2c:c0: be:58:54:21:98:3d:71:b0:cd:6d:9f:fc:63:0d:02: 91:ab:90:8a:1b:6d:da:54:8f:fd:43:24:44:4b:1f: b7:29:3f:7d:f5:3e:5a:40:f1:ed:f5:c6:b4:71:02: 1a:c1:70:e0:f6:ac:f2:55:f0:6a:f9:5b:f1:9b:74: 5e:e2:04:cc:65:18:5f:25:a8:a6:49:73:f9:1b:cb: c0:2b:7f:94:4a:f3:20:72:3d:d1:a5:7d:6c:39:1c: bd:6f:a4:26:81:3d:b9:0e:80:1b:28:13:36:a6:22: 36:61:9d:7a:e1:a0:2c:73:f1:41:4f:aa:6b:cf:c6: 7b:c0:80:d8:1a:e8:42:14:50:cc:a3:bc:77:92:a3: 84:04:63:e3:a8:bf:a6:38:25:d2:44:71:b0:62:2c: 31:2f:f7:04:c7:e1:ab:cf:e5:7a:f4:4d:6d:67:18: bc:be:05:3b:49:6d:8e:bd:e8:e2:22:1c:85:57:66: 7f:af:01:81:4e:06:3a:80:78:7a:26:b9:16:21:6d: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:50:B2:5A:FF:A2:E1:21:3B:EF:C5:9A:EF:18:A1:21:8A:D0:8A X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:5f:20:6f:83:c0:36:ab:c0:9e:cb:c7:74:fc:51:42:9a:c4: 26:9d:31:c0:43:1b:dc:10:41:f3:9d:6f:30:0b:64:9e:ce:d7: 20:23:4a:fc:78:d8:88:8a:b4:30:8a:22:db:d5:ff:41:7b:96: 49:22:41:e1:60:47:c8:ea:72:c5:e0:bb:d7:bf:d4:58:25:f3: d2:ea:01:03:d3:12:06:17:c8:13:9f:f8:3e:52:0e:e3:7a:41: cc:29:4f:2d:b8:a8:76:c1:4c:63:8d:a5:ae:c5:fa:eb:24:a6: 96:f3:2a:d9:5b:dc:8f:f5:f4:47:73:0c:e9:2f:cb:fe:45:47: 69:01:3f:6e:fe:ea:7f:0a:94:2e:d3:49:5c:20:1d:9c:d0:2b: fc:ef:bf:e8:1f:f9:c2:37:d8:a2:83:37:bd:97:58:5b:42:9a: a2:e2:b4:01:35:98:88:1a:db:be:c0:e2:f5:42:d4:86:1b:b2: 33:f0:d7:dc:d7:20:58:ac:5e:a4:0c:bf:92:81:2c:69:f8:2a: 86:25:44:06:ae:53:70:da:12:79:ac:12:e6:c5:1a:75:64:9f: 6a:f8:ee:9a:5b:4a:2a:77:aa:fa:e0:51:07:17:13:ed:ad:77: 35:56:00:2b:e5:27:53:7b:a2:b2:7f:13:74:46:91:a6:f9:81: 4f:01:ba:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjQwNTAxMDIxMTIyWhcNMjQwNTA4MDIxMTIyWjAYMRYwFAYD VQQDEw02NjMxYTRjYi0xMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGFJ9D2d+1VK/MEoJ8bpFwxp5Vcc+R31mkYcuYm+CBKutGJMFQIfpHwMwdIw dI+S8MRsBx0ah3JtLMC+WFQhmD1xsM1tn/xjDQKRq5CKG23aVI/9QyRESx+3KT99 9T5aQPHt9ca0cQIawXDg9qzyVfBq+Vvxm3Re4gTMZRhfJaimSXP5G8vAK3+USvMg cj3RpX1sORy9b6QmgT25DoAbKBM2piI2YZ164aAsc/FBT6prz8Z7wIDYGuhCFFDM o7x3kqOEBGPjqL+mOCXSRHGwYiwxL/cEx+Grz+V69E1tZxi8vgU7SW2OvejiIhyF V2Z/rwGBTgY6gHh6JrkWIW0sxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCEULJa /6LhITvvxZrvGKEhitCKMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABXyBvg8A2q8Cey8d0/FFCmsQmnTHAQxvcEEHznW8wC2SeztcgI0r8 eNiIirQwiiLb1f9Be5ZJIkHhYEfI6nLF4LvXv9RYJfPS6gED0xIGF8gTn/g+Ug7j ekHMKU8tuKh2wUxjjaWuxfrrJKaW8yrZW9yP9fRHcwzpL8v+RUdpAT9u/up/CpQu 00lcIB2c0Cv877/oH/nCN9iigze9l1hbQpqi4rQBNZiIGtu+wOL1QtSGG7Iz8Nfc 1yBYrF6kDL+SgSxp+CqGJUQGrlNw2hJ5rBLmxRp1ZJ9q+O6aW0oqd6r64FEHFxPt rXc1VgAr5SdTe6KyfxN0RpGm+YFPAbql -----END CERTIFICATE-----Generated at Wed May 1 03:20:34 2024 by rpki-client on console-fra.rpki-client.org