$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: +LF9sD6KWxBuYdhE1aoTDTAPTcTQ8UYtiKdzVdWbBOg= Subject key identifier: 3F:C4:93:B7:25:13:AF:D7:69:A4:01:75:6A:44:E9:10:1C:53:99:81 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0B58 Signing time: Thu 02 May 2024 19:43:31 +0000 Manifest this update: Thu 02 May 2024 19:43:30 +0000 Manifest next update: Thu 09 May 2024 19:43:30 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: 2VONTvWcTiL7KDxG7XzQH89guvlUuCIdYNslIj1/Hew=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: jnIbyMZ5nbHQtswSYfLlWUHAae6Y62fmSAwPr090jiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: May 2 19:43:30 2024 GMT Not After : May 9 19:43:30 2024 GMT Subject: CN=6633ece2-cc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:52:1e:97:15:65:9c:e0:07:48:a4:c4:8b: 0a:c9:c9:6e:fa:13:96:1d:aa:25:41:a5:87:0b:26: a3:fc:35:72:d6:6c:c6:86:1a:cd:f0:95:82:e4:10: fc:fc:61:a4:82:6a:f5:6b:d1:07:c7:28:98:a7:36: 7f:d1:0c:37:c8:27:d9:c0:3a:17:bc:d2:81:65:72: 77:52:ac:2b:0f:a5:ed:0c:dd:ea:65:8a:b5:6c:77: dc:97:00:58:41:fa:de:13:5a:a8:44:ec:31:c3:19: 78:26:c9:ad:7b:5f:16:7d:0c:c2:98:37:f5:81:76: ee:e9:f7:89:00:e3:e6:34:bb:d6:e9:db:f0:3a:d4: 30:6b:99:b7:c0:05:fe:9a:9a:77:07:fe:31:8d:a5: 2c:ec:7d:bf:00:7a:7c:58:94:87:e7:e2:7d:05:1c: 06:c8:be:ae:a1:7a:9f:11:a0:63:5d:ef:d0:34:e0: fd:92:7d:64:a2:29:67:0c:42:03:5c:cd:52:d4:c7: 68:cb:98:cb:62:d3:52:59:36:e9:94:af:b2:f3:3e: ec:fe:2a:bc:21:04:c4:77:2c:81:b1:08:39:dd:92: 64:90:ea:3f:8e:b8:c0:50:1a:2c:45:ea:71:f9:4e: d8:57:6d:8f:76:aa:bb:8f:f9:21:18:83:7e:e6:c5: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:93:B7:25:13:AF:D7:69:A4:01:75:6A:44:E9:10:1C:53:99:81 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:06:9c:3d:40:1b:00:96:02:80:f9:11:f6:3e:54:15:d9: c2:0f:a9:ab:7d:f7:15:ba:3d:50:05:21:25:fe:71:62:f5:b5: b3:c2:48:e5:bc:23:53:03:f8:d4:2c:df:62:b2:09:7f:25:06: 56:f5:17:ba:24:56:99:65:2d:c7:37:13:9e:68:d1:2d:5c:23: 31:f4:4a:e1:09:1a:be:52:6b:56:63:2f:66:af:0d:26:7f:33: 55:59:ef:22:48:43:0d:5b:c3:82:52:06:57:3a:98:a0:83:b5: 30:b4:12:a0:63:04:f9:22:0f:dd:8f:7b:74:81:c9:ce:9e:95: 2c:aa:b7:80:23:e8:8a:14:dd:a3:3b:58:73:5e:2a:61:b2:09: 01:d6:b9:e2:a4:05:18:34:4b:d1:12:05:43:40:f7:14:f4:bc: 18:8f:ff:09:d7:af:71:83:0f:b9:22:5a:23:2e:17:e5:05:a2: 39:a5:90:61:39:6c:1c:b7:da:f6:ef:51:b0:fd:ff:78:b6:48: a0:f6:77:0f:eb:58:9f:b9:83:a9:4d:72:7f:19:da:d6:21:d9: cc:51:61:04:9f:1c:95:fd:d2:31:05:c9:c5:ff:b8:20:4c:4c: b1:df:40:a5:5f:0b:37:da:77:b5:5b:28:c5:51:5a:a9:f0:37: 5d:b0:e7:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjQwNTAyMTk0MzMwWhcNMjQwNTA5MTk0MzMwWjAYMRYwFAYD VQQDEw02NjMzZWNlMi1jYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon5SHpcVZZzgB0ikxIsKyclu+hOWHaolQaWHCyaj/DVy1mzGhhrN8JWC5BD8 /GGkgmr1a9EHxyiYpzZ/0Qw3yCfZwDoXvNKBZXJ3UqwrD6XtDN3qZYq1bHfclwBY QfreE1qoROwxwxl4Jsmte18WfQzCmDf1gXbu6feJAOPmNLvW6dvwOtQwa5m3wAX+ mpp3B/4xjaUs7H2/AHp8WJSH5+J9BRwGyL6uoXqfEaBjXe/QNOD9kn1koilnDEID XM1S1Mdoy5jLYtNSWTbplK+y8z7s/iq8IQTEdyyBsQg53ZJkkOo/jrjAUBosRepx +U7YV22Pdqq7j/khGIN+5sXRuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/Ek7cl E6/XaaQBdWpE6RAcU5mBMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFKwacPUAbAJYCgPkR9j5UFdnCD6mrffcVuj1QBSEl/nFi9bWzwkjl vCNTA/jULN9isgl/JQZW9Re6JFaZZS3HNxOeaNEtXCMx9ErhCRq+UmtWYy9mrw0m fzNVWe8iSEMNW8OCUgZXOpigg7UwtBKgYwT5Ig/dj3t0gcnOnpUsqreAI+iKFN2j O1hzXiphsgkB1rnipAUYNEvREgVDQPcU9LwYj/8J169xgw+5IlojLhflBaI5pZBh OWwct9r271Gw/f94tkig9ncP61ifuYOpTXJ/GdrWIdnMUWEEnxyV/dIxBcnF/7gg TEyx30ClXws32ne1WyjFUVqp8DddsOcm -----END CERTIFICATE-----Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org