$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json) Hash identifier: ++FTiGd0fQR5JjfjOG9aMcmlpxRFLa+Mph2N3z345Qg= Subject key identifier: 82:B1:B0:0C:B7:A1:03:9E:97:36:DF:5A:6F:EE:33:8C:65:6D:2C:6C Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft Manifest number: 049F Signing time: Wed 01 May 2024 01:53:10 +0000 Manifest this update: Wed 01 May 2024 01:53:09 +0000 Manifest next update: Wed 08 May 2024 01:53:09 +0000 Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: 1DaDyNguiqhB0+Ys+RVfoTwJsbfXcNk8HP5CdWD35O4=) 2: 1A1210CC15A111EEBCFC135CC4F9AE02.roa (hash: wVVmbXbR0YYg8xSRIf+zly5WHEAFgY/DaTQhbFbBlLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Validity Not Before: May 1 01:53:09 2024 GMT Not After : May 8 01:53:09 2024 GMT Subject: CN=6631a086-ccf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:2c:90:03:d4:53:cc:69:e5:d1:84:bf:eb: 63:93:d0:8e:1c:dc:ce:2d:74:75:54:12:6a:8f:e3: a6:cb:49:bd:1b:26:58:e5:60:61:47:00:b7:03:fd: f3:e0:80:95:35:6b:45:02:69:dd:60:62:84:17:b6: 70:1b:41:84:06:39:11:29:b6:a1:9d:c3:fa:c8:8f: da:86:e1:0e:2a:0e:b2:91:4d:48:14:5d:da:11:ae: 4f:d3:0f:f9:85:d0:c4:d0:e6:79:29:68:67:6a:90: ae:08:59:c8:63:70:fc:84:4b:69:fe:e1:7b:92:24: 42:f4:90:b6:d2:af:e2:80:34:f4:f0:7d:c4:3b:3b: 14:f1:0a:e6:ff:cb:68:72:77:d2:e5:95:2b:e7:a7: c4:95:f3:0e:b6:36:3f:bf:e3:1a:ac:ac:9c:c0:2a: 37:9f:59:2d:9d:37:56:9a:89:43:1c:1f:bd:72:52: 56:0a:7f:7e:ca:b5:b6:91:d3:a0:7e:d9:a7:d9:07: ab:18:ba:5d:40:33:1a:71:df:2d:6b:f9:28:28:95: 2e:b4:64:87:4b:80:75:6b:5c:fe:3f:6f:f4:05:fe: 42:dd:a4:2e:3c:cf:91:41:79:67:26:85:78:21:ca: b6:8d:83:3a:38:5d:75:39:d9:51:de:08:32:a4:b2: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:B0:0C:B7:A1:03:9E:97:36:DF:5A:6F:EE:33:8C:65:6D:2C:6C X509v3 Authority Key Identifier: keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:5d:f7:11:32:3a:c2:74:7d:a7:b1:06:f4:0d:f2:dc:a0: 30:e6:cd:bc:79:9d:f3:15:99:52:b0:a7:04:14:65:56:39:43: b8:82:00:dc:a7:2b:a6:8c:cf:97:49:46:76:6b:6e:c0:05:6c: 12:b8:f9:bb:70:c4:14:5a:5f:fe:f4:f7:39:13:55:92:93:c7: db:e1:c1:3f:37:81:5b:28:8b:87:1c:f9:6b:e2:ad:33:5c:26: 5d:69:f1:7c:a9:13:e7:c6:05:69:7d:63:26:db:91:6e:9a:d9: f0:09:c6:15:ee:9d:82:db:52:49:1d:94:db:78:bc:61:a9:20: c0:e8:56:f5:cb:45:22:55:72:07:de:9a:7c:79:da:2d:f7:94: 25:24:92:82:0c:27:78:5e:d7:27:34:0c:d3:25:82:9f:00:1f: a3:1a:83:04:df:a3:4e:61:36:1a:90:e6:81:cd:f0:b9:76:72: b6:8f:49:c7:82:91:66:2c:cb:fb:24:04:54:4a:e4:29:be:c3: 64:8f:ee:31:42:eb:70:e0:9c:40:80:e7:e0:0b:f6:e1:ed:3e: 39:2c:42:57:26:08:3e:6c:2b:e6:72:f6:f8:40:e1:54:fa:31: cc:cf:23:86:9f:00:bd:e0:2b:31:a6:f3:0a:18:14:ad:0c:4b: b1:e4:d4:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3QjAxMTAvBgNVBAUTKDM2QkZERjRDNjVDREVFNkJCNzZFOUYzRTYwODAzNDY2 MUE5RDdBMjYwHhcNMjQwNTAxMDE1MzA5WhcNMjQwNTA4MDE1MzA5WjAYMRYwFAYD VQQDEw02NjMxYTA4Ni1jY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHQskAPUU8xp5dGEv+tjk9COHNzOLXR1VBJqj+Omy0m9GyZY5WBhRwC3A/3z 4ICVNWtFAmndYGKEF7ZwG0GEBjkRKbahncP6yI/ahuEOKg6ykU1IFF3aEa5P0w/5 hdDE0OZ5KWhnapCuCFnIY3D8hEtp/uF7kiRC9JC20q/igDT08H3EOzsU8Qrm/8to cnfS5ZUr56fElfMOtjY/v+MarKycwCo3n1ktnTdWmolDHB+9clJWCn9+yrW2kdOg ftmn2QerGLpdQDMacd8ta/koKJUutGSHS4B1a1z+P2/0Bf5C3aQuPM+RQXlnJoV4 Icq2jYM6OF11OdlR3ggypLJ6jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKxsAy3 oQOelzbfWm/uM4xlbSxsMB8GA1UdIwQYMBaAFDa/30xlze5rt26fPmCANGYanXom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdCMC8yMUMwMDgxOEU0 NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdtdTNicDgtWUlBMFpocWRl aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05yX2ZUR1hON211M2JwOC1ZSUEwWmhxZGVpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdCMC8yMUMwMDgxOEU0NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdt dTNicDgtWUlBMFpocWRlaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIF33ETI6wnR9p7EG9A3y3KAw5s28eZ3zFZlSsKcEFGVWOUO4ggDc pyumjM+XSUZ2a27ABWwSuPm7cMQUWl/+9Pc5E1WSk8fb4cE/N4FbKIuHHPlr4q0z XCZdafF8qRPnxgVpfWMm25FumtnwCcYV7p2C21JJHZTbeLxhqSDA6Fb1y0UiVXIH 3pp8edot95QlJJKCDCd4XtcnNAzTJYKfAB+jGoME36NOYTYakOaBzfC5dnK2j0nH gpFmLMv7JARUSuQpvsNkj+4xQutw4JxAgOfgC/bh7T45LEJXJgg+bCvmcvb4QOFU +jHMzyOGnwC94CsxpvMKGBStDEux5NQ3 -----END CERTIFICATE-----Generated at Wed May 1 02:46:22 2024 by rpki-client on console-ams.rpki-client.org