$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json) Hash identifier: 6apWNLdJ8VBjdtYhuXSp279rup23HVFVkZpCFgfl0L8= Subject key identifier: 2A:92:B6:AD:48:BB:2D:22:AB:54:3A:F3:08:DB:89:AD:31:3E:0C:4B Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft Manifest number: 08CC Signing time: Tue 30 Apr 2024 21:44:14 +0000 Manifest this update: Tue 30 Apr 2024 21:44:13 +0000 Manifest next update: Tue 07 May 2024 21:44:13 +0000 Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: iFO4UATAlD6vfglaJ9XfEpKa/Nkrhhhp5xaR3taiWFc=) 2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: bvB7GDHmnaarF1qMqlspjRavNLu6JF79ftbNTEveK8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Validity Not Before: Apr 30 21:44:13 2024 GMT Not After : May 7 21:44:13 2024 GMT Subject: CN=6631662e-d08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:49:9e:0d:f5:9e:5f:70:eb:a0:95:40:aa: ca:8c:8b:82:5c:99:46:eb:19:12:19:35:93:40:a5: 1d:7d:4d:17:af:b7:60:47:70:7e:4b:a0:17:34:95: 78:59:c2:d4:4b:59:f2:7d:e3:1c:55:c5:9f:52:18: e3:99:76:38:12:0e:4e:ee:da:72:02:8e:97:34:3e: 62:c9:bd:3b:74:5e:45:b3:21:b4:42:94:f4:8a:35: c2:d1:de:e0:48:53:d5:47:cc:f6:bf:77:b9:8b:12: fc:b0:4e:a3:65:08:a0:64:28:2a:e5:0b:ee:57:dd: df:71:eb:07:c4:7d:ce:84:a0:30:70:d6:33:90:a8: c2:a0:c0:9f:04:fa:99:bb:f6:c7:d0:f4:3a:53:49: ad:25:83:65:27:b8:6c:41:e9:13:47:f8:54:98:d1: a2:74:c2:6c:3c:e5:d0:99:e2:0a:74:9d:18:ec:dd: a0:3b:9a:80:3e:6d:30:57:c3:02:b2:0b:a8:ef:8a: 54:6f:f8:15:03:47:bb:f3:a9:6e:b5:0d:88:72:87: f1:08:ca:b1:bc:fb:07:95:d9:2f:4e:ba:1e:49:ac: 66:12:bd:d4:c7:93:36:1f:35:ba:af:57:49:e6:8b: 82:1a:39:de:3b:55:e5:c7:99:63:d4:d0:6e:98:2d: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:B6:AD:48:BB:2D:22:AB:54:3A:F3:08:DB:89:AD:31:3E:0C:4B X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6f:29:a0:aa:7a:37:ba:9d:5d:39:71:50:22:10:3b:97:6e: 8f:14:9d:c3:3c:53:37:7b:7e:5d:c9:0e:81:e9:fd:54:58:a3: 97:ca:33:9e:d1:90:9a:d6:d0:bc:ca:e2:8d:b2:13:dd:64:f8: f4:31:bd:b3:47:88:fb:c5:9b:b7:8a:7d:73:00:41:59:84:10: 64:c3:87:d7:4f:9d:17:4a:ee:8d:11:05:8f:e3:bd:12:33:d1: af:07:97:ae:e0:3b:4b:84:1c:9e:72:76:49:c0:ff:b1:dd:8c: df:a0:e3:54:b5:47:ca:16:00:58:96:b5:8c:c9:9a:4f:63:20: 94:f7:46:6e:6f:43:59:5b:86:27:ad:09:a6:63:ac:93:c4:27: a8:eb:15:ab:dd:85:98:9e:c6:89:7b:31:47:75:04:5b:53:16: 87:04:96:3d:d3:2b:5c:3f:5a:6d:23:db:13:68:7e:21:70:0d: 3d:d0:54:56:31:77:3f:ca:a2:0e:5a:e5:e3:4c:f0:6e:b9:f4: fe:76:18:df:c6:85:a9:eb:41:91:52:29:e8:be:7a:ce:af:bc: 5d:bb:89:73:ee:53:7c:24:b5:15:f2:92:87:18:ec:db:b7:36: 0c:c3:0d:1d:b1:8f:2b:14:6f:f1:64:b2:37:c7:73:ae:9e:43: d9:fb:6b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjQwNDMwMjE0NDEzWhcNMjQwNTA3MjE0NDEzWjAYMRYwFAYD VQQDEw02NjMxNjYyZS1kMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33pJng31nl9w66CVQKrKjIuCXJlG6xkSGTWTQKUdfU0Xr7dgR3B+S6AXNJV4 WcLUS1nyfeMcVcWfUhjjmXY4Eg5O7tpyAo6XND5iyb07dF5FsyG0QpT0ijXC0d7g SFPVR8z2v3e5ixL8sE6jZQigZCgq5QvuV93fcesHxH3OhKAwcNYzkKjCoMCfBPqZ u/bH0PQ6U0mtJYNlJ7hsQekTR/hUmNGidMJsPOXQmeIKdJ0Y7N2gO5qAPm0wV8MC sguo74pUb/gVA0e786lutQ2IcofxCMqxvPsHldkvTroeSaxmEr3Ux5M2HzW6r1dJ 5ouCGjneO1Xlx5lj1NBumC0cfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqStq1I uy0iq1Q68wjbia0xPgxLMB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFE cTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAubymgqno3up1dOXFQIhA7l26PFJ3DPFM3e35dyQ6B6f1UWKOXyjOe 0ZCa1tC8yuKNshPdZPj0Mb2zR4j7xZu3in1zAEFZhBBkw4fXT50XSu6NEQWP470S M9GvB5eu4DtLhByecnZJwP+x3YzfoONUtUfKFgBYlrWMyZpPYyCU90Zub0NZW4Yn rQmmY6yTxCeo6xWr3YWYnsaJezFHdQRbUxaHBJY90ytcP1ptI9sTaH4hcA090FRW MXc/yqIOWuXjTPBuufT+dhjfxoWp60GRUinovnrOr7xdu4lz7lN8JLUV8pKHGOzb tzYMww0dsY8rFG/xZLI3x3OunkPZ+2s+ -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:18 2024 by rpki-client on console-fra.rpki-client.org