$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: CyG7OPLXv0i+DXIdfI5MfE5R2Lrm/Tpw4ldDbP5NvlQ= Subject key identifier: E0:F4:EE:0F:81:0C:9C:C0:6F:BD:24:AA:1F:59:BB:11:BF:07:86:D5 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 33DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 33CF Signing time: Sat 04 May 2024 14:49:48 +0000 Manifest this update: Sat 04 May 2024 14:49:47 +0000 Manifest next update: Sat 11 May 2024 14:49:47 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: i6Iz60fpCjoZADPpA2WXdX00akGmE8I7rDgHQyOlsLY=) 2: 2251B910AC7411EBBE196180C4F9AE02.roa (hash: /9MtAWjM3Biiq8nnUtxhVHZDm3Jggzrs5MJ2Ivek0VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13275 (0x33db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: May 4 14:49:47 2024 GMT Not After : May 11 14:49:47 2024 GMT Subject: CN=66364b0c-eb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:71:80:8b:a9:c5:de:f3:7e:6a:63:22:3f: 31:de:15:95:a0:74:93:2f:fe:c5:61:f1:ec:d2:8e: 8f:bc:9b:58:a2:5e:e9:03:d4:5a:3a:62:35:6a:b4: 0f:78:26:54:94:6b:5d:db:fa:3b:ad:30:a7:6e:ba: e7:42:23:17:d8:36:c1:0d:05:2b:f4:9f:b7:75:bf: 22:e0:68:0c:f1:df:b5:9c:c6:eb:73:3a:28:f1:de: 5f:45:d1:18:3f:71:3c:07:b4:83:11:d3:b7:79:9f: 32:0b:db:ff:ed:00:2c:58:7d:e2:ba:33:5b:df:dc: b6:cf:e5:5e:04:d4:f5:f8:b2:95:f2:7f:f4:57:80: f3:ef:40:51:4f:b2:b3:04:c2:94:38:52:55:0a:09: db:b8:b8:51:6e:6c:21:39:9e:80:ad:61:fc:b1:84: 60:2c:68:54:3b:2d:67:e0:9e:59:1e:aa:2e:3c:85: dd:d3:0b:13:79:b8:07:73:85:f5:5c:f8:ee:0f:20: 23:54:e9:c1:57:f3:47:37:d4:56:82:50:68:de:d9: bf:7b:18:d7:03:91:d1:47:6d:04:46:a6:ad:37:e6: 7b:52:55:4a:5f:96:29:b9:84:29:bd:45:6d:57:fd: e7:fd:37:a7:37:e1:48:50:4a:7c:be:b9:d9:1a:ac: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F4:EE:0F:81:0C:9C:C0:6F:BD:24:AA:1F:59:BB:11:BF:07:86:D5 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:db:26:5d:36:14:42:60:0e:3f:6d:ed:52:61:fb:ff:3a:72: d0:0e:b0:84:1e:0d:37:3c:15:8f:9f:86:91:6d:f1:f5:d1:75: e5:0b:eb:fb:41:ec:89:6d:a0:39:cf:b0:3a:d7:75:b3:ce:9e: 11:78:af:d1:50:8e:e1:36:4b:75:6c:ef:4c:23:f5:49:8a:7b: 7d:29:3f:e1:21:3b:d3:aa:6b:db:d1:1e:8b:11:9d:95:3d:48: f0:d8:03:55:65:bd:b7:0a:89:00:b6:82:0f:ce:50:25:1e:52: 45:f3:d0:c8:41:1f:55:e9:1e:26:0f:64:7a:6a:09:a0:3b:bc: b9:fc:40:c4:29:ec:b5:5f:e3:ca:5b:10:35:9d:94:9c:e6:02: 15:fb:b0:ad:20:d5:a0:97:1d:eb:85:c5:5c:58:b1:fe:79:2f: 99:eb:39:f7:60:92:b2:b5:0b:4f:c0:10:b7:70:46:45:cd:23: 47:ad:00:fa:11:a5:18:5e:e3:d0:ec:47:ef:e8:dc:75:c4:3f: cf:1e:92:c7:83:e0:83:b7:9d:1a:94:3e:d5:d8:b6:a3:e6:7e: ec:08:41:93:02:a7:c8:15:0b:57:23:2f:24:4f:3b:aa:13:e8: 45:44:33:03:d1:86:d2:15:a9:06:f5:d5:e3:e8:b2:e8:59:c5: 9e:e3:ed:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjQwNTA0MTQ0OTQ3WhcNMjQwNTExMTQ0OTQ3WjAYMRYwFAYD VQQDEw02NjM2NGIwYy1lYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PxxgIupxd7zfmpjIj8x3hWVoHSTL/7FYfHs0o6PvJtYol7pA9RaOmI1arQP eCZUlGtd2/o7rTCnbrrnQiMX2DbBDQUr9J+3db8i4GgM8d+1nMbrczoo8d5fRdEY P3E8B7SDEdO3eZ8yC9v/7QAsWH3iujNb39y2z+VeBNT1+LKV8n/0V4Dz70BRT7Kz BMKUOFJVCgnbuLhRbmwhOZ6ArWH8sYRgLGhUOy1n4J5ZHqouPIXd0wsTebgHc4X1 XPjuDyAjVOnBV/NHN9RWglBo3tm/exjXA5HRR20ERqatN+Z7UlVKX5YpuYQpvUVt V/3n/TenN+FIUEp8vrnZGqzSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD07g+B DJzAb70kqh9ZuxG/B4bVMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa2yZdNhRCYA4/be1SYfv/OnLQDrCEHg03PBWPn4aRbfH10XXlC+v7 QeyJbaA5z7A613Wzzp4ReK/RUI7hNkt1bO9MI/VJint9KT/hITvTqmvb0R6LEZ2V PUjw2ANVZb23CokAtoIPzlAlHlJF89DIQR9V6R4mD2R6agmgO7y5/EDEKey1X+PK WxA1nZSc5gIV+7CtINWglx3rhcVcWLH+eS+Z6zn3YJKytQtPwBC3cEZFzSNHrQD6 EaUYXuPQ7Efv6Nx1xD/PHpLHg+CDt50alD7V2Laj5n7sCEGTAqfIFQtXIy8kTzuq E+hFRDMD0YbSFakG9dXj6LLoWcWe4+0o -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org