$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: sn72GMqI6IIqoZCA9uv3uyiXxxnMPLycztaZsxvY9sc= Subject key identifier: 2A:B3:9F:7A:AD:20:EE:06:52:A9:4F:83:F7:33:0E:AE:6B:21:40:D0 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 5A Signing time: Fri 17 May 2024 07:54:02 +0000 Manifest this update: Fri 17 May 2024 07:54:01 +0000 Manifest next update: Fri 24 May 2024 07:54:01 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 6RWh1zy2ynSK8LIi8qdlT9uuPPxniHS7ms2yQBgqm7g=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: acmm68uBDagq25oNDAk3Sfa5aVrunt/qZpCPMnp6KYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: May 17 07:54:01 2024 GMT Not After : May 24 07:54:01 2024 GMT Subject: CN=66470d19-2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:a2:83:01:4f:00:ff:a0:9c:5e:fb:e8:93: f6:c1:72:b6:ad:6c:cb:d8:1e:9b:d8:07:d4:60:da: da:5d:47:3c:00:a7:e9:de:14:b6:7c:fc:bd:5f:d3: b0:51:8e:73:1e:10:05:0e:28:a9:20:38:18:aa:4d: a5:81:97:15:0f:af:c7:f3:35:8c:0d:3c:9e:e8:56: 87:1a:c5:e6:be:b7:63:95:4f:70:dc:52:68:33:dc: 21:e6:9a:65:c2:ea:b9:27:55:8a:0f:13:8f:6b:26: f7:2a:5b:21:b4:54:8e:d2:1e:db:f7:d0:d9:83:5a: a7:e4:92:de:b8:60:4b:ab:b8:49:bd:83:e1:f8:d4: ca:76:8b:38:75:e7:43:6f:ed:c0:c0:07:7a:34:4e: 42:8f:df:db:89:41:57:d2:0d:01:49:af:5d:ad:a4: 0a:31:1e:19:bf:1c:11:73:3a:bc:91:28:15:20:9f: d8:79:12:0f:a1:a1:64:c9:3b:02:92:3f:a7:e5:73: dd:63:b1:f1:1c:93:23:b3:86:2f:a2:d0:c9:ae:09: 52:7c:62:79:89:42:f0:1a:45:ef:7e:01:8d:f3:9e: 51:d2:83:36:03:9d:45:4c:b5:b2:d6:a2:8e:60:57: 22:2a:22:a8:5d:46:22:b3:8a:4a:c2:58:45:88:3f: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B3:9F:7A:AD:20:EE:06:52:A9:4F:83:F7:33:0E:AE:6B:21:40:D0 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a3:59:9f:6e:54:24:c1:6d:dc:44:07:f7:24:ea:0a:ef:d4: a5:28:ce:9b:4a:92:62:7d:aa:70:a2:f5:89:4a:ed:49:a9:2d: 1c:34:19:4f:56:43:fd:dc:3b:82:35:18:b6:e1:3a:f8:4c:00: 27:6e:81:f9:d2:e4:ec:6a:85:ae:58:88:a1:04:9d:db:45:c8: 52:0e:78:38:cc:39:59:4f:17:35:d3:f8:35:11:fc:08:83:05: f3:b2:75:76:0f:c8:9b:46:ef:ad:e4:c6:37:b4:19:db:a5:f8: ec:6f:2e:3e:73:c0:8b:a9:a2:88:9b:42:80:5c:23:3b:5d:d1: 04:a2:98:89:71:2e:dd:9b:6f:b7:ae:99:0e:e4:f4:51:95:e3: ff:13:06:ee:3d:0e:af:70:4a:69:85:69:4e:e4:48:67:26:f8: cd:d8:c1:87:4b:cb:be:e3:af:2e:c3:8a:37:ec:11:5b:61:28: b5:3f:22:fc:c7:4c:d2:10:48:da:2e:f4:72:04:37:f8:94:76: c9:ea:2a:e0:93:2f:c0:27:92:2f:89:2c:2f:6b:02:21:a1:fa: 75:84:9c:9f:c4:5e:95:5c:78:ed:97:f9:35:b2:51:d8:39:58: 48:3e:9e:da:12:dc:60:51:af:ca:05:87:68:4a:f9:f1:e9:f1: dc:a2:09:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTNDRDExMC8GA1UEBRMoMzVDQjQyMUM1NTc3MTc3NTgxQ0UyNEIzNkEyRjZDQzkz MTg0NjA1MjAeFw0yNDA1MTcwNzU0MDFaFw0yNDA1MjQwNzU0MDFaMBgxFjAUBgNV BAMTDTY2NDcwZDE5LTI1MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4y6KDAU8A/6CcXvvok/bBcratbMvYHpvYB9Rg2tpdRzwAp+neFLZ8/L1f07BR jnMeEAUOKKkgOBiqTaWBlxUPr8fzNYwNPJ7oVocaxea+t2OVT3DcUmgz3CHmmmXC 6rknVYoPE49rJvcqWyG0VI7SHtv30NmDWqfkkt64YEuruEm9g+H41Mp2izh150Nv 7cDAB3o0TkKP39uJQVfSDQFJr12tpAoxHhm/HBFzOryRKBUgn9h5Eg+hoWTJOwKS P6flc91jsfEckyOzhi+i0MmuCVJ8YnmJQvAaRe9+AY3znlHSgzYDnUVMtbLWoo5g VyIqIqhdRiKzikrCWEWIP2vZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKrOfeq0g 7gZSqU+D9zMOrmshQNAwHwYDVR0jBBgwFoAUNctCHFV3F3WBziSzai9syTGEYFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBM0NELzI2NDUzRkEwOTA1 NzExRUU4NjQ5MzYxM0M0RjlBRTAyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmN0Q0hGVjNGM1dCemlTemFpOXN5VEdFWUZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB M0NELzI2NDUzRkEwOTA1NzExRUU4NjQ5MzYxM0M0RjlBRTAyL05jdENIRlYzRjNX QnppU3phaTlzeVRHRVlGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJSjWZ9uVCTBbdxEB/ck6grv1KUozptKkmJ9qnCi9YlK7UmpLRw0GU9W Q/3cO4I1GLbhOvhMACdugfnS5Oxqha5YiKEEndtFyFIOeDjMOVlPFzXT+DUR/AiD BfOydXYPyJtG763kxje0Gdul+OxvLj5zwIupooibQoBcIztd0QSimIlxLt2bb7eu mQ7k9FGV4/8TBu49Dq9wSmmFaU7kSGcm+M3YwYdLy77jry7DijfsEVthKLU/IvzH TNIQSNou9HIEN/iUdsnqKuCTL8Anki+JLC9rAiGh+nWEnJ/EXpVceO2X+TWyUdg5 WEg+ntoS3GBRr8oFh2hK+fHp8dyiCUw= -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org