$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: TkW0Bn4AMyLeFogwZdx20ib2iJnQLoZMadFBuvC4RW8= Subject key identifier: 70:D5:2C:A0:AC:D1:79:D6:9A:5F:7B:1A:9D:13:39:E4:21:2D:B4:6B Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 18B1 Signing time: Thu 02 May 2024 17:43:18 +0000 Manifest this update: Thu 02 May 2024 17:43:18 +0000 Manifest next update: Thu 09 May 2024 17:43:18 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: IbejRh6qPydWvve6vOntiwShGa7Z9hyCJOEZPrJnEeU=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: Kf1M3R61MFcIHrcxRj+dAedpIik9nmlYZYIYC6Z+R54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: May 2 17:43:18 2024 GMT Not After : May 9 17:43:18 2024 GMT Subject: CN=6633d0b6-a7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4b:f2:5b:a0:fb:96:d2:1d:dd:37:75:41:97: fc:45:71:4c:b5:64:cd:18:0f:d3:b5:c8:d2:60:47: 05:b8:9d:68:78:1f:f9:75:be:07:32:7c:fc:fb:63: d6:1b:7a:b1:2e:df:a9:f6:61:c1:c5:8f:b9:23:10: 56:30:e8:03:c8:5d:7d:b8:51:f3:6e:2d:48:71:2e: 74:a0:db:89:f9:67:f9:12:df:a5:05:53:05:e9:da: cf:5d:31:04:b8:24:4c:bf:69:92:f6:42:32:6f:82: 2b:0c:13:11:f4:c8:6d:62:3e:26:52:8a:da:31:87: ae:3f:f0:3d:60:2f:3d:37:ff:10:5f:37:6f:ba:bd: 45:b2:79:9c:93:e1:60:6d:71:b3:e7:0d:ba:48:69: c9:35:81:6d:21:71:4a:c4:0d:e2:2e:48:95:b2:48: 96:d0:54:03:8d:54:aa:92:b8:67:0c:d4:d7:63:f0: 04:f2:fc:74:a7:c0:59:4f:fc:c3:da:c8:e7:41:d2: c9:0d:0f:fa:23:19:bc:30:42:75:90:f1:60:b9:0e: 18:1a:07:bc:c5:fe:1c:1e:96:1a:31:a4:54:22:90: 0d:e4:3d:36:e8:1f:d6:4c:60:42:ec:dc:f2:99:04: 56:34:12:bf:b4:41:8d:72:48:0f:9e:78:a1:c4:c0: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:2C:A0:AC:D1:79:D6:9A:5F:7B:1A:9D:13:39:E4:21:2D:B4:6B X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4c:68:07:99:86:82:99:05:01:b4:56:a0:4d:f4:11:e5:1e: 38:22:b6:17:f7:91:19:20:53:c5:13:9f:3e:93:ff:62:e0:52: 64:40:aa:fd:8b:09:79:69:48:61:bf:c6:68:af:2e:2e:58:4f: e4:76:01:dd:c9:c4:02:4e:8c:47:1f:6d:dd:91:5e:a5:65:18: b8:07:64:84:c5:61:5e:32:49:10:e4:c0:43:7a:e3:ee:94:52: 32:70:87:20:28:68:28:4f:32:63:41:61:5a:33:1c:25:02:ab: c2:9a:00:a5:aa:87:a4:54:53:66:08:64:b7:5a:31:6e:58:03: 7a:c4:4f:47:e2:de:f8:d6:2c:12:13:55:cd:c0:d1:04:f8:d8: 22:ba:b3:51:0c:63:98:a3:30:f6:c8:da:9a:82:e2:ae:c8:e4: 22:09:43:4d:6a:10:0d:77:22:52:ce:52:f9:fe:9b:fe:2b:04: 57:ef:5c:7f:33:33:d9:b4:5e:e3:cb:19:7f:fc:e4:c9:bd:58: 4a:03:aa:0c:1e:3c:c3:c9:aa:95:d5:8b:86:dd:fd:f2:a2:9e: 51:2d:27:7e:b9:0a:52:36:bf:f6:86:e7:aa:2c:df:87:3e:06: 7b:3c:07:f3:5c:4a:7a:72:80:63:6c:f8:f1:63:da:dd:b5:59: 18:b1:3d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjQwNTAyMTc0MzE4WhcNMjQwNTA5MTc0MzE4WjAYMRYwFAYD VQQDEw02NjMzZDBiNi1hN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EvyW6D7ltId3Td1QZf8RXFMtWTNGA/TtcjSYEcFuJ1oeB/5db4HMnz8+2PW G3qxLt+p9mHBxY+5IxBWMOgDyF19uFHzbi1IcS50oNuJ+Wf5Et+lBVMF6drPXTEE uCRMv2mS9kIyb4IrDBMR9MhtYj4mUoraMYeuP/A9YC89N/8QXzdvur1Fsnmck+Fg bXGz5w26SGnJNYFtIXFKxA3iLkiVskiW0FQDjVSqkrhnDNTXY/AE8vx0p8BZT/zD 2sjnQdLJDQ/6Ixm8MEJ1kPFguQ4YGge8xf4cHpYaMaRUIpAN5D026B/WTGBC7Nzy mQRWNBK/tEGNckgPnnihxMCRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDVLKCs 0XnWml97Gp0TOeQhLbRrMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNTGgHmYaCmQUBtFagTfQR5R44IrYX95EZIFPFE58+k/9i4FJkQKr9 iwl5aUhhv8Zory4uWE/kdgHdycQCToxHH23dkV6lZRi4B2SExWFeMkkQ5MBDeuPu lFIycIcgKGgoTzJjQWFaMxwlAqvCmgClqoekVFNmCGS3WjFuWAN6xE9H4t741iwS E1XNwNEE+NgiurNRDGOYozD2yNqaguKuyOQiCUNNahANdyJSzlL5/pv+KwRX71x/ MzPZtF7jyxl//OTJvVhKA6oMHjzDyaqV1YuG3f3yop5RLSd+uQpSNr/2hueqLN+H PgZ7PAfzXEp6coBjbPjxY9rdtVkYsT28 -----END CERTIFICATE-----Generated at Thu May 2 20:50:36 2024 by rpki-client on console-fra.rpki-client.org