$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: QXjAEdHfQNtwXOG1DZK1RKiaVl51F9nUXnaT2rx/1Do= Subject key identifier: 6D:61:D0:CE:6C:DA:E5:70:75:60:A8:5B:40:FA:15:28:B6:E3:1D:73 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 7C Signing time: Fri 17 May 2024 07:22:44 +0000 Manifest this update: Fri 17 May 2024 07:22:43 +0000 Manifest next update: Fri 24 May 2024 07:22:43 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: Yepfdh6vtAQh8NyMOsqw9mAzicR8BCtnp+3UsTGfXaE=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: zorl3bhT2t8kjQkDKO0Jc1GFbzSjIhooaYDJGOfO/go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: May 17 07:22:43 2024 GMT Not After : May 24 07:22:43 2024 GMT Subject: CN=664705c3-bae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:9f:28:21:fe:13:ae:38:cb:25:5f:c8:0d: 5d:05:c9:2e:1c:e6:3b:af:e6:9a:cc:63:e6:92:00: 3c:44:c7:82:07:d2:67:ea:d8:d2:96:50:3e:ef:7a: b8:c2:ed:93:79:88:96:c2:78:b6:39:59:f5:e9:b6: 51:cb:8b:d4:df:29:10:90:2d:cb:d3:5e:00:75:ae: 55:c6:45:18:ee:c3:71:ba:01:d1:fd:fd:0c:4b:83: 56:16:99:8b:2c:6c:09:32:23:dc:ce:5d:c4:b4:a1: dc:8f:79:87:61:6c:4b:56:1b:e0:9b:80:26:c2:c3: 25:16:0e:21:82:7a:4f:5d:f1:09:73:f6:5c:52:72: 92:fd:be:a5:ca:44:05:f2:f2:ac:e1:dc:72:3a:3d: c0:5e:8b:9a:22:10:8a:10:07:a5:d2:be:1a:c8:a0: a3:02:54:9e:2c:5d:4e:b9:08:d2:5c:63:ee:d2:80: 16:b6:30:91:3f:e4:0a:81:a9:7b:62:b8:f3:bc:d1: 8c:6f:39:29:37:9f:5f:7e:bc:03:22:b9:0c:d5:0e: 09:fb:8d:a5:7e:6b:9f:53:3e:fd:72:ce:06:32:94: bb:ec:13:8d:84:cd:3d:be:f6:8c:13:78:48:55:75: 5a:d3:8b:e1:23:18:d3:dc:8a:aa:2b:0a:1a:46:4b: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:D0:CE:6C:DA:E5:70:75:60:A8:5B:40:FA:15:28:B6:E3:1D:73 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:32:4f:50:4a:97:2c:71:c9:36:36:06:a5:21:96:57:16:89: 57:25:be:59:9b:84:d5:6b:d9:4c:65:0e:f8:a4:80:27:23:55: 78:c5:3d:40:d3:e6:76:6b:82:89:ab:db:e5:68:e0:3b:7f:fd: ea:cb:8e:ca:7f:ff:89:7b:2f:d2:f1:fc:12:dd:14:2b:1e:6f: 42:98:de:c3:41:1c:8b:e6:8d:80:c5:29:00:6e:aa:75:fb:37: 7c:80:65:73:ac:9f:f9:58:60:e7:2a:31:c8:e8:e9:90:b7:e8: 78:7a:2a:98:15:1f:4e:d0:8e:39:db:da:fe:7e:51:29:c0:8e: aa:19:23:01:85:1a:6b:a0:25:0a:2d:26:28:5d:f5:15:b0:bc: ab:c4:90:4a:b6:dd:63:f4:3a:99:07:6f:35:dc:94:b7:f0:23: 6a:71:5d:b3:9b:2c:d0:8f:63:f4:d8:27:6e:e8:8e:07:c0:53: e2:db:b6:b8:b4:15:b7:b5:01:fa:fc:09:d9:17:8b:b6:dc:06: c8:01:d6:8f:ad:e8:1c:09:c8:bb:5c:a1:ca:36:0e:8d:ac:21: 74:9f:05:4c:6a:b9:40:7b:8a:7b:73:ef:d0:c7:4e:20:27:f6: 06:93:a5:31:b9:d5:fa:25:70:6e:09:af:c4:7b:b2:5c:6c:7c: 6c:81:09:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkMxQzExMC8GA1UEBRMoMzY0NUNEOTBFM0Y0M0MwMTJEQUIzQkYzOTcyRTg2QkM5 NERERDQ1NDAeFw0yNDA1MTcwNzIyNDNaFw0yNDA1MjQwNzIyNDNaMBgxFjAUBgNV BAMTDTY2NDcwNWMzLWJhZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR9Z8oIf4TrjjLJV/IDV0FyS4c5juv5prMY+aSADxEx4IH0mfq2NKWUD7verjC 7ZN5iJbCeLY5WfXptlHLi9TfKRCQLcvTXgB1rlXGRRjuw3G6AdH9/QxLg1YWmYss bAkyI9zOXcS0odyPeYdhbEtWG+CbgCbCwyUWDiGCek9d8Qlz9lxScpL9vqXKRAXy 8qzh3HI6PcBei5oiEIoQB6XSvhrIoKMCVJ4sXU65CNJcY+7SgBa2MJE/5AqBqXti uPO80YxvOSk3n19+vAMiuQzVDgn7jaV+a59TPv1yzgYylLvsE42EzT2+9owTeEhV dVrTi+EjGNPciqorChpGSx6LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbWHQzmza 5XB1YKhbQPoVKLbjHXMwHwYDVR0jBBgwFoAUNkXNkOP0PAEtqzvzly6GvJTd1FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQzFDLzNDMTQyQjE2NTdG RTExRUVBQTU1MzA2MEM0RjlBRTAyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmtYTmtPUDBQQUV0cXp2emx5Nkd2SlRkMUZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QzFDLzNDMTQyQjE2NTdGRTExRUVBQTU1MzA2MEM0RjlBRTAyL05rWE5rT1AwUEFF dHF6dnpseTZHdkpUZDFGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM0yT1BKlyxxyTY2BqUhllcWiVclvlmbhNVr2UxlDvikgCcjVXjFPUDT 5nZrgomr2+Vo4Dt//erLjsp//4l7L9Lx/BLdFCseb0KY3sNBHIvmjYDFKQBuqnX7 N3yAZXOsn/lYYOcqMcjo6ZC36Hh6KpgVH07Qjjnb2v5+USnAjqoZIwGFGmugJQot Jihd9RWwvKvEkEq23WP0OpkHbzXclLfwI2pxXbObLNCPY/TYJ27ojgfAU+Lbtri0 Fbe1Afr8CdkXi7bcBsgB1o+t6BwJyLtcoco2Do2sIXSfBUxquUB7intz79DHTiAn 9gaTpTG51folcG4Jr8R7slxsfGyBCW8= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org