$ rpki-client -vvf rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft File: NLH5jq_8ZuNBzHCYT87YI3iDSck.mft (raw, json) Hash identifier: Tl5KkPfIbm8v1khoH9SehJadpTsT3z/a7vKpOu3kxUQ= Subject key identifier: CA:F9:E4:E5:2E:48:9A:4B:22:DD:68:87:82:23:6C:6F:0F:CD:D5:D1 Authority key identifier: 34:B1:F9:8E:AF:FC:66:E3:41:CC:70:98:4F:CE:D8:23:78:83:49:C9 Certificate issuer: /CN=A91D21E3/serialNumber=34B1F98EAFFC66E341CC70984FCED823788349C9 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft Manifest number: B1 Signing time: Fri 03 May 2024 06:39:33 +0000 Manifest this update: Fri 03 May 2024 06:39:32 +0000 Manifest next update: Fri 10 May 2024 06:39:32 +0000 Files and hashes: 1: NLH5jq_8ZuNBzHCYT87YI3iDSck.crl (hash: xBX0jnQPuCd/5nbJ9iEjPiTKOtURKn8LYbjHaoGXoR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.crl rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D21E3/serialNumber=34B1F98EAFFC66E341CC70984FCED823788349C9 Validity Not Before: May 3 06:39:32 2024 GMT Not After : May 10 06:39:32 2024 GMT Subject: CN=663486a5-3c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:51:ca:2f:0e:79:fd:a9:af:d3:2a:b1:41: 46:d0:37:d8:a9:03:cc:9d:35:5d:ad:2b:8c:b3:57: 26:2f:36:8a:db:66:e2:47:66:24:95:6b:01:74:95: 1a:bd:2d:78:4a:b5:2d:5f:f5:44:9e:70:35:82:d1: bc:b4:c8:74:08:59:39:f9:56:5e:57:8a:93:fa:44: 17:e0:14:5b:e5:c0:d0:07:f7:c8:d1:9e:1d:17:52: 20:94:5e:d3:e4:d6:37:f1:86:9a:ca:6b:0c:c2:c1: 8d:cc:24:fa:eb:0c:63:e7:41:a9:4a:f4:7e:6f:50: e4:91:bd:b9:cb:9f:70:28:ff:9c:f1:34:83:1b:88: 55:2c:23:24:6f:bd:4e:40:8a:98:b5:4b:2b:9d:a6: b4:ae:41:87:2b:5a:97:cb:3c:38:ac:a3:7a:88:2e: 97:26:0c:09:8a:03:87:9b:42:4c:07:87:a3:b8:82: d1:b6:c1:c3:61:b8:56:c6:37:e4:c6:41:71:49:18: a6:64:42:93:f8:4a:31:0b:3a:e2:00:f1:d3:ba:e9: 52:9b:51:61:02:d2:40:0b:f4:7a:42:ad:66:4d:82: 82:64:4f:6d:c0:62:96:54:39:84:fc:30:aa:fb:c1: 43:4c:9d:f8:cc:5d:e7:9c:35:4f:4f:52:fa:8c:b0: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F9:E4:E5:2E:48:9A:4B:22:DD:68:87:82:23:6C:6F:0F:CD:D5:D1 X509v3 Authority Key Identifier: keyid:34:B1:F9:8E:AF:FC:66:E3:41:CC:70:98:4F:CE:D8:23:78:83:49:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:23:c5:e8:e8:76:cd:41:5a:3b:e2:09:66:3f:aa:d6:b2:1d: 10:bf:aa:d6:f0:f9:20:6f:b8:22:2d:98:ff:b7:63:86:bf:04: 06:c9:21:0e:6b:49:e5:d4:a9:42:a1:85:d5:9f:27:33:16:66: 63:27:6e:f4:f3:13:08:85:b8:7f:78:df:5a:a8:ee:7a:39:fc: 87:55:5d:86:7a:fc:85:0c:5d:e2:41:4a:90:b6:c4:6c:7f:60: cd:4b:41:4f:2f:0a:81:d6:1b:64:85:cb:5c:81:1f:3d:3a:14: 30:88:55:46:34:63:69:9f:e9:7b:dd:e0:d1:02:f8:e6:95:a8: e7:b4:f2:33:88:02:26:b8:5e:6e:17:6b:3a:27:ab:a0:9a:de: 7e:07:54:85:3d:82:0e:5b:67:ef:15:87:74:b9:c8:89:04:47: db:7e:b6:6e:61:94:79:6f:9a:11:e0:d3:70:6b:09:47:ff:4c: dd:39:80:32:b3:8d:ad:65:cd:23:39:39:b8:df:ff:5a:5a:d8: d3:1c:68:60:58:ca:b2:6a:37:85:fd:7c:6a:f7:33:00:2c:87: cb:d8:f6:7d:50:84:69:c0:71:e9:88:20:1e:32:78:3b:5e:bc: 35:79:c6:f1:8f:c2:b7:2c:86:1b:3b:ee:fe:d9:c1:4e:c6:a8: f5:b0:67:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIxRTMxMTAvBgNVBAUTKDM0QjFGOThFQUZGQzY2RTM0MUNDNzA5ODRGQ0VEODIz Nzg4MzQ5QzkwHhcNMjQwNTAzMDYzOTMyWhcNMjQwNTEwMDYzOTMyWjAYMRYwFAYD VQQDEw02NjM0ODZhNS0zYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TpRyi8Oef2pr9MqsUFG0DfYqQPMnTVdrSuMs1cmLzaK22biR2YklWsBdJUa vS14SrUtX/VEnnA1gtG8tMh0CFk5+VZeV4qT+kQX4BRb5cDQB/fI0Z4dF1IglF7T 5NY38YaaymsMwsGNzCT66wxj50GpSvR+b1Dkkb25y59wKP+c8TSDG4hVLCMkb71O QIqYtUsrnaa0rkGHK1qXyzw4rKN6iC6XJgwJigOHm0JMB4ejuILRtsHDYbhWxjfk xkFxSRimZEKT+EoxCzriAPHTuulSm1FhAtJAC/R6Qq1mTYKCZE9twGKWVDmE/DCq +8FDTJ34zF3nnDVPT1L6jLDg+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr55OUu SJpLIt1oh4IjbG8PzdXRMB8GA1UdIwQYMBaAFDSx+Y6v/GbjQcxwmE/O2CN4g0nJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjFFMy9FQzNCMURBNEZC MkIxMUVEQTgyOTlCNERDNEY5QUUwMi9OTEg1anFfOFp1TkJ6SENZVDg3WUkzaURT Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05MSDVqcV84WnVOQnpIQ1lUODdZSTNpRFNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjFFMy9FQzNCMURBNEZCMkIxMUVEQTgyOTlCNERDNEY5QUUwMi9OTEg1anFfOFp1 TkJ6SENZVDg3WUkzaURTY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHI8Xo6HbNQVo74glmP6rWsh0Qv6rW8Pkgb7giLZj/t2OGvwQGySEO a0nl1KlCoYXVnyczFmZjJ2708xMIhbh/eN9aqO56OfyHVV2GevyFDF3iQUqQtsRs f2DNS0FPLwqB1htkhctcgR89OhQwiFVGNGNpn+l73eDRAvjmlajntPIziAImuF5u F2s6J6ugmt5+B1SFPYIOW2fvFYd0uciJBEfbfrZuYZR5b5oR4NNwawlH/0zdOYAy s42tZc0jOTm43/9aWtjTHGhgWMqyajeF/Xxq9zMALIfL2PZ9UIRpwHHpiCAeMng7 Xrw1ecbxj8K3LIYbO+7+2cFOxqj1sGcQ -----END CERTIFICATE-----Generated at Fri May 3 08:21:39 2024 by rpki-client on console-ams.rpki-client.org