$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: uJ4/XfbuCZgpd+UMHAonIpI4gpU+QLiATo79Klp7er0= Subject key identifier: 30:E7:ED:C9:33:C0:9F:93:4F:FE:4B:D3:7F:91:F1:45:9A:07:61:30 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0C57 Signing time: Mon 06 May 2024 19:00:10 +0000 Manifest this update: Mon 06 May 2024 19:00:10 +0000 Manifest next update: Mon 13 May 2024 19:00:10 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: bIzJZt8hUl9KOosn8RZAHY0iNbgJgOVZG2WAlmrcD7g=) 2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: xXMoWckO51I4mArTtMuq39Mlgrtlx9fnP9Y8culZBac=) 3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: G+Hg04K214tOW+obz1Ogpl9COrBHiRBCE7c3okXDxqo=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: Qo9ujKHP/HIgjR+Cul2ZeUPgzD/7WS2wzo33IIGZAg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: May 6 19:00:10 2024 GMT Not After : May 13 19:00:10 2024 GMT Subject: CN=663928ba-9af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:ba:a7:23:d3:7a:e7:09:9a:e2:1d:8b:a3: a2:eb:d7:6f:b9:74:77:78:d6:7a:88:da:eb:84:d1: 45:4b:8a:70:02:c6:4e:75:fa:6d:a3:97:d8:a9:8a: 75:e4:41:2f:e8:91:80:cd:79:16:e5:88:1c:7f:1f: 3d:61:fb:f8:b4:30:cf:c2:fd:ca:7a:59:7b:b8:bb: bc:7f:58:64:75:28:4f:60:e8:19:a0:bc:55:4c:7a: 35:d7:2f:85:c4:55:a5:1b:9b:36:39:cf:98:dd:3f: fa:17:6c:82:3a:fc:75:73:a8:f9:be:77:ed:bb:e1: b8:ff:a1:31:a3:41:e6:41:5e:b9:28:42:7a:d2:37: 28:bd:17:e8:98:41:2d:75:82:c6:be:a5:85:9c:19: b1:60:86:81:87:48:ed:e7:7e:55:4f:1d:04:1c:3f: d5:c0:7a:b5:be:34:b4:a7:96:c1:fd:26:73:50:6d: 5f:47:78:87:25:7b:dc:8c:c2:0e:1b:86:ad:fe:1c: 5c:2c:eb:07:49:7e:59:ba:06:31:11:86:91:09:8b: af:5e:dc:78:d5:34:8d:79:eb:36:7b:b2:94:26:6a: 63:7f:95:80:5e:74:39:0a:e2:19:04:b8:bc:c5:72: d5:0a:8b:35:5f:c5:59:32:6f:58:a6:10:9e:4a:06: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E7:ED:C9:33:C0:9F:93:4F:FE:4B:D3:7F:91:F1:45:9A:07:61:30 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:fe:38:ea:62:22:0d:33:ed:c0:39:f6:24:23:84:09:6a:53: 78:1a:1d:c8:fd:99:6f:a8:05:52:9f:3f:b5:12:f3:d2:9b:16: bb:b3:67:5d:ee:3d:f5:30:a3:60:43:4d:ba:b6:03:a3:31:18: 54:19:c7:81:4b:37:82:43:07:19:ea:56:f4:59:b9:b7:5a:86: 55:37:99:c7:07:75:50:5e:d7:c0:47:07:c5:31:63:a8:1a:77: 1d:93:71:68:98:63:60:46:d4:ef:0b:2c:08:e5:5e:72:f4:c2: 14:7d:48:d0:c6:2f:61:2b:65:18:2a:f3:29:ff:11:49:63:0f: 4c:b5:a8:fd:0d:69:1d:ec:1a:42:05:57:05:47:fa:3d:e9:e8: 44:77:23:24:8b:18:12:47:ba:e4:18:75:41:e4:ac:76:f5:ee: 7b:9a:29:ad:bb:ef:f2:d5:7d:f1:eb:6f:94:be:4e:e2:15:b4: e9:2e:42:83:34:50:e4:29:2f:17:d0:44:a2:2b:85:da:c4:27: 72:b8:04:20:a4:ae:08:cb:ef:98:b0:78:54:4e:fe:df:c2:f0: 05:59:56:43:af:46:4e:43:27:d4:cb:c1:8b:fb:7e:a5:92:23: 8a:81:15:19:a7:63:a5:ab:d1:24:b6:b5:a2:9b:44:be:86:a4: 8f:66:50:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjQwNTA2MTkwMDEwWhcNMjQwNTEzMTkwMDEwWjAYMRYwFAYD VQQDEw02NjM5MjhiYS05YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxy6pyPTeucJmuIdi6Oi69dvuXR3eNZ6iNrrhNFFS4pwAsZOdfpto5fYqYp1 5EEv6JGAzXkW5Ygcfx89Yfv4tDDPwv3Kell7uLu8f1hkdShPYOgZoLxVTHo11y+F xFWlG5s2Oc+Y3T/6F2yCOvx1c6j5vnftu+G4/6Exo0HmQV65KEJ60jcovRfomEEt dYLGvqWFnBmxYIaBh0jt535VTx0EHD/VwHq1vjS0p5bB/SZzUG1fR3iHJXvcjMIO G4at/hxcLOsHSX5ZugYxEYaRCYuvXtx41TSNees2e7KUJmpjf5WAXnQ5CuIZBLi8 xXLVCos1X8VZMm9YphCeSgYeBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDn7ckz wJ+TT/5L03+R8UWaB2EwMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq/jjqYiINM+3AOfYkI4QJalN4Gh3I/ZlvqAVSnz+1EvPSmxa7s2dd 7j31MKNgQ026tgOjMRhUGceBSzeCQwcZ6lb0Wbm3WoZVN5nHB3VQXtfARwfFMWOo Gncdk3FomGNgRtTvCywI5V5y9MIUfUjQxi9hK2UYKvMp/xFJYw9Mtaj9DWkd7BpC BVcFR/o96ehEdyMkixgSR7rkGHVB5Kx29e57mimtu+/y1X3x62+Uvk7iFbTpLkKD NFDkKS8X0ESiK4XaxCdyuAQgpK4Iy++YsHhUTv7fwvAFWVZDr0ZOQyfUy8GL+36l kiOKgRUZp2Olq9EktrWim0S+hqSPZlAU -----END CERTIFICATE-----Generated at Mon May 6 20:19:20 2024 by rpki-client on console-fra.rpki-client.org