$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: TO99zy8cQPrQp5rLi1yaYvJlBfZ3btElXS25EegsHHY= Subject key identifier: AC:73:6E:FF:84:B8:D0:CF:89:19:8F:00:E3:F6:82:3F:3C:BD:38:4E Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 047C Signing time: Thu 25 Apr 2024 01:39:14 +0000 Manifest this update: Thu 25 Apr 2024 01:39:14 +0000 Manifest next update: Thu 02 May 2024 01:39:14 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: vrCuFCKoZ0lfbyZ06e0LTRCQpjWD7zCk2ML3fwK5hgA=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: fORYtpH+Y/yaCTfuevpelaEgQuQ6091gJtdfNUZODQM=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ATRZxlh2CWtRWRrq3/rN+uZjh+E93qnlzmevzrRxq+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Apr 25 01:39:14 2024 GMT Not After : May 2 01:39:14 2024 GMT Subject: CN=6629b442-7b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:02:ab:df:cd:41:1f:a3:64:b3:db:31:02: d4:71:80:07:7b:4e:d8:c7:ea:34:95:dd:25:16:d7: 1b:2c:7f:26:a9:2d:e8:6d:5d:ed:dc:83:42:16:5b: b4:c1:9f:17:32:83:84:29:8f:6d:7c:85:00:99:48: 86:ad:b6:74:47:32:f4:22:37:ec:2b:b8:42:2b:bb: 13:82:e4:bb:d0:de:4f:b3:e5:a3:ca:87:53:13:f9: 88:20:68:6b:42:27:6c:49:bc:f2:45:2a:d1:b2:4c: 9d:54:98:a8:cb:ef:b1:ed:84:dd:11:a4:26:ac:b6: 34:99:84:0f:45:17:c9:10:76:42:da:cd:51:3d:9e: 68:3e:cf:f3:29:5a:3c:ad:ad:b4:eb:57:ac:91:d0: e7:a7:8c:24:5e:fe:42:b5:01:97:b0:0e:9b:8a:c7: 2b:99:7c:91:de:f2:a9:5f:40:9c:50:7f:d9:ed:6a: 27:8e:70:ed:b1:5b:5d:f9:ed:44:92:9a:67:93:14: 70:4b:57:bb:62:7b:9d:0f:89:8d:a2:77:47:bb:99: 16:3e:0d:9d:8c:31:27:7f:20:d2:4f:58:62:72:33: 18:87:5e:b4:6e:37:85:54:54:ed:4c:b8:76:69:42: 25:4e:6a:2f:f0:d8:e9:04:b8:9b:0f:a9:4a:c5:33: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:73:6E:FF:84:B8:D0:CF:89:19:8F:00:E3:F6:82:3F:3C:BD:38:4E X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:11:ff:b4:8c:8b:49:47:f5:da:e0:06:88:63:71:eb:0e:c3: fb:89:48:74:ff:f6:e8:5a:a0:fd:ad:00:39:93:40:a7:ea:00: 0f:18:51:d3:14:f9:30:3c:cc:aa:66:a9:fe:30:e3:71:c7:f6: b9:9b:58:45:2c:9e:24:c9:c4:b6:d6:2f:37:98:31:90:29:28: 8c:b6:4f:3b:3f:18:3c:19:fb:7f:2c:0a:79:44:4d:fa:61:d4: 30:1b:7f:5d:4e:ab:3a:4d:7d:e8:ea:33:5f:fc:ff:e6:16:68: 5f:f2:97:f5:9b:03:78:29:02:1d:f6:81:4d:de:a2:0f:0e:be: fc:91:0f:2a:d2:02:55:8b:3a:cc:38:46:b5:ea:7e:22:06:cd: 20:1e:a7:f7:27:65:78:8a:f2:87:77:08:93:19:ef:6d:82:a2: 8c:ed:08:d0:62:00:4c:0d:6f:42:2d:94:ef:e6:6b:19:ac:7b: 12:68:4f:b6:a1:a3:ae:84:32:ba:16:17:56:c4:c9:70:b8:3e: 80:15:98:62:79:6e:ba:aa:3d:b8:29:95:45:0e:b5:96:c3:7b: 40:55:e0:93:58:1c:75:54:18:e6:74:81:11:c0:54:ce:f1:05: 16:86:58:eb:45:f8:75:56:88:45:41:43:91:4a:e7:7b:6a:73: 4b:1f:af:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjQwNDI1MDEzOTE0WhcNMjQwNTAyMDEzOTE0WjAYMRYwFAYD VQQDEw02NjI5YjQ0Mi03YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rQCq9/NQR+jZLPbMQLUcYAHe07Yx+o0ld0lFtcbLH8mqS3obV3t3INCFlu0 wZ8XMoOEKY9tfIUAmUiGrbZ0RzL0IjfsK7hCK7sTguS70N5Ps+WjyodTE/mIIGhr QidsSbzyRSrRskydVJioy++x7YTdEaQmrLY0mYQPRRfJEHZC2s1RPZ5oPs/zKVo8 ra2061eskdDnp4wkXv5CtQGXsA6biscrmXyR3vKpX0CcUH/Z7WonjnDtsVtd+e1E kppnkxRwS1e7YnudD4mNondHu5kWPg2djDEnfyDST1hicjMYh160bjeFVFTtTLh2 aUIlTmov8NjpBLibD6lKxTPf3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxzbv+E uNDPiRmPAOP2gj88vThOMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoEf+0jItJR/Xa4AaIY3HrDsP7iUh0//boWqD9rQA5k0Cn6gAPGFHT FPkwPMyqZqn+MONxx/a5m1hFLJ4kycS21i83mDGQKSiMtk87Pxg8Gft/LAp5RE36 YdQwG39dTqs6TX3o6jNf/P/mFmhf8pf1mwN4KQId9oFN3qIPDr78kQ8q0gJVizrM OEa16n4iBs0gHqf3J2V4ivKHdwiTGe9tgqKM7QjQYgBMDW9CLZTv5msZrHsSaE+2 oaOuhDK6FhdWxMlwuD6AFZhieW66qj24KZVFDrWWw3tAVeCTWBx1VBjmdIERwFTO 8QUWhljrRfh1VohFQUORSud7anNLH6/9 -----END CERTIFICATE-----Generated at Thu Apr 25 02:05:27 2024 by rpki-client on console-fra.rpki-client.org