$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: GlzpxjHGNzq1+sBSxYLiPktdObwxfYSYkZ4n8v+Bxl0= Subject key identifier: 76:F8:C2:F6:01:40:22:49:45:F9:97:16:1E:45:45:93:C0:14:D3:BC Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 1741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 1739 Signing time: Tue 30 Apr 2024 17:11:52 +0000 Manifest this update: Tue 30 Apr 2024 17:11:52 +0000 Manifest next update: Tue 07 May 2024 17:11:52 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: GMlhjBzI+w740JKnJ2doT6p4G/BTZ3sxEBJVpwyUj20=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: 3wB4boaztvZkE/91J5aLTRU+lG9nTNcWQfbPYYQvgcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5953 (0x1741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Validity Not Before: Apr 30 17:11:52 2024 GMT Not After : May 7 17:11:52 2024 GMT Subject: CN=66312658-9181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:bc:59:36:3b:6e:ce:40:0d:49:1b:2f:3a: 1c:50:c0:92:c3:7f:fc:23:59:64:7e:11:f8:c9:d3: 96:a2:4c:32:d9:74:45:27:83:5f:16:1f:bd:ea:a5: 7e:d9:24:55:52:35:f8:fb:c1:49:27:26:f0:cf:54: 1d:70:4c:0a:a5:f7:bb:e8:72:a3:87:3d:31:e7:5c: ec:bc:11:0d:67:46:50:48:49:da:18:29:ba:33:35: 8d:51:e8:d4:f1:ea:6f:b2:79:f9:24:e7:0a:af:5f: b1:88:22:b7:14:80:e0:e2:aa:2b:c9:3e:42:e0:97: 20:fa:85:d1:de:a6:d7:e8:75:eb:bb:7a:5b:33:80: e3:26:13:72:2b:a9:de:76:7d:ec:71:1d:9d:e1:05: 1e:05:e2:5e:6a:49:a5:3c:53:a6:82:a7:e7:d2:8c: dc:80:48:93:ec:f6:41:82:aa:c0:03:cf:0b:29:0b: 61:d0:14:9b:1b:96:54:6e:64:be:49:b8:33:bf:bf: fe:c2:14:94:9d:05:10:c1:4d:bd:3b:eb:ec:06:06: 80:d9:52:82:2a:8a:ec:45:96:22:c4:c7:fc:14:50: ca:fa:4c:11:42:13:f3:3f:bb:9f:40:32:89:76:77: 2c:60:f1:ee:1b:4c:c7:c4:b1:89:e7:44:d8:b4:fe: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:C2:F6:01:40:22:49:45:F9:97:16:1E:45:45:93:C0:14:D3:BC X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:ab:4c:a7:cb:84:6f:02:18:51:6b:7c:11:1c:58:b3:14: 1f:fb:54:b3:f5:e9:18:bb:44:88:61:2a:f8:ca:f0:3a:d9:1b: 77:39:1c:d4:f5:60:5f:eb:f0:3c:c3:82:d6:64:06:e4:ad:0d: 3e:c2:d3:cd:35:81:fa:4a:c5:05:c2:2f:3c:d2:76:05:ab:d3: 31:90:c4:c5:78:a2:04:f9:7c:4d:ae:b9:17:ba:bd:d8:ca:54: 58:87:55:64:16:ac:5b:37:5c:00:6f:0a:96:0f:2c:8a:fe:95: a8:6b:02:46:c7:d6:81:8c:5f:eb:f7:a9:7d:a7:41:b4:f3:3b: d2:2b:0a:9f:63:93:fd:49:12:f5:63:85:7f:a2:05:32:fc:bb: 37:a7:29:e4:58:2a:fa:ca:d1:86:b0:a6:6b:9a:d2:32:64:ac: 3d:35:9e:9d:61:84:7e:61:f2:8b:bd:57:a7:2b:e7:c4:e5:4e: 74:fa:03:59:fc:af:d3:75:19:30:5f:52:ba:17:84:c1:eb:d6: 37:70:c8:c5:98:76:fe:a7:dc:cb:ef:bd:1b:cd:77:7d:6c:36: ed:3f:6b:88:be:61:71:19:2a:9f:4c:6c:68:43:16:3a:da:91: 9e:b0:85:89:b4:13:ad:7c:1f:d3:10:46:5f:cc:b0:19:68:0e: 00:50:41:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjQwNDMwMTcxMTUyWhcNMjQwNTA3MTcxMTUyWjAYMRYwFAYD VQQDEw02NjMxMjY1OC05MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz228WTY7bs5ADUkbLzocUMCSw3/8I1lkfhH4ydOWokwy2XRFJ4NfFh+96qV+ 2SRVUjX4+8FJJybwz1QdcEwKpfe76HKjhz0x51zsvBENZ0ZQSEnaGCm6MzWNUejU 8epvsnn5JOcKr1+xiCK3FIDg4qoryT5C4Jcg+oXR3qbX6HXru3pbM4DjJhNyK6ne dn3scR2d4QUeBeJeakmlPFOmgqfn0ozcgEiT7PZBgqrAA88LKQth0BSbG5ZUbmS+ Sbgzv7/+whSUnQUQwU29O+vsBgaA2VKCKorsRZYixMf8FFDK+kwRQhPzP7ufQDKJ dncsYPHuG0zHxLGJ50TYtP7UbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb4wvYB QCJJRfmXFh5FRZPAFNO8MB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSKtMp8uEbwIYUWt8ERxYsxQf+1Sz9ekYu0SIYSr4yvA62Rt3ORzU 9WBf6/A8w4LWZAbkrQ0+wtPNNYH6SsUFwi880nYFq9MxkMTFeKIE+XxNrrkXur3Y ylRYh1VkFqxbN1wAbwqWDyyK/pWoawJGx9aBjF/r96l9p0G08zvSKwqfY5P9SRL1 Y4V/ogUy/Ls3pynkWCr6ytGGsKZrmtIyZKw9NZ6dYYR+YfKLvVenK+fE5U50+gNZ /K/TdRkwX1K6F4TB69Y3cMjFmHb+p9zL770bzXd9bDbtP2uIvmFxGSqfTGxoQxY6 2pGesIWJtBOtfB/TEEZfzLAZaA4AUEFU -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:48 2024 by rpki-client on console-ams.rpki-client.org