$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: cX2ZZJtnRxCoaYo2onidfWGKPl5pJK96VW9qdgme9+Y= Subject key identifier: 66:9E:77:67:7E:58:C2:C8:8C:46:6D:F0:1B:8F:67:FE:EE:BE:2D:BB Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2930 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 292A Signing time: Mon 06 May 2024 14:24:58 +0000 Manifest this update: Mon 06 May 2024 14:24:57 +0000 Manifest next update: Mon 13 May 2024 14:24:57 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: wp0ldEo+C2n6KwLx/9VJjM5ZhGLURVdaRRIG5NDv5qc=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 1Cfdy1pxa+dsaSYkDY6rlZlIF9Xum+DTbSMYUwIZIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10544 (0x2930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: May 6 14:24:57 2024 GMT Not After : May 13 14:24:57 2024 GMT Subject: CN=6638e839-1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:c2:8d:df:40:b0:e4:ad:95:2d:d8:0a:5d: ab:ee:aa:74:16:8a:40:65:de:f6:35:68:21:32:ca: 90:ec:cc:d8:0f:bd:86:15:49:d7:9c:a2:4c:6d:d6: 4c:4f:ca:7c:97:79:58:f4:19:ac:5f:3a:e8:e6:6b: 0b:ed:85:fa:65:5f:85:b6:a6:49:e6:d3:e8:84:22: 72:c1:ce:11:35:32:6f:27:34:95:7d:16:15:dd:32: 92:08:98:49:70:9e:34:5e:1e:cf:dd:c6:00:e4:3f: 7b:97:b8:ae:f7:72:d6:3c:79:33:7a:01:94:48:6d: b8:77:47:11:42:54:0f:8d:95:39:a3:fd:3d:ef:a5: 37:ab:d2:1a:8e:2c:90:ec:0a:bd:f3:19:b5:3b:ae: d5:b4:da:56:37:1e:7e:ec:71:87:6d:74:c3:ed:90: 66:f5:aa:d3:27:87:cd:38:ad:89:3d:bd:55:71:c7: 87:73:73:a8:c8:0d:dd:eb:99:fd:23:96:cd:7d:de: 4f:67:a6:9b:03:34:1f:ba:04:0e:9d:ef:05:aa:af: 8e:57:4b:bc:1c:57:49:98:76:f8:d5:2e:d4:5d:11: ff:58:e2:c4:ac:19:99:5b:78:15:f0:c3:51:7b:be: 46:9c:33:e6:69:bb:53:28:bd:86:2d:db:c3:b0:be: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:77:67:7E:58:C2:C8:8C:46:6D:F0:1B:8F:67:FE:EE:BE:2D:BB X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e1:bd:69:3a:75:55:13:fd:89:4c:36:b3:fc:36:39:3e:09: 14:31:d8:c8:86:12:11:cd:01:91:c9:dc:8a:9f:de:97:d8:2d: 7c:be:e0:ee:1d:68:3c:a7:6e:b9:87:b8:49:2d:5e:7e:80:26: 0d:ee:50:c7:f4:ec:37:02:cf:31:66:9d:f4:95:9d:30:cb:84: a1:de:24:8e:9b:fd:a2:df:25:8e:91:b0:bc:ce:01:24:fc:ec: ba:13:8b:28:dd:f2:0a:da:a0:18:3f:06:66:e9:a7:8c:63:76: 8c:a3:eb:fa:62:7f:2b:71:60:98:14:a8:4b:c5:08:80:48:b1: 11:62:3a:a6:b1:b7:2a:b8:09:98:f8:39:12:e5:86:1f:a4:6d: b5:fb:0f:3d:e8:b7:96:43:7a:bd:ac:ef:40:c7:3c:d0:2a:9f: 01:4b:dd:d5:73:f8:fa:d7:f5:46:24:54:40:12:77:0d:3a:bb: 86:69:54:bf:f3:23:d5:f7:4d:d7:4d:bf:d4:89:76:bd:17:7b: 19:98:d4:df:5c:ca:f8:65:b2:a9:6f:d9:4c:ff:54:4d:c0:a5: 50:92:3d:67:42:2c:bc:bf:98:41:69:00:03:53:6e:8d:01:46: 0b:fb:6e:dd:85:3c:b4:b4:f1:a6:c8:1d:dc:ad:cd:71:5b:72: 0f:bb:f8:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjQwNTA2MTQyNDU3WhcNMjQwNTEzMTQyNDU3WjAYMRYwFAYD VQQDEw02NjM4ZTgzOS0xNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4vCjd9AsOStlS3YCl2r7qp0FopAZd72NWghMsqQ7MzYD72GFUnXnKJMbdZM T8p8l3lY9BmsXzro5msL7YX6ZV+FtqZJ5tPohCJywc4RNTJvJzSVfRYV3TKSCJhJ cJ40Xh7P3cYA5D97l7iu93LWPHkzegGUSG24d0cRQlQPjZU5o/0976U3q9IajiyQ 7Aq98xm1O67VtNpWNx5+7HGHbXTD7ZBm9arTJ4fNOK2JPb1VcceHc3OoyA3d65n9 I5bNfd5PZ6abAzQfugQOne8Fqq+OV0u8HFdJmHb41S7UXRH/WOLErBmZW3gV8MNR e75GnDPmabtTKL2GLdvDsL5/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaed2d+ WMLIjEZt8BuPZ/7uvi27MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi4b1pOnVVE/2JTDaz/DY5PgkUMdjIhhIRzQGRydyKn96X2C18vuDu HWg8p265h7hJLV5+gCYN7lDH9Ow3As8xZp30lZ0wy4Sh3iSOm/2i3yWOkbC8zgEk /Oy6E4so3fIK2qAYPwZm6aeMY3aMo+v6Yn8rcWCYFKhLxQiASLERYjqmsbcquAmY +DkS5YYfpG21+w896LeWQ3q9rO9AxzzQKp8BS93Vc/j61/VGJFRAEncNOruGaVS/ 8yPV903XTb/UiXa9F3sZmNTfXMr4ZbKpb9lM/1RNwKVQkj1nQiy8v5hBaQADU26N AUYL+27dhTy0tPGmyB3crc1xW3IPu/i5 -----END CERTIFICATE-----Generated at Mon May 6 17:36:23 2024 by rpki-client on console-fra.rpki-client.org