$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: tGmd7Jw3TrFK270m8aqapldI0dhBchEqx4Qx3G1kapg= Subject key identifier: 2B:B7:26:14:A5:2A:25:13:DE:C7:6C:F8:35:3A:71:64:24:54:0B:0A Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 08CA Signing time: Fri 26 Apr 2024 21:26:09 +0000 Manifest this update: Fri 26 Apr 2024 21:26:09 +0000 Manifest next update: Fri 03 May 2024 21:26:09 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: huqz82qP2PMVzz+L6xF4WDHy9jbIMzvCbZpUkHgVTi4=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: XwHLgMRVpullwU1R9AA7YcD8EJye551MKEICmLnB8Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Apr 26 21:26:09 2024 GMT Not After : May 3 21:26:09 2024 GMT Subject: CN=662c1bf1-c7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:4b:92:6b:ec:be:97:2c:26:f5:ba:c2:1b: 44:8f:7a:b1:74:e2:de:74:0f:f9:b1:04:c6:ea:33: 2a:ba:f9:d3:aa:70:bb:af:b4:b2:e3:f3:db:fa:6f: 9e:4f:65:93:d7:4c:d1:27:02:15:56:a4:94:f4:bb: ac:15:54:ce:e4:a6:5c:20:3c:bb:9d:82:21:3c:a2: 3d:6e:d3:41:64:40:01:34:a8:8a:6d:7b:f0:41:5b: 89:99:f7:63:95:3f:e9:d8:95:b4:28:82:aa:a1:d7: 58:12:a4:b9:aa:43:2b:62:c8:c1:d6:dc:1f:a1:6f: 3b:6b:13:a2:5a:1e:3c:fe:7f:eb:54:32:05:e2:d0: 14:27:f6:37:fa:03:a6:45:6d:ac:ce:53:f6:dd:15: 59:95:bb:fa:ce:65:95:5f:26:0c:26:55:5e:85:45: ab:24:2b:b9:9c:80:a0:9c:c7:23:f2:b7:6a:21:7a: 5b:f2:77:57:4b:75:b9:54:f1:11:d7:06:a9:b5:5c: d5:be:fa:d2:2f:8d:61:4f:9f:8b:c9:2b:83:e3:36: b1:26:3b:a3:8b:6d:1c:33:b8:6c:ad:75:72:19:5a: 09:6a:77:e5:3f:50:66:7a:7d:6c:54:15:87:8b:19: e0:47:4c:7d:09:a6:74:95:82:8c:11:ce:46:4c:47: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:26:14:A5:2A:25:13:DE:C7:6C:F8:35:3A:71:64:24:54:0B:0A X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:2b:f8:de:52:be:8b:e6:23:6a:d4:79:ec:04:e2:fa:fe: 5a:26:63:23:08:aa:72:f4:c6:6b:f8:22:b6:77:63:f4:84:f1: 01:80:d2:c8:11:ca:37:89:a2:de:9e:de:09:10:3a:7b:a5:fb: 8a:b9:6a:f0:be:c5:fa:ea:c1:10:51:7d:f6:73:bc:e5:bd:aa: 7d:eb:b7:a6:4d:1c:b9:13:0e:37:14:f3:71:7f:82:da:fc:c3: 92:85:ae:d0:ba:2d:b3:6a:34:1b:18:b0:6b:fd:37:94:c5:c7: 77:1c:d4:ad:e9:8b:7c:df:b3:f1:bd:b3:d9:62:68:48:5c:96: 4e:ae:c8:21:2c:e5:e8:37:10:82:a6:4b:a0:e5:b7:5b:c2:2a: 34:36:6e:3e:c8:60:44:aa:e3:83:a2:23:87:cd:45:37:c1:7c: 3f:6e:a2:c0:a2:8b:62:72:1d:89:74:a8:65:77:34:3b:bb:61: a5:e0:f5:b3:ce:71:65:68:5e:57:2b:1e:5f:38:1d:75:90:c9: b1:16:54:1e:72:ed:56:8d:8c:ac:9d:3a:43:12:42:51:70:f9: 57:28:5c:40:2f:9c:96:f3:24:72:54:5b:aa:1b:90:0a:1e:36: 7c:62:2b:3c:04:7a:6a:27:78:23:8e:9c:24:41:fb:49:d3:a5: 62:86:db:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjQwNDI2MjEyNjA5WhcNMjQwNTAzMjEyNjA5WjAYMRYwFAYD VQQDEw02NjJjMWJmMS1jN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVlLkmvsvpcsJvW6whtEj3qxdOLedA/5sQTG6jMquvnTqnC7r7Sy4/Pb+m+e T2WT10zRJwIVVqSU9LusFVTO5KZcIDy7nYIhPKI9btNBZEABNKiKbXvwQVuJmfdj lT/p2JW0KIKqoddYEqS5qkMrYsjB1twfoW87axOiWh48/n/rVDIF4tAUJ/Y3+gOm RW2szlP23RVZlbv6zmWVXyYMJlVehUWrJCu5nICgnMcj8rdqIXpb8ndXS3W5VPER 1waptVzVvvrSL41hT5+LySuD4zaxJjuji20cM7hsrXVyGVoJanflP1Bmen1sVBWH ixngR0x9CaZ0lYKMEc5GTEebQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu3JhSl KiUT3sds+DU6cWQkVAsKMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGaSv43lK+i+YjatR57ATi+v5aJmMjCKpy9MZr+CK2d2P0hPEBgNLI Eco3iaLent4JEDp7pfuKuWrwvsX66sEQUX32c7zlvap967emTRy5Ew43FPNxf4La /MOSha7Qui2zajQbGLBr/TeUxcd3HNSt6Yt837PxvbPZYmhIXJZOrsghLOXoNxCC pkug5bdbwio0Nm4+yGBEquODoiOHzUU3wXw/bqLAootich2JdKhldzQ7u2Gl4PWz znFlaF5XKx5fOB11kMmxFlQecu1WjYysnTpDEkJRcPlXKFxAL5yW8yRyVFuqG5AK HjZ8Yis8BHpqJ3gjjpwkQftJ06Vihtut -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:57 2024 by rpki-client on console-ams.rpki-client.org