$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: TdT1M3fABAfF34J4B7qH7cRfkIM28no2KHaWXNuXRvo= Subject key identifier: 01:31:41:B1:EC:5A:FE:1C:5C:68:2C:0F:27:35:CC:E6:4A:0D:9C:D0 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 7A Signing time: Wed 15 May 2024 07:27:58 +0000 Manifest this update: Wed 15 May 2024 07:27:58 +0000 Manifest next update: Wed 22 May 2024 07:27:58 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: lWwn8U0/QPpQgeBGWaUSj30Km9p3XyJ/BcPNUtYAvM8=) 2: 51F4389061F911EE8421531BC4F9AE02.roa (hash: ElcRY+S+6W0DsXuDNCrFH+TYlEEUjp7N4csWW7ZwkFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: May 15 07:27:58 2024 GMT Not After : May 22 07:27:58 2024 GMT Subject: CN=664463fe-3234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:cf:cb:35:af:26:41:3e:70:ca:93:5f:e9: 71:93:11:c2:b1:89:2e:d0:fc:cf:71:09:07:0d:82: 9f:f3:50:fc:c3:c3:96:42:f1:83:ff:6e:d1:6a:f6: 3e:a3:93:02:84:62:2f:1e:d2:2a:7a:a3:b0:bd:8e: 30:a9:3a:72:b4:48:8e:c1:0e:0b:b5:9e:4f:c1:02: cd:b2:c3:42:d9:60:a0:3e:29:2a:38:4d:17:f6:93: 10:ce:e2:ac:8e:db:7f:ce:e9:12:e7:38:da:7b:8e: e4:ea:91:0f:13:88:88:13:7a:44:aa:3d:2b:98:cb: c6:24:3a:c7:01:5e:da:e3:25:66:ae:78:9e:3f:4b: 17:0a:ed:af:a8:02:2c:72:ae:0f:58:94:26:ee:a8: 3f:01:fd:2d:1e:b7:51:40:78:2b:ad:14:0d:6c:92: 19:72:f1:17:ba:e6:5c:b8:77:f4:d2:52:66:67:aa: 3e:c9:9f:62:c0:ce:d6:e6:4b:81:6e:6d:67:83:60: 89:78:c1:ee:0f:89:be:ae:74:ae:0b:36:6d:24:1f: 3b:40:53:17:02:34:1d:e9:ab:0b:6a:a1:d8:a9:be: 53:43:aa:df:bb:a1:1b:49:4d:ca:2b:7e:9f:45:8e: 16:c0:ca:fd:dc:a4:8b:84:4a:9f:f0:93:84:68:4e: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:41:B1:EC:5A:FE:1C:5C:68:2C:0F:27:35:CC:E6:4A:0D:9C:D0 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bc:ee:d5:7c:ea:f1:8c:55:9b:32:b2:25:29:f3:fe:e4:50: 62:b0:a9:be:19:de:09:49:15:57:35:d1:d6:cd:5a:e8:70:ab: 76:f9:2c:30:79:fd:79:74:a8:34:2b:97:06:56:74:c4:3c:3c: 2c:d5:f4:34:bc:fb:3c:a6:0e:f1:9c:d1:21:48:18:b2:35:9d: f4:ef:ad:52:1e:b4:9c:bb:a0:e4:18:79:e5:c8:cc:59:81:04: 51:ac:bf:78:7f:b8:aa:d0:44:11:08:92:10:f8:9e:46:b9:83: 6e:9f:08:50:b4:e0:fc:c7:ef:5f:db:f2:fa:b9:82:6c:26:4b: 07:b3:e8:f3:bd:8d:c5:25:35:95:9b:bf:55:e1:16:5f:6f:6b: e8:d0:c1:8c:c0:fe:47:1a:9b:cb:bd:ed:26:80:f2:cb:78:1e: b1:96:06:f9:20:85:df:c2:a5:4d:b4:08:ed:41:c8:fc:63:eb: 59:2f:5c:1e:4d:6c:38:ce:c7:0c:08:18:6d:17:2f:1d:ce:17: 39:d6:c8:3d:f9:68:8c:9f:76:3e:68:48:17:80:48:7e:a5:4f: 42:85:0e:2b:ab:07:7e:30:39:91:26:2f:c0:67:9f:b6:6d:be: eb:ec:3c:93:a3:15:62:1d:2f:54:bb:32:6b:23:8b:d9:18:99: df:04:5b:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzhGRDExMC8GA1UEBRMoOUNCNUNBODA3MkUyNjlDRTA1NTVBNjAwQjIxNzkyMEVC OUUxQUM0RjAeFw0yNDA1MTUwNzI3NThaFw0yNDA1MjIwNzI3NThaMBgxFjAUBgNV BAMTDTY2NDQ2M2ZlLTMyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5dc/LNa8mQT5wypNf6XGTEcKxiS7Q/M9xCQcNgp/zUPzDw5ZC8YP/btFq9j6j kwKEYi8e0ip6o7C9jjCpOnK0SI7BDgu1nk/BAs2yw0LZYKA+KSo4TRf2kxDO4qyO 23/O6RLnONp7juTqkQ8TiIgTekSqPSuYy8YkOscBXtrjJWaueJ4/SxcK7a+oAixy rg9YlCbuqD8B/S0et1FAeCutFA1skhly8Re65ly4d/TSUmZnqj7Jn2LAztbmS4Fu bWeDYIl4we4Pib6udK4LNm0kHztAUxcCNB3pqwtqodipvlNDqt+7oRtJTcorfp9F jhbAyv3cpIuESp/wk4RoTt3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUATFBsexa /hxcaCwPJzXM5koNnNAwHwYDVR0jBBgwFoAUnLXKgHLiac4FVaYAsheSDrnhrE8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOEZEL0E1QTZGMzdBNjFG ODExRUU5Rjc5NDAxQUM0RjlBRTAyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJF OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkxYS2dITGlhYzRGVmFZQXNoZVNEcm5ockU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OEZEL0E1QTZGMzdBNjFGODExRUU5Rjc5NDAxQUM0RjlBRTAyL25MWEtnSExpYWM0 RlZhWUFzaGVTRHJuaHJFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJO87tV86vGMVZsysiUp8/7kUGKwqb4Z3glJFVc10dbNWuhwq3b5LDB5 /Xl0qDQrlwZWdMQ8PCzV9DS8+zymDvGc0SFIGLI1nfTvrVIetJy7oOQYeeXIzFmB BFGsv3h/uKrQRBEIkhD4nka5g26fCFC04PzH71/b8vq5gmwmSwez6PO9jcUlNZWb v1XhFl9va+jQwYzA/kcam8u97SaA8st4HrGWBvkghd/CpU20CO1ByPxj61kvXB5N bDjOxwwIGG0XLx3OFznWyD35aIyfdj5oSBeASH6lT0KFDiurB34wOZEmL8Bnn7Zt vuvsPJOjFWIdL1S7Mmsji9kYmd8EWy8= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org