$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: BXKGGralLmlIA4pP1Sx7f+mfUKEATh8/YL54r8m0RGI= Subject key identifier: E7:76:9D:2B:C6:E7:7D:6D:C5:97:6D:CD:50:F7:F2:17:77:ED:9F:77 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0275 Signing time: Fri 03 May 2024 03:49:27 +0000 Manifest this update: Fri 03 May 2024 03:49:27 +0000 Manifest next update: Fri 10 May 2024 03:49:27 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: nMKFONSDK6w451Kolj7GXV6IjfEh5nh58LBYnJwKAu4=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: FVzcEavihlH8kMCyqaKG50pf3MU+fWjBVs43IHGTcS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: May 3 03:49:27 2024 GMT Not After : May 10 03:49:27 2024 GMT Subject: CN=66345ec7-b37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:c7:15:5b:39:5a:66:cc:fb:c4:0c:8b:11: f1:11:aa:4d:9a:74:d5:bc:12:10:c2:e4:a2:d4:f2: 39:fc:86:8b:5d:52:75:e6:5e:be:5a:98:4f:e9:d8: c3:7e:0c:b8:f4:94:c7:b0:34:ac:4a:85:5d:86:0d: d1:f5:17:77:11:c2:ab:f9:85:b0:ec:a6:c0:35:49: f1:83:33:f9:55:64:43:3d:21:9f:e8:a6:24:d1:c8: 85:11:9a:02:fa:44:a5:0d:78:0c:18:14:e4:5a:c4: fc:b7:1a:1c:13:57:83:94:fd:55:25:b0:80:14:2e: 27:c6:8c:45:b9:97:b9:a4:61:12:f2:ce:17:66:5c: 98:43:76:fb:3b:91:29:8c:25:0f:ef:19:36:f3:fb: ed:ec:33:19:96:5e:2e:d6:0d:7d:96:94:73:6c:b4: cb:73:ec:ab:37:e2:00:49:30:5e:20:12:a1:55:f1: 63:c3:07:cd:d4:f2:f1:9d:6e:fd:90:80:1f:3a:57: 34:1a:83:25:bd:3a:77:13:71:22:d0:d6:c0:68:df: ef:32:5e:7f:c8:fc:61:9a:d6:b8:7b:3e:85:fc:3a: e6:b8:57:a8:3d:a9:1d:07:c2:9a:eb:d9:9f:73:ea: 2e:bb:27:c0:58:cc:2b:9d:cf:89:3a:38:98:7d:4b: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:76:9D:2B:C6:E7:7D:6D:C5:97:6D:CD:50:F7:F2:17:77:ED:9F:77 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:32:0f:22:9b:1f:d7:7c:c9:cb:af:41:ab:5c:d9:14:00:49: 88:f1:20:c0:92:a2:26:36:61:28:cc:e8:61:33:24:0a:66:77: 90:ef:d5:f6:c2:c5:6c:6b:a8:3b:4a:68:6f:05:d5:1b:3e:f0: 0a:7b:ac:cd:19:6a:7f:cc:c7:36:23:56:0a:54:7d:9c:8f:91: 9e:26:17:1f:89:ea:e3:50:e7:9f:ff:23:29:ae:c6:6d:9a:19: dc:f9:26:81:6a:9c:09:d4:78:15:9d:6e:94:d7:c0:34:02:a1: ce:bd:e5:ca:f7:ee:d9:0c:86:be:86:04:83:11:4f:9b:9d:e1: f3:c3:3d:55:4e:bd:ea:37:52:85:c7:11:ee:bb:09:b4:a8:3d: 63:df:54:f4:0e:26:bc:76:02:89:2f:52:47:b9:6d:90:9c:5d: 0f:85:0e:0b:80:7c:8e:06:cf:40:d0:d2:35:58:97:5c:71:6f: 27:44:8b:de:70:d5:a0:e0:56:9b:42:2a:39:68:44:8b:0e:fb: de:a1:c0:a0:ec:29:15:9c:9b:c9:e0:1b:01:bc:2e:1e:a7:f1: 3f:ff:8b:9c:c2:c6:ef:2c:6d:3c:5a:1a:27:54:e4:93:b9:10: 50:e1:32:45:e3:23:69:b2:ad:cf:26:4a:21:a6:88:12:40:89: b7:be:b3:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjQwNTAzMDM0OTI3WhcNMjQwNTEwMDM0OTI3WjAYMRYwFAYD VQQDEw02NjM0NWVjNy1iMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfzHFVs5WmbM+8QMixHxEapNmnTVvBIQwuSi1PI5/IaLXVJ15l6+WphP6djD fgy49JTHsDSsSoVdhg3R9Rd3EcKr+YWw7KbANUnxgzP5VWRDPSGf6KYk0ciFEZoC +kSlDXgMGBTkWsT8txocE1eDlP1VJbCAFC4nxoxFuZe5pGES8s4XZlyYQ3b7O5Ep jCUP7xk28/vt7DMZll4u1g19lpRzbLTLc+yrN+IASTBeIBKhVfFjwwfN1PLxnW79 kIAfOlc0GoMlvTp3E3Ei0NbAaN/vMl5/yPxhmta4ez6F/DrmuFeoPakdB8Ka69mf c+ouuyfAWMwrnc+JOjiYfUvk+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd2nSvG 531txZdtzVD38hd37Z93MB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbMg8imx/XfMnLr0GrXNkUAEmI8SDAkqImNmEozOhhMyQKZneQ79X2 wsVsa6g7SmhvBdUbPvAKe6zNGWp/zMc2I1YKVH2cj5GeJhcfierjUOef/yMprsZt mhnc+SaBapwJ1HgVnW6U18A0AqHOveXK9+7ZDIa+hgSDEU+bneHzwz1VTr3qN1KF xxHuuwm0qD1j31T0Dia8dgKJL1JHuW2QnF0PhQ4LgHyOBs9A0NI1WJdccW8nRIve cNWg4FabQio5aESLDvveocCg7CkVnJvJ4BsBvC4ep/E//4ucwsbvLG08WhonVOST uRBQ4TJF4yNpsq3PJkohpogSQIm3vrN+ -----END CERTIFICATE-----Generated at Fri May 3 04:36:55 2024 by rpki-client on console-ams.rpki-client.org