$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: LgedkeQ9WDdVg4PnMQu1JqJ90T7vwmfgbYzslXTRbi4= Subject key identifier: B4:0A:11:6A:6D:32:BD:B1:85:29:AF:19:E1:BC:63:5F:DB:3B:A5:DE Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 33C2 Signing time: Fri 24 May 2024 15:11:10 +0000 Manifest this update: Fri 24 May 2024 15:11:09 +0000 Manifest next update: Fri 31 May 2024 15:11:09 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: Hz66U4OZ0kDwOW4IDyFmKdKeeYaC5Sq+EDVPDC260Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 15:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: May 24 15:11:09 2024 GMT Not After : May 31 15:11:09 2024 GMT Subject: CN=6650ae0d-0d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:db:05:1e:5d:96:32:a4:28:24:14:68:c5: b5:3b:6d:9e:2b:cd:ca:b6:98:d5:cd:22:d3:7a:4b: 60:e5:1f:ca:91:5d:1d:72:23:6e:74:76:aa:93:3e: 82:4e:8a:32:1b:8d:e8:81:13:a3:c2:4e:d8:8b:3d: d3:9b:4b:38:c9:5a:b4:ac:54:9b:a9:c1:c3:b5:66: e7:03:aa:76:ae:11:b4:a7:7d:cb:6c:64:ba:0b:5b: f2:7b:d5:f3:06:55:09:69:11:55:ec:6a:4a:6a:6d: 64:d8:e8:c7:c9:7c:a2:f4:49:3a:f0:14:fb:91:b0: 35:6e:a7:3f:c7:ef:62:ef:04:3c:d9:8e:f2:7d:36: 03:c3:30:ac:f4:93:6c:6e:66:a8:0b:08:ec:b3:a4: 0b:bf:55:1d:94:fa:8e:d4:c7:9e:f8:62:e0:05:6d: 86:41:7a:76:03:c0:47:04:8f:35:38:79:ff:85:e9: 14:25:e9:a6:df:b1:ff:1e:ed:98:d1:4f:95:45:3f: f1:e1:b5:b7:2b:13:0a:ab:80:f2:04:16:8f:06:89: 75:3a:96:60:9c:c8:0f:54:4e:e5:d9:5c:6b:58:5c: 9b:5b:32:69:12:4d:82:f4:97:73:fb:6f:1f:ec:0a: aa:24:44:82:fd:ad:6f:28:ae:66:41:f1:2c:d3:ca: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0A:11:6A:6D:32:BD:B1:85:29:AF:19:E1:BC:63:5F:DB:3B:A5:DE X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c8:f4:68:d5:e0:3b:f5:e2:f2:34:9d:c1:aa:08:ec:9f:ea: c3:0a:b1:fa:27:fe:e0:6a:01:e3:63:a8:65:6e:51:8a:0e:3d: 48:09:43:a7:5e:d9:94:38:e4:b4:f7:67:51:be:1f:de:8d:18: 38:f1:d6:76:5b:0a:23:0a:69:04:b0:9d:b5:42:d9:99:e9:89: 36:89:6f:5c:f3:c1:14:bd:94:fb:2b:51:5e:3e:fe:3f:89:7a: 85:64:6b:be:23:5e:7d:25:7a:70:ea:70:39:54:96:0e:29:71: 95:d8:ee:cf:3e:9a:38:65:d2:75:f9:71:43:2d:60:48:44:d8: 1a:a3:21:1b:ed:f5:22:7b:2d:8c:3d:b9:eb:3c:a0:f8:3b:5c: 47:38:43:4e:8a:46:53:ec:92:8f:f5:03:2d:d5:d3:6e:fc:34: c9:85:3f:86:7f:ce:36:dd:75:5d:b1:02:11:ff:66:9e:62:9c: b5:2e:03:08:d5:44:c4:7e:ba:7e:fd:58:63:7f:d4:80:5a:81: 99:9c:0d:a9:ec:93:ed:7e:d9:f9:dd:43:88:eb:de:bd:1d:5d: 34:4d:cb:53:57:54:37:dc:88:e0:17:2e:3b:0f:9b:39:b5:14: 21:34:fc:58:d1:58:64:03:ac:ff:3e:82:cd:df:83:13:22:65: aa:ab:b2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjQwNTI0MTUxMTA5WhcNMjQwNTMxMTUxMTA5WjAYMRYwFAYD VQQDEw02NjUwYWUwZC0wZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRfbBR5dljKkKCQUaMW1O22eK83KtpjVzSLTektg5R/KkV0dciNudHaqkz6C TooyG43ogROjwk7Yiz3Tm0s4yVq0rFSbqcHDtWbnA6p2rhG0p33LbGS6C1vye9Xz BlUJaRFV7GpKam1k2OjHyXyi9Ek68BT7kbA1bqc/x+9i7wQ82Y7yfTYDwzCs9JNs bmaoCwjss6QLv1UdlPqO1Mee+GLgBW2GQXp2A8BHBI81OHn/hekUJemm37H/Hu2Y 0U+VRT/x4bW3KxMKq4DyBBaPBol1OpZgnMgPVE7l2VxrWFybWzJpEk2C9Jdz+28f 7AqqJESC/a1vKK5mQfEs08rB9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQKEWpt Mr2xhSmvGeG8Y1/bO6XeMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHyPRo1eA79eLyNJ3Bqgjsn+rDCrH6J/7gagHjY6hlblGKDj1ICUOn XtmUOOS092dRvh/ejRg48dZ2WwojCmkEsJ21QtmZ6Yk2iW9c88EUvZT7K1FePv4/ iXqFZGu+I159JXpw6nA5VJYOKXGV2O7PPpo4ZdJ1+XFDLWBIRNgaoyEb7fUiey2M PbnrPKD4O1xHOENOikZT7JKP9QMt1dNu/DTJhT+Gf8423XVdsQIR/2aeYpy1LgMI 1UTEfrp+/Vhjf9SAWoGZnA2p7JPtftn53UOI6969HV00TctTV1Q33IjgFy47D5s5 tRQhNPxY0VhkA6z/PoLN34MTImWqq7In -----END CERTIFICATE-----Generated at Fri May 24 18:24:09 2024 by rpki-client on console-ams.rpki-client.org