$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: AsL/PGbHOULz/4mI44ip0swMBw60uG0RcOhnw/1Wplk= Subject key identifier: 56:A5:72:29:4E:65:88:0E:57:39:F9:EC:56:73:1D:0F:6A:F3:04:77 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3383 Signing time: Sat 18 May 2024 15:35:20 +0000 Manifest this update: Sat 18 May 2024 15:35:19 +0000 Manifest next update: Sat 25 May 2024 15:35:19 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: 3ys9+hCQGDzlBpTVco6fYk8tcUXbn4WQGU1ubRVuR8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13187 (0x3383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: May 18 15:35:19 2024 GMT Not After : May 25 15:35:19 2024 GMT Subject: CN=6648cab8-0fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:54:1c:47:e6:1b:b2:b3:2d:b0:ff:a6:09: fa:bd:90:a3:5f:17:a6:12:55:8c:b9:d5:ed:e3:aa: c7:9c:bf:84:69:0d:b9:eb:ff:14:3a:f9:fd:53:65: 21:76:b2:da:b9:b8:fd:b5:de:e8:f5:49:7d:e0:6e: 7b:c7:66:61:2a:87:51:63:8a:c8:21:1d:15:e0:f9: c4:67:4a:35:8f:ae:50:de:1d:3c:4b:86:4a:d2:af: 7c:84:e8:c3:fc:03:48:61:7d:2f:67:3d:90:df:9f: 74:ba:2b:80:3f:49:ef:ed:5f:49:72:ee:1e:b2:b3: 8a:72:77:51:a1:24:3a:24:61:e7:79:79:b2:88:62: 81:76:43:6f:ed:5d:af:dd:18:4a:8e:c8:b1:1f:dc: e6:71:d1:0d:dd:b3:ce:4a:88:49:6b:4b:cd:ff:37: 7c:b9:5a:be:ba:52:a8:8f:cc:2a:5c:d8:e0:fa:1e: b0:a1:8c:1e:75:f0:5c:2c:94:71:77:39:e7:10:12: 93:c8:85:2b:45:a0:fe:3a:84:27:18:47:f4:b0:d6: 8c:c1:07:0a:91:ec:61:61:60:65:8a:01:36:8d:5f: 40:7c:1d:0b:a9:63:b1:3c:8d:34:01:49:c5:15:2c: 1f:77:43:67:ef:a8:15:19:1c:b4:42:12:91:3b:c0: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A5:72:29:4E:65:88:0E:57:39:F9:EC:56:73:1D:0F:6A:F3:04:77 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5b:ca:34:c1:db:91:c2:df:e3:99:56:cc:08:c2:92:d5:0d: 02:7c:6f:19:08:2d:ab:b2:a8:4b:5b:d4:7b:2a:83:67:df:ba: 31:51:a6:70:83:4e:85:09:35:0b:77:48:1a:72:19:18:23:28: 47:35:f5:42:01:a3:7f:c7:1d:eb:75:c9:f2:c2:f8:de:59:06: c9:0d:6a:e3:e8:45:51:8c:3e:52:a5:12:1d:37:31:02:d4:2a: cb:f4:50:3e:75:52:c6:4e:02:90:c2:31:0e:10:cb:38:c6:93: 8b:53:ff:7b:25:ee:36:2a:79:de:18:6c:c7:05:73:d9:a6:1a: 00:c5:37:ee:a6:f6:b1:6b:71:93:f7:48:ff:03:9a:ca:dc:97: df:ab:61:16:b3:e6:30:a0:c3:c4:6d:8e:a6:91:8f:89:8c:59: b1:98:f5:f1:bf:39:e2:1e:07:ef:ab:3e:ba:17:e1:1c:2c:25: 9e:31:df:9a:24:47:b4:4e:08:fe:b6:23:e4:80:d3:da:3b:04: b5:b6:79:05:87:09:da:54:4f:21:80:96:55:ec:24:46:de:b6: 08:51:47:7a:6f:a6:ef:48:11:13:aa:77:64:8e:1c:d1:cd:2e: d5:ea:66:02:31:f3:a2:82:99:16:12:73:ac:21:99:60:78:f2: 19:1d:6b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjQwNTE4MTUzNTE5WhcNMjQwNTI1MTUzNTE5WjAYMRYwFAYD VQQDEw02NjQ4Y2FiOC0wZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4NUHEfmG7KzLbD/pgn6vZCjXxemElWMudXt46rHnL+EaQ256/8UOvn9U2Uh drLaubj9td7o9Ul94G57x2ZhKodRY4rIIR0V4PnEZ0o1j65Q3h08S4ZK0q98hOjD /ANIYX0vZz2Q3590uiuAP0nv7V9Jcu4esrOKcndRoSQ6JGHneXmyiGKBdkNv7V2v 3RhKjsixH9zmcdEN3bPOSohJa0vN/zd8uVq+ulKoj8wqXNjg+h6woYwedfBcLJRx dznnEBKTyIUrRaD+OoQnGEf0sNaMwQcKkexhYWBligE2jV9AfB0LqWOxPI00AUnF FSwfd0Nn76gVGRy0QhKRO8AjWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFalcilO ZYgOVzn57FZzHQ9q8wR3MB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAW8o0wduRwt/jmVbMCMKS1Q0CfG8ZCC2rsqhLW9R7KoNn37oxUaZw g06FCTULd0gachkYIyhHNfVCAaN/xx3rdcnywvjeWQbJDWrj6EVRjD5SpRIdNzEC 1CrL9FA+dVLGTgKQwjEOEMs4xpOLU/97Je42KnneGGzHBXPZphoAxTfupvaxa3GT 90j/A5rK3Jffq2EWs+YwoMPEbY6mkY+JjFmxmPXxvzniHgfvqz66F+EcLCWeMd+a JEe0Tgj+tiPkgNPaOwS1tnkFhwnaVE8hgJZV7CRG3rYIUUd6b6bvSBETqndkjhzR zS7V6mYCMfOigpkWEnOsIZlgePIZHWt4 -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org