$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: mtaoBZEhSXcxkvQtf23slu9PRfp3CgByLliefV4Z4qE= Subject key identifier: 0C:CD:06:C5:0E:C3:45:C0:1A:67:05:7B:8C:02:C7:19:A7:55:87:8E Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0BCC Signing time: Sat 18 May 2024 19:07:12 +0000 Manifest this update: Sat 18 May 2024 19:07:12 +0000 Manifest next update: Sat 25 May 2024 19:07:12 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: 3TaJE0nCvJNZlsyZAOk4RG9juIFbq95gTsnRfl+/zMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: May 18 19:07:12 2024 GMT Not After : May 25 19:07:12 2024 GMT Subject: CN=6648fc60-7649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:2c:90:0a:92:ad:d2:3f:3e:75:35:d9:9a: ca:45:a3:07:60:0d:9c:0c:02:be:38:9f:e3:f6:07: ed:da:56:25:25:93:4b:35:ca:69:f3:34:ef:a3:21: 94:bc:de:9e:7e:b7:de:00:81:26:6d:8b:64:c5:b2: ce:5b:10:ba:cb:2d:eb:72:10:76:85:c6:a7:6a:c2: e1:23:85:79:72:c6:58:5e:04:f5:25:b4:5a:59:1c: 5e:3b:65:e5:8e:5e:58:a4:6d:38:b9:c6:12:64:fe: 82:20:7c:44:58:0f:ba:8e:53:4c:8f:07:07:4f:3c: a3:8c:fa:94:6d:59:af:bf:2c:9d:ff:ba:3a:e8:92: 20:1b:06:08:5b:48:8b:c6:c3:30:6c:4d:b9:af:cc: fb:48:1b:ba:48:31:40:69:08:fb:2b:cc:61:55:8e: 81:6b:e2:61:37:a5:d3:de:b8:86:41:36:20:a3:ad: dd:45:d3:00:e2:1a:7a:ed:14:30:0c:13:bc:46:36: 2e:28:be:24:93:9b:bd:8f:91:11:c7:8c:6d:c6:c3: 02:4d:db:c2:e9:62:63:ab:02:cb:19:f7:69:94:b7: 4b:33:d7:35:c0:9a:b7:83:36:b0:45:51:93:fd:3d: 96:f6:d5:5a:9f:50:69:dc:9c:43:b1:bb:92:c4:58: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:06:C5:0E:C3:45:C0:1A:67:05:7B:8C:02:C7:19:A7:55:87:8E X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1b:93:aa:08:98:f7:6b:e3:91:45:40:f1:bb:da:05:ed:68: 1b:7d:58:0b:27:45:84:5d:2c:0b:1d:8b:dc:80:ed:27:31:e9: 01:89:ed:78:5f:d2:13:c2:31:17:3e:2e:52:cf:0e:e4:fe:b7: 74:1c:c1:da:7f:25:df:4b:68:cb:4e:86:f3:4a:03:8f:e7:8e: 94:c4:e7:41:77:42:9f:ce:da:10:81:56:bb:15:ae:03:bf:2f: fd:d4:31:6e:4b:f6:5e:e8:5d:47:6f:90:f5:b8:5a:7d:d8:90: cf:12:5f:e8:fa:c5:3f:d8:2e:08:8a:7c:34:73:2d:11:fb:c5: 8c:d8:70:96:21:61:a0:14:f8:a0:55:fb:b2:d7:5f:09:ee:62: 52:18:a3:59:8a:f1:6e:72:b2:9b:b1:ea:1b:cc:3d:a1:1f:27: 53:93:ec:4e:c8:e8:42:41:5b:54:fc:60:04:9a:3b:59:8f:3b: a3:2d:24:82:3e:a2:e0:d7:84:b5:84:df:79:b2:84:be:93:bb: f8:e2:ad:e7:c2:51:ca:9f:f6:ce:c7:9f:44:0d:5b:41:4c:09: a2:09:62:72:56:3c:1d:6c:54:b5:5a:0a:f1:b2:ea:2d:ba:91: f0:f5:0d:dd:a2:33:c7:1f:4b:5e:e4:74:c8:ba:bc:71:ce:86: d4:3e:38:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjQwNTE4MTkwNzEyWhcNMjQwNTI1MTkwNzEyWjAYMRYwFAYD VQQDEw02NjQ4ZmM2MC03NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhcskAqSrdI/PnU12ZrKRaMHYA2cDAK+OJ/j9gft2lYlJZNLNcpp8zTvoyGU vN6efrfeAIEmbYtkxbLOWxC6yy3rchB2hcanasLhI4V5csZYXgT1JbRaWRxeO2Xl jl5YpG04ucYSZP6CIHxEWA+6jlNMjwcHTzyjjPqUbVmvvyyd/7o66JIgGwYIW0iL xsMwbE25r8z7SBu6SDFAaQj7K8xhVY6Ba+JhN6XT3riGQTYgo63dRdMA4hp67RQw DBO8RjYuKL4kk5u9j5ERx4xtxsMCTdvC6WJjqwLLGfdplLdLM9c1wJq3gzawRVGT /T2W9tVan1Bp3JxDsbuSxFhWGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzNBsUO w0XAGmcFe4wCxxmnVYeOMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQG5OqCJj3a+ORRUDxu9oF7WgbfVgLJ0WEXSwLHYvcgO0nMekBie14 X9ITwjEXPi5Szw7k/rd0HMHafyXfS2jLTobzSgOP546UxOdBd0KfztoQgVa7Fa4D vy/91DFuS/Ze6F1Hb5D1uFp92JDPEl/o+sU/2C4Iinw0cy0R+8WM2HCWIWGgFPig Vfuy118J7mJSGKNZivFucrKbseobzD2hHydTk+xOyOhCQVtU/GAEmjtZjzujLSSC PqLg14S1hN95soS+k7v44q3nwlHKn/bOx59EDVtBTAmiCWJyVjwdbFS1Wgrxsuot upHw9Q3dojPHH0te5HTIurxxzobUPjj8 -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org