$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: FbVJXXMws0KrhHSnB6y6CZF5BspZ4Jv66c5fp/h7Nso= Subject key identifier: 2A:D1:51:0E:57:3D:B4:4D:98:39:DA:76:47:B7:EF:0F:7D:0E:2B:B7 Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 17FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 17E9 Signing time: Sat 18 May 2024 16:59:35 +0000 Manifest this update: Sat 18 May 2024 16:59:34 +0000 Manifest next update: Sat 25 May 2024 16:59:34 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: GuYXYh3YTot1fHaqCTF7u2mFo+8RDuHSggtMmtR1YJw=) 2: 7ADF11EE730B11EEA3636871C4F9AE02.roa (hash: TWS2N0Ko/WPMKSAN1gPjrAr4eY8g7j46+IFuxIuYYxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6140 (0x17fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: May 18 16:59:34 2024 GMT Not After : May 25 16:59:34 2024 GMT Subject: CN=6648de77-76ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:74:b0:aa:6d:90:a8:8c:fa:64:79:fc:4a: ac:98:21:56:c5:64:7f:79:3d:64:11:ee:f2:e3:31: 01:34:64:ca:71:f8:b8:b0:19:32:9f:25:cb:f4:12: 23:4c:44:47:1b:bd:25:a1:71:67:c0:a3:ae:44:59: 89:d4:05:32:5c:d3:c1:36:dd:3a:92:3a:e3:30:68: b1:79:ff:e1:b2:3a:3b:8f:8f:56:fb:73:7f:a6:33: c8:0c:09:a6:c3:f7:80:e5:7a:d6:48:83:ad:7f:a2: ca:65:03:75:f7:d6:62:21:a0:74:c0:b2:5c:cc:be: 79:71:7f:fa:62:05:c3:ae:f9:f5:b2:8c:aa:72:09: e7:cf:f0:ec:20:6e:02:5a:1b:4d:84:60:70:3c:e0: 10:82:6e:1d:4f:b7:90:6f:0f:30:b9:92:ed:76:68: 34:50:d2:39:17:9a:32:d3:9a:a7:fd:0c:3a:13:76: 77:7f:14:19:8c:fd:db:ce:66:ff:17:0e:11:2b:10: 42:19:80:b7:3e:42:20:ea:96:6c:b5:45:b9:5a:aa: 81:aa:b6:2d:5f:9d:0b:d6:a2:00:c3:5f:f9:56:f1: 56:d1:ee:02:e7:72:55:55:9b:be:ed:2a:d2:63:4f: 13:49:69:7e:60:7c:1d:11:b4:8d:0c:e1:35:b0:ee: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:51:0E:57:3D:B4:4D:98:39:DA:76:47:B7:EF:0F:7D:0E:2B:B7 X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f7:e1:14:a5:24:8b:72:43:52:3b:b5:27:86:7c:87:2f:b7: a7:1d:68:83:20:c8:8a:45:ed:b3:2d:6c:7e:a3:9e:24:a3:28: 27:72:cc:73:5c:ea:0a:1f:17:c4:76:ab:71:b6:7d:aa:42:f4: 1d:c6:bf:cd:18:cb:fe:0e:1c:59:6a:a1:14:38:13:d4:14:52: 37:16:d7:b1:c6:f0:a5:32:33:32:2e:b6:86:b5:df:4f:12:f6: 27:3e:96:5a:ea:5e:c7:7b:3e:52:e1:1c:d5:0b:db:9e:6c:a5: 90:be:fc:35:3c:83:60:cb:2e:d9:a2:4e:86:ba:59:3b:53:09: 8d:dd:65:94:65:2a:d8:57:ec:78:25:2b:0d:92:06:43:fa:2f: 50:ff:93:da:3f:20:36:51:a0:39:0e:3e:21:d7:4b:cc:77:20: cb:19:78:57:f3:89:2e:ed:70:c7:b7:1e:6c:8f:81:b5:83:dc: 85:87:cd:e8:68:01:0f:72:63:0a:ba:a8:a4:4b:66:ca:90:23: 10:1a:90:f0:15:24:4c:80:b2:2e:c4:f3:60:08:52:9b:57:2c: 70:5f:c7:23:8a:92:45:7f:50:0a:50:f2:b9:5b:7a:93:ab:91: 53:bc:51:2c:3f:0c:36:30:bd:45:71:c7:30:f5:76:1e:98:01: 33:46:a9:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjQwNTE4MTY1OTM0WhcNMjQwNTI1MTY1OTM0WjAYMRYwFAYD VQQDEw02NjQ4ZGU3Ny03NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzh0sKptkKiM+mR5/EqsmCFWxWR/eT1kEe7y4zEBNGTKcfi4sBkynyXL9BIj TERHG70loXFnwKOuRFmJ1AUyXNPBNt06kjrjMGixef/hsjo7j49W+3N/pjPIDAmm w/eA5XrWSIOtf6LKZQN199ZiIaB0wLJczL55cX/6YgXDrvn1soyqcgnnz/DsIG4C WhtNhGBwPOAQgm4dT7eQbw8wuZLtdmg0UNI5F5oy05qn/Qw6E3Z3fxQZjP3bzmb/ Fw4RKxBCGYC3PkIg6pZstUW5WqqBqrYtX50L1qIAw1/5VvFW0e4C53JVVZu+7SrS Y08TSWl+YHwdEbSNDOE1sO7POwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrRUQ5X PbRNmDnadke37w99Diu3MB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9+EUpSSLckNSO7UnhnyHL7enHWiDIMiKRe2zLWx+o54koygncsxz XOoKHxfEdqtxtn2qQvQdxr/NGMv+DhxZaqEUOBPUFFI3FtexxvClMjMyLraGtd9P EvYnPpZa6l7Hez5S4RzVC9uebKWQvvw1PINgyy7Zok6Gulk7UwmN3WWUZSrYV+x4 JSsNkgZD+i9Q/5PaPyA2UaA5Dj4h10vMdyDLGXhX84ku7XDHtx5sj4G1g9yFh83o aAEPcmMKuqikS2bKkCMQGpDwFSRMgLIuxPNgCFKbVyxwX8cjipJFf1AKUPK5W3qT q5FTvFEsPww2ML1Fcccw9XYemAEzRqng -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org