$ rpki-client -vvf rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft File: 3QKn6NfJdXxle9pq2dV_BYgf-lc.mft (raw, json) Hash identifier: hlNaedW+m8i8w6OqF9VSO3kK9wZfEIabiNBeT975vwQ= Subject key identifier: 40:78:DA:9E:CE:7D:1B:D8:D5:EF:26:BD:28:06:72:AB:44:DF:C6:43 Authority key identifier: DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57 Certificate issuer: /CN=A91754CB/serialNumber=DD02A7E8D7C9757C657BDA6AD9D57F05881FFA57 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft Manifest number: C3 Signing time: Sun 19 May 2024 06:27:51 +0000 Manifest this update: Sun 19 May 2024 06:27:50 +0000 Manifest next update: Sun 26 May 2024 06:27:50 +0000 Files and hashes: 1: 3QKn6NfJdXxle9pq2dV_BYgf-lc.crl (hash: I7qO6np7/wzAwCRm2CkgwMIIqZ1z9gJ81WxfXx4kcQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.crl rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754CB/serialNumber=DD02A7E8D7C9757C657BDA6AD9D57F05881FFA57 Validity Not Before: May 19 06:27:50 2024 GMT Not After : May 26 06:27:50 2024 GMT Subject: CN=66499be7-d083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:73:6d:83:77:72:bb:7a:b2:bd:89:51:de:46: 63:0e:ff:5f:c4:53:2e:c1:cf:95:b1:7c:c0:d7:ee: b6:cc:49:ae:69:ee:8a:99:b5:08:67:cf:db:f0:46: 32:a9:63:b7:93:7a:0c:21:e5:75:ed:93:03:4b:94: 5c:f7:b7:14:d8:0d:8d:e0:53:55:9d:62:41:44:37: 23:b9:40:dd:a1:97:41:96:f6:3f:2c:98:cf:de:65: af:bc:75:7c:fe:d7:16:ac:db:19:d7:7c:0a:d8:eb: 13:b6:b7:0e:52:1e:1c:71:29:7c:47:75:14:8b:32: 41:d2:3e:72:db:91:fd:85:17:94:ac:3b:ae:76:60: b1:18:e9:14:07:06:96:ff:08:18:ba:8c:2a:4e:cc: fe:31:ab:a9:c5:18:d5:0d:8e:57:16:3c:9b:62:b6: b4:d9:3f:96:b9:2b:0e:bf:dd:fc:94:89:ed:4f:2c: 5e:25:64:47:ff:f4:99:14:19:63:80:52:81:ce:8c: b2:f3:ae:c1:fc:ee:a2:f8:a8:6b:a1:a5:9c:36:0b: d2:78:0f:1a:c7:26:8f:d4:44:eb:6d:09:05:52:45: 05:0d:bc:08:47:92:f6:44:c4:1c:de:27:ad:73:4c: 35:9c:66:08:34:a1:a3:13:a0:15:72:61:52:6c:c2: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:DA:9E:CE:7D:1B:D8:D5:EF:26:BD:28:06:72:AB:44:DF:C6:43 X509v3 Authority Key Identifier: keyid:DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8e:5a:2b:81:d1:0e:e6:2c:33:5e:ff:e6:b5:c7:f4:a5:5b: 44:53:61:d5:55:73:f0:69:06:3e:9e:31:23:96:1f:70:31:8d: fd:6c:4b:a7:a0:99:f2:34:5d:01:88:70:1c:6e:09:00:2b:68: 83:10:92:be:cf:9d:ea:2b:d4:28:69:43:9a:9e:72:26:d4:98: e2:0e:99:7c:88:d1:2c:c6:d2:20:20:e7:71:2d:12:bb:5e:19: 3c:42:86:04:f5:0a:6b:2f:7a:3a:06:16:ab:c5:8c:a8:45:34: 6c:76:2f:11:61:2a:dc:55:2e:ae:e1:7a:41:fc:05:26:3b:9f: 23:e9:f8:63:ec:b4:df:26:96:42:f7:9f:7a:16:1d:ab:2a:8c: ca:16:ec:17:b7:47:d8:69:7b:eb:0c:69:cc:ec:e3:77:e6:39: 65:6e:e6:2f:24:eb:0d:62:db:b3:35:71:6c:61:99:63:74:81: e3:46:c5:3a:1b:85:b0:49:66:e2:87:22:47:cb:6d:09:6d:4e: 6c:d2:65:51:f7:58:51:fb:f6:7a:22:63:36:12:96:4a:91:20: e1:06:08:af:ae:ab:43:ca:93:56:3f:d3:7b:5a:ec:1b:2a:b2: d3:28:80:fe:a0:df:98:15:82:0e:5b:4b:74:93:ea:ca:74:bf: 79:1e:30:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0Q0IxMTAvBgNVBAUTKEREMDJBN0U4RDdDOTc1N0M2NTdCREE2QUQ5RDU3RjA1 ODgxRkZBNTcwHhcNMjQwNTE5MDYyNzUwWhcNMjQwNTI2MDYyNzUwWjAYMRYwFAYD VQQDEw02NjQ5OWJlNy1kMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73Ntg3dyu3qyvYlR3kZjDv9fxFMuwc+VsXzA1+62zEmuae6KmbUIZ8/b8EYy qWO3k3oMIeV17ZMDS5Rc97cU2A2N4FNVnWJBRDcjuUDdoZdBlvY/LJjP3mWvvHV8 /tcWrNsZ13wK2OsTtrcOUh4ccSl8R3UUizJB0j5y25H9hReUrDuudmCxGOkUBwaW /wgYuowqTsz+MaupxRjVDY5XFjybYra02T+WuSsOv938lIntTyxeJWRH//SZFBlj gFKBzoyy867B/O6i+KhroaWcNgvSeA8axyaP1ETrbQkFUkUFDbwIR5L2RMQc3iet c0w1nGYINKGjE6AVcmFSbMIZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB42p7O fRvY1e8mvSgGcqtE38ZDMB8GA1UdIwQYMBaAFN0Cp+jXyXV8ZXvaatnVfwWIH/pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDQi81M0JFNERCRUZE RDExMUVEOTg3MzMwNjdDNEY5QUUwMi8zUUtuNk5mSmRYeGxlOXBxMmRWX0JZZ2Yt bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNRS242TmZKZFh4bGU5cHEyZFZfQllnZi1sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDQi81M0JFNERCRUZERDExMUVEOTg3MzMwNjdDNEY5QUUwMi8zUUtuNk5mSmRY eGxlOXBxMmRWX0JZZ2YtbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCajlorgdEO5iwzXv/mtcf0pVtEU2HVVXPwaQY+njEjlh9wMY39bEun oJnyNF0BiHAcbgkAK2iDEJK+z53qK9QoaUOannIm1JjiDpl8iNEsxtIgIOdxLRK7 Xhk8QoYE9QprL3o6BharxYyoRTRsdi8RYSrcVS6u4XpB/AUmO58j6fhj7LTfJpZC 9596Fh2rKozKFuwXt0fYaXvrDGnM7ON35jllbuYvJOsNYtuzNXFsYZljdIHjRsU6 G4WwSWbihyJHy20JbU5s0mVR91hR+/Z6ImM2EpZKkSDhBgivrqtDypNWP9N7Wuwb KrLTKID+oN+YFYIOW0t0k+rKdL95HjBv -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org