$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: 0q3zmT5FGR05aGOzQJFW2HlAss88IzkVBtVQU0rUmQc= Subject key identifier: E1:FF:15:DA:97:99:AC:36:51:C8:BC:20:AA:A4:F9:85:64:A0:6C:C6 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 10D0 Signing time: Fri 31 May 2024 21:35:13 +0000 Manifest this update: Fri 31 May 2024 21:35:12 +0000 Manifest next update: Fri 07 Jun 2024 21:35:12 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: kG8K3Z5y5riLnfHUyn5zzh11XOBtmpSsK0GXDzPthOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: May 31 21:35:12 2024 GMT Not After : Jun 7 21:35:12 2024 GMT Subject: CN=665a4290-459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:54:3a:9a:38:1c:a0:15:23:01:d6:a1:79: c6:42:ec:ff:f8:16:f1:dd:fc:35:8e:88:3f:a2:56: cf:13:91:eb:15:3e:df:e4:1f:65:22:7a:33:11:54: aa:89:15:33:e0:29:f6:63:0d:79:b6:5d:9f:8b:85: 02:1f:f5:72:eb:96:a5:46:46:8e:a7:b9:9c:76:1a: f2:69:f0:6d:6e:39:23:5a:bd:5f:ea:6d:0d:eb:fe: 83:e4:db:01:fa:3d:5d:07:84:81:3a:be:d3:0d:1d: a0:23:77:4e:84:95:77:1b:9e:71:9a:8d:3c:03:2c: 91:a3:11:32:3f:55:9e:2f:93:cb:70:27:5d:a1:3c: 04:f8:e3:69:a1:06:07:7f:da:f7:99:77:5d:71:bd: 34:d2:5a:8c:e2:b7:2a:18:84:96:22:e4:1b:3a:91: a4:88:bf:1f:a5:1c:ff:41:23:c8:5f:66:97:ab:76: 1c:a1:32:31:f3:39:9a:ca:75:38:c1:46:78:7e:e0: 21:46:6e:65:f6:6d:05:28:7a:7e:39:cf:6d:42:7a: 70:ae:7a:51:ae:4a:b2:ec:7b:a2:28:ed:e7:e4:93: 79:59:ae:4f:8e:80:e9:bf:14:44:20:a3:1e:e8:a8: 64:1f:18:5b:58:9a:a6:59:db:9a:68:c0:2b:77:24: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:15:DA:97:99:AC:36:51:C8:BC:20:AA:A4:F9:85:64:A0:6C:C6 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:94:54:c8:19:97:28:e6:45:b8:c4:aa:d9:c1:ff:74:04:31: 77:9c:d9:63:3b:78:33:2d:ae:f1:6d:e1:e8:92:62:10:c5:b7: f1:d2:38:33:a0:74:30:1d:6f:e5:8a:7e:b6:c1:d0:10:20:57: d2:2a:6b:4c:84:a7:03:27:ee:43:d0:85:e9:4e:f8:3a:fa:9d: 52:fa:23:7a:e6:11:28:be:3f:95:fd:e3:dd:51:67:a1:e4:a8: 70:bd:f7:df:84:2c:09:73:81:1a:25:37:c2:eb:68:9d:89:9b: 6b:04:f9:cb:21:41:93:31:ad:07:e8:94:db:40:7f:e7:b5:34: 59:a2:01:f3:42:8e:47:f8:54:38:ad:18:6a:31:72:b8:f7:f3: 80:23:c3:d6:c9:41:f3:59:2c:f4:f0:85:76:08:42:16:01:ee: 9e:df:f1:50:98:f1:43:b6:8b:2c:ac:bd:eb:1e:93:17:6a:23: 25:7c:5a:90:9a:ad:6d:fb:d9:10:07:53:e4:b5:2f:d3:86:c1: af:9e:6d:88:6a:d3:0e:5c:8a:0d:6e:f1:54:f1:86:9b:a8:6e: 4e:50:e1:1e:aa:25:1e:f7:c0:02:30:af:af:5f:74:1b:00:91: 55:69:90:3c:fc:b0:f7:f5:ae:10:a4:33:f8:bd:c8:47:6c:51: 1a:0b:83:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjQwNTMxMjEzNTEyWhcNMjQwNjA3MjEzNTEyWjAYMRYwFAYD VQQDEw02NjVhNDI5MC00NTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwftUOpo4HKAVIwHWoXnGQuz/+Bbx3fw1jog/olbPE5HrFT7f5B9lInozEVSq iRUz4Cn2Yw15tl2fi4UCH/Vy65alRkaOp7mcdhryafBtbjkjWr1f6m0N6/6D5NsB +j1dB4SBOr7TDR2gI3dOhJV3G55xmo08AyyRoxEyP1WeL5PLcCddoTwE+ONpoQYH f9r3mXddcb000lqM4rcqGISWIuQbOpGkiL8fpRz/QSPIX2aXq3YcoTIx8zmaynU4 wUZ4fuAhRm5l9m0FKHp+Oc9tQnpwrnpRrkqy7HuiKO3n5JN5Wa5PjoDpvxREIKMe 6KhkHxhbWJqmWduaaMArdyTN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH/FdqX maw2Uci8IKqk+YVkoGzGMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8lFTIGZco5kW4xKrZwf90BDF3nNljO3gzLa7xbeHokmIQxbfx0jgz oHQwHW/lin62wdAQIFfSKmtMhKcDJ+5D0IXpTvg6+p1S+iN65hEovj+V/ePdUWeh 5KhwvfffhCwJc4EaJTfC62idiZtrBPnLIUGTMa0H6JTbQH/ntTRZogHzQo5H+FQ4 rRhqMXK49/OAI8PWyUHzWSz08IV2CEIWAe6e3/FQmPFDtossrL3rHpMXaiMlfFqQ mq1t+9kQB1PktS/ThsGvnm2IatMOXIoNbvFU8YabqG5OUOEeqiUe98ACMK+vX3Qb AJFVaZA8/LD39a4QpDP4vchHbFEaC4OA -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:21 2024 by rpki-client on console-ams.rpki-client.org