$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: LLXTO0+mGnpqKN2b2ZfF+FdM2VAIIWVl0L1TUnX/ryg= Subject key identifier: 8B:20:01:B0:41:D8:3E:C9:6F:A0:C1:1B:D3:88:DE:12:D1:9C:3A:9F Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 81 Signing time: Sun 19 May 2024 07:09:35 +0000 Manifest this update: Sun 19 May 2024 07:09:34 +0000 Manifest next update: Sun 26 May 2024 07:09:34 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: ZGF9D/E+FsywQYTajNf3/TYI31iCsRfuCr8cUPB4+AE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: May 19 07:09:34 2024 GMT Not After : May 26 07:09:34 2024 GMT Subject: CN=6649a5af-c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:7c:83:b6:1b:86:f1:47:d1:08:23:bb:dc: bf:d4:87:21:8e:c4:f6:57:61:30:b9:c7:39:69:3d: d1:e4:93:bf:ef:56:8d:b5:c7:9d:38:1d:05:ed:f8: 25:1f:7a:1b:74:1c:53:5b:8d:33:ae:19:9a:7c:2e: 65:c7:7c:05:bd:76:33:b5:a3:b2:c2:5a:a3:6b:63: 9e:dc:86:cb:b8:80:3b:f1:c5:3f:20:ed:d0:d7:e1: fb:76:8b:82:54:8c:11:cc:32:00:bd:4d:a9:34:4a: f1:47:e7:80:c3:2b:8f:c3:22:55:94:bf:3f:34:c1: 26:db:40:70:a2:b6:d6:7a:fd:ff:9a:d2:08:f4:d4: eb:06:c5:9c:f5:b4:06:cc:36:30:1e:dc:52:c4:56: 19:4d:cf:6a:ea:68:77:f3:a4:d6:e3:6a:17:df:10: 0d:e9:85:8c:f9:c1:20:52:ac:ec:d4:9f:d7:99:bf: 79:df:db:30:1a:d0:6f:41:5e:27:63:6c:34:82:a6: 38:0e:6c:37:02:5a:d0:0f:33:86:4d:73:13:87:23: 36:e1:49:95:b5:04:d9:31:d6:6d:7c:b4:5f:08:92: 46:4e:75:42:c1:44:26:f0:f9:ec:dd:64:ac:94:09: ed:71:cd:89:46:ee:cf:5f:ce:c5:6a:d6:e6:7b:08: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:01:B0:41:D8:3E:C9:6F:A0:C1:1B:D3:88:DE:12:D1:9C:3A:9F X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:88:7d:d9:ff:4f:ad:ea:73:a2:48:68:0f:15:18:14:bd:d2: 37:65:14:87:38:07:d6:d0:0a:27:b8:47:ff:84:be:99:b1:29: 5d:c3:a7:cf:63:31:5e:08:91:0e:30:9e:13:3e:c9:c2:ff:07: 29:59:7a:19:1c:f2:ab:25:99:96:59:b0:39:3d:6c:40:31:f3: 51:8e:36:86:5c:5a:bb:2e:44:0b:ae:84:ad:8e:28:4f:48:7f: 13:f4:c6:82:e1:2e:3a:41:54:e3:15:e6:5c:71:47:60:5e:c0: 2c:9f:82:64:38:b0:a9:4e:17:ec:bb:c4:54:44:15:79:3b:bd: fa:5f:b0:1e:e1:9e:f0:f2:83:ec:72:bd:e5:21:07:b5:0d:1d: 37:06:87:81:64:ec:e3:e8:ec:a8:94:45:a2:9f:fc:df:e3:75: ac:48:ba:7e:43:fe:47:a1:6c:f2:9d:94:79:a2:58:7a:09:ca: ad:a9:8f:fe:09:2f:4f:72:7d:eb:13:5c:4a:70:30:19:23:9c: f2:e7:3e:d4:77:52:4d:85:9e:37:84:b0:79:2a:03:2a:6b:cb: 9e:12:32:c7:c3:46:db:da:dc:68:65:ba:b1:71:9a:08:01:da: 64:c5:90:73:37:73:31:82:fb:f0:82:c2:26:53:18:a2:c3:8d: d8:b1:ff:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjQwNTE5MDcwOTM0WhcNMjQwNTI2MDcwOTM0WjAYMRYwFAYD VQQDEw02NjQ5YTVhZi1jOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Jl8g7YbhvFH0Qgju9y/1IchjsT2V2Ewucc5aT3R5JO/71aNtcedOB0F7fgl H3obdBxTW40zrhmafC5lx3wFvXYztaOywlqja2Oe3IbLuIA78cU/IO3Q1+H7douC VIwRzDIAvU2pNErxR+eAwyuPwyJVlL8/NMEm20BworbWev3/mtII9NTrBsWc9bQG zDYwHtxSxFYZTc9q6mh386TW42oX3xAN6YWM+cEgUqzs1J/Xmb9539swGtBvQV4n Y2w0gqY4Dmw3AlrQDzOGTXMThyM24UmVtQTZMdZtfLRfCJJGTnVCwUQm8Pns3WSs lAntcc2JRu7PX87FatbmewgrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsgAbBB 2D7Jb6DBG9OI3hLRnDqfMB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPiH3Z/0+t6nOiSGgPFRgUvdI3ZRSHOAfW0AonuEf/hL6ZsSldw6fP YzFeCJEOMJ4TPsnC/wcpWXoZHPKrJZmWWbA5PWxAMfNRjjaGXFq7LkQLroStjihP SH8T9MaC4S46QVTjFeZccUdgXsAsn4JkOLCpThfsu8RURBV5O736X7Ae4Z7w8oPs cr3lIQe1DR03BoeBZOzj6OyolEWin/zf43WsSLp+Q/5HoWzynZR5olh6CcqtqY/+ CS9Pcn3rE1xKcDAZI5zy5z7Ud1JNhZ43hLB5KgMqa8ueEjLHw0bb2txoZbqxcZoI AdpkxZBzN3MxgvvwgsImUxiiw43Ysf/f -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org