$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: NqynQJPDk+C9JOOfoV4SUmR7F8AtDs85kLrGPEX0stQ= Subject key identifier: ED:79:D8:C8:A5:49:C5:7D:0D:FA:EE:C5:42:EA:62:70:1A:F7:27:94 Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 0596 Signing time: Sun 19 May 2024 00:25:01 +0000 Manifest this update: Sun 19 May 2024 00:25:00 +0000 Manifest next update: Sun 26 May 2024 00:25:00 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: jHZFVb5GgtDHdU0d2+cX5AMzVjMh6ftT2FD2G5faLHg=) 2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: QEOVhybwf6Wz+3qRFXxn3E9W4TWcZxLHMSU1XgjYyAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: May 19 00:25:00 2024 GMT Not After : May 26 00:25:00 2024 GMT Subject: CN=664946dd-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:bd:25:4d:67:86:93:b1:8a:6b:cf:7c:f2: 91:3c:de:4d:0c:89:a9:43:bb:87:93:cc:26:bc:71: 62:20:15:17:ce:a0:1c:8d:ff:b2:1c:7b:bd:df:9b: f3:56:0b:5f:8f:98:58:3c:8a:d2:a0:bf:26:83:5d: ab:6e:69:8a:2a:6a:15:a0:24:a3:61:f9:ad:e3:9b: af:7e:bb:4d:29:4a:ee:b4:21:c8:05:bd:bd:75:e7: d2:24:28:f0:df:60:f7:1c:49:cd:17:bb:b1:9b:ce: 7f:a0:f2:a9:6b:33:5b:86:6f:a8:d2:d4:da:80:cc: 5e:59:74:cc:33:40:47:71:3a:4f:54:0c:77:b4:b0: e7:18:41:5b:d9:b8:14:90:f7:07:71:92:45:41:8b: 1e:d6:31:d9:3e:05:f2:c5:cb:be:c0:3f:97:cd:0e: 5a:fe:81:11:07:25:e4:6f:70:8a:21:18:49:eb:83: 4e:d1:d2:4f:44:1d:28:a1:6c:31:52:c1:86:0a:a3: b9:eb:46:a9:19:3a:f7:1a:8c:62:94:c1:7d:c7:a6: 73:a9:bb:da:97:83:de:dc:ac:8a:c9:4b:83:31:0a: ef:a4:df:cd:7d:f1:24:a6:26:4b:f7:bc:0c:b9:8d: d1:fd:c2:b9:ff:fd:aa:e2:9c:82:03:1d:99:fa:a3: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:D8:C8:A5:49:C5:7D:0D:FA:EE:C5:42:EA:62:70:1A:F7:27:94 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:26:4a:76:62:08:fd:ad:16:2b:f4:eb:5f:07:65:cc:b1:2a: a1:b2:98:d9:6a:f0:77:b4:b6:30:95:0b:e7:80:b8:8d:16:8d: bc:62:51:51:a0:7b:4e:97:59:4a:3e:bd:9a:d3:5c:55:7a:ff: 55:3d:71:37:37:25:c9:d4:2e:c3:4d:26:d9:5e:03:83:09:00: e8:a7:7f:5b:06:90:b8:0b:99:15:4f:0e:5f:b7:76:ae:07:86: 9e:05:21:c4:5e:93:d0:a2:a9:d6:c3:bc:9d:66:de:00:a3:6d: 4f:79:e4:af:b3:79:8e:42:db:02:4a:77:91:e3:5b:ae:5c:5a: fa:86:2c:f9:25:ba:d7:d4:3b:6a:17:b7:ce:57:f0:f9:0f:b1: 06:5e:a7:e4:47:5f:36:1e:f6:63:41:25:7d:de:08:29:cb:2d: a1:b7:84:91:44:7b:28:5f:57:46:ad:09:3a:e1:bc:62:ea:99: 77:62:97:9a:d1:3f:ca:4c:3c:dc:ec:3d:04:91:50:53:ac:7c: b6:49:92:08:86:18:5b:2c:73:9a:74:b3:0c:9b:c2:a4:5f:6f: 65:d8:49:ed:24:b4:65:62:da:06:70:27:40:dc:80:e6:05:ee: a3:28:4e:68:a0:ff:c1:5f:18:ec:8b:d8:81:06:22:a6:15:a1: 4d:ee:42:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjQwNTE5MDAyNTAwWhcNMjQwNTI2MDAyNTAwWjAYMRYwFAYD VQQDEw02NjQ5NDZkZC03Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro69JU1nhpOximvPfPKRPN5NDImpQ7uHk8wmvHFiIBUXzqAcjf+yHHu935vz Vgtfj5hYPIrSoL8mg12rbmmKKmoVoCSjYfmt45uvfrtNKUrutCHIBb29defSJCjw 32D3HEnNF7uxm85/oPKpazNbhm+o0tTagMxeWXTMM0BHcTpPVAx3tLDnGEFb2bgU kPcHcZJFQYse1jHZPgXyxcu+wD+XzQ5a/oERByXkb3CKIRhJ64NO0dJPRB0ooWwx UsGGCqO560apGTr3GoxilMF9x6Zzqbval4Pe3KyKyUuDMQrvpN/NffEkpiZL97wM uY3R/cK5//2q4pyCAx2Z+qM9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO152Mil ScV9DfruxULqYnAa9yeUMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVJkp2Ygj9rRYr9OtfB2XMsSqhspjZavB3tLYwlQvngLiNFo28YlFR oHtOl1lKPr2a01xVev9VPXE3NyXJ1C7DTSbZXgODCQDop39bBpC4C5kVTw5ft3au B4aeBSHEXpPQoqnWw7ydZt4Ao21PeeSvs3mOQtsCSneR41uuXFr6hiz5JbrX1Dtq F7fOV/D5D7EGXqfkR182HvZjQSV93ggpyy2ht4SRRHsoX1dGrQk64bxi6pl3Ypea 0T/KTDzc7D0EkVBTrHy2SZIIhhhbLHOadLMMm8KkX29l2EntJLRlYtoGcCdA3IDm Be6jKE5ooP/BXxjsi9iBBiKmFaFN7kIV -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org