$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json) Hash identifier: Cd4Z60cg4RKI2AGKdlMH4RbD/o9GfWEr0NVowvUSD9g= Subject key identifier: 32:D3:01:4C:C9:23:76:AC:6E:BE:3F:F1:D0:38:41:11:CF:2C:F1:AA Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft Manifest number: 0A49 Signing time: Sat 18 May 2024 20:25:19 +0000 Manifest this update: Sat 18 May 2024 20:25:19 +0000 Manifest next update: Sat 25 May 2024 20:25:19 +0000 Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: zBSioKHje2+oOacigQUX3sEglMdPX88N5mxJO4sMvkU=) 2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: qxIEJ9q4++BUQfNl/x9T14VLLuH+zqgDIVc9RNJF+8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Validity Not Before: May 18 20:25:19 2024 GMT Not After : May 25 20:25:19 2024 GMT Subject: CN=66490eaf-7241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:60:b7:cc:32:53:67:6d:f6:37:57:12:28: 3f:01:bc:a2:26:8b:c7:76:0e:d4:00:e6:15:d2:4a: 2c:6e:1e:63:10:80:b4:94:c2:bc:a4:6d:1a:39:bd: f7:0f:eb:dc:81:d0:55:12:7c:ff:ac:2b:1b:ed:37: d3:6c:58:2c:50:f4:1b:4f:c3:a8:e6:dd:aa:e4:10: 1f:5b:b3:3f:e9:db:f3:90:9a:6e:18:ce:c8:6b:fc: 87:61:00:a4:97:ff:db:a4:f8:3f:c1:06:f2:b4:ca: 51:3e:49:29:dd:3e:02:bd:61:78:69:ed:7d:fc:8f: d2:4b:3b:6c:7a:f6:d4:c6:ad:f1:90:a5:c3:c1:e7: 6e:ee:9e:b6:53:6b:ba:15:71:7d:20:a7:f2:16:9a: 65:50:b3:6f:e4:cf:d0:81:a0:29:ab:cb:0f:bc:91: 73:7a:8c:54:d4:e8:79:0e:fb:04:c9:9a:78:f3:91: f8:ee:34:a2:6a:ab:ce:69:c7:e8:1e:97:cd:91:86: 4e:0f:1e:88:69:85:57:73:39:13:89:fd:dc:74:93: f4:c2:c2:80:86:5a:2d:cf:a3:e3:99:c2:73:aa:13: 9f:ef:0b:0b:c0:dd:d2:73:92:25:79:49:d9:4b:fe: 7b:6a:d0:41:6c:81:a5:d0:10:cb:01:49:9a:2a:05: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D3:01:4C:C9:23:76:AC:6E:BE:3F:F1:D0:38:41:11:CF:2C:F1:AA X509v3 Authority Key Identifier: keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4f:1a:73:11:fd:ee:a7:e1:51:f7:22:3c:78:38:ab:4a:c2: 0f:e6:42:03:bb:35:e0:c6:bb:44:bd:89:06:3a:5e:de:ef:9e: 02:25:9c:8a:62:21:75:99:5f:e3:d1:29:8a:cc:4d:47:5f:32: 33:ed:59:35:16:78:ef:2b:ab:8a:31:15:a1:6e:b7:fe:d1:d5: 96:a3:95:4b:22:84:b3:9a:c1:f0:fa:09:40:fb:82:fb:88:5f: 07:1d:6d:33:85:a4:cb:f0:98:dd:8d:5e:a5:18:f3:6e:8c:7d: c7:14:a9:97:7b:f5:1d:6d:fa:72:69:24:f7:97:b1:46:18:4e: 89:f3:a7:0f:69:6d:ce:60:e8:18:ea:26:02:00:f6:3f:ae:b9: 2f:bc:28:33:2c:1a:90:6a:08:a6:97:89:78:e8:c2:f3:b6:9e: a4:d7:53:ba:ff:bc:84:91:db:63:d0:0f:77:b6:be:e5:62:11: be:e5:ca:40:fa:75:66:27:7a:a6:c9:53:59:ad:72:70:ff:2a: c5:46:07:e1:39:a0:7e:3e:33:28:96:fd:f0:19:5b:51:f4:de: 0e:6c:77:b3:d8:38:c6:ea:51:4c:ce:07:df:ac:2c:de:e0:9b: 79:01:ad:3f:9c:f5:52:34:74:89:17:c9:5a:25:e5:26:35:70: cd:67:82:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG MEQ3QzVDMUMwHhcNMjQwNTE4MjAyNTE5WhcNMjQwNTI1MjAyNTE5WjAYMRYwFAYD VQQDEw02NjQ5MGVhZi03MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCFgt8wyU2dt9jdXEig/AbyiJovHdg7UAOYV0kosbh5jEIC0lMK8pG0aOb33 D+vcgdBVEnz/rCsb7TfTbFgsUPQbT8Oo5t2q5BAfW7M/6dvzkJpuGM7Ia/yHYQCk l//bpPg/wQbytMpRPkkp3T4CvWF4ae19/I/SSztsevbUxq3xkKXDwedu7p62U2u6 FXF9IKfyFpplULNv5M/QgaApq8sPvJFzeoxU1Oh5DvsEyZp485H47jSiaqvOacfo HpfNkYZODx6IaYVXczkTif3cdJP0wsKAhlotz6PjmcJzqhOf7wsLwN3Sc5IleUnZ S/57atBBbIGl0BDLAUmaKgWLnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLTAUzJ I3asbr4/8dA4QRHPLPGqMB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy bEg0QWtfUV9jQVR3MThYQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDTxpzEf3up+FR9yI8eDirSsIP5kIDuzXgxrtEvYkGOl7e754CJZyK YiF1mV/j0SmKzE1HXzIz7Vk1FnjvK6uKMRWhbrf+0dWWo5VLIoSzmsHw+glA+4L7 iF8HHW0zhaTL8JjdjV6lGPNujH3HFKmXe/UdbfpyaST3l7FGGE6J86cPaW3OYOgY 6iYCAPY/rrkvvCgzLBqQagiml4l46MLztp6k11O6/7yEkdtj0A93tr7lYhG+5cpA +nVmJ3qmyVNZrXJw/yrFRgfhOaB+PjMolv3wGVtR9N4ObHez2DjG6lFMzgffrCze 4Jt5Aa0/nPVSNHSJF8laJeUmNXDNZ4IX -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org