$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft File: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json) Hash identifier: VKCMQ7eNMgwsQrd4w7u+hs1gj3MxxRFCp41YuOepN/s= Subject key identifier: 12:43:D5:16:CC:67:B5:35:28:39:E9:1F:CE:BF:DF:46:C8:E9:49:9B Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft Manifest number: 1B Signing time: Sun 19 May 2024 08:40:02 +0000 Manifest this update: Sun 19 May 2024 08:40:02 +0000 Manifest next update: Sun 26 May 2024 08:40:02 +0000 Files and hashes: 1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: 11ofM9yx17O0ImZx0Ktv5Sd89TFdaSvJt0jDTDpDVr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Validity Not Before: May 19 08:40:02 2024 GMT Not After : May 26 08:40:02 2024 GMT Subject: CN=6649bae2-33bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:50:33:90:ea:7e:c9:74:cf:a8:15:3c:e0: df:19:39:03:5d:28:8b:05:11:4c:19:2a:54:be:23: 5c:82:90:ad:8d:54:28:c9:dc:c8:2f:ec:fe:74:35: 36:d1:91:34:69:5d:b3:a3:80:98:7d:94:6f:d2:25: 1f:85:b5:a4:70:fd:0e:e2:37:d1:63:3b:96:01:f3: d5:2d:69:09:f1:67:75:25:78:a6:7f:e1:33:b4:fb: 84:e3:36:fd:37:ed:74:a5:62:c1:76:01:40:db:fc: c1:78:32:1e:00:b7:9a:18:20:44:14:81:3f:81:38: c6:a5:30:f7:cf:c4:0e:20:03:07:5c:86:3a:fe:f6: ee:58:fa:f7:01:8a:84:7a:50:23:08:15:23:d5:39: 9f:50:19:a8:cf:d9:c7:dc:24:bd:89:41:40:3b:a9: b6:09:dc:74:6b:33:c8:5f:61:c9:55:63:0d:9e:6a: c8:52:47:fd:ae:4d:9b:59:d1:03:cf:98:cc:7c:bc: d0:84:41:d8:ef:b8:c4:e5:2e:16:b2:d9:a4:2e:b7: 19:88:8c:25:3a:87:a2:55:54:8f:8f:d3:59:16:ef: ec:ee:6e:a4:ce:87:7e:b5:f6:66:cd:62:a4:03:f9: 3f:4a:78:3e:7b:e2:52:57:6f:cc:f0:aa:eb:03:58: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:D5:16:CC:67:B5:35:28:39:E9:1F:CE:BF:DF:46:C8:E9:49:9B X509v3 Authority Key Identifier: keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3c:46:f6:33:e5:50:79:67:ab:b3:d6:f7:46:be:2a:3a:5d: 0c:9e:dc:a6:9b:fe:be:2c:4e:b6:bc:5d:21:a8:1f:1d:fe:90: 9a:58:c4:a0:f7:41:96:a0:cd:01:2a:12:6e:d8:93:7a:f0:ed: 73:f8:7d:85:ff:1d:99:e0:22:13:41:76:51:44:f2:9e:4a:5c: a7:bb:16:3b:49:01:c7:d0:9e:2c:0c:e4:68:00:86:a1:16:e3: ab:fe:cf:60:f5:11:ad:2e:ae:0b:d4:2b:d0:e8:78:a5:e6:2c: b0:26:71:4b:e4:5f:8c:2f:25:e8:49:af:e6:4e:f3:c2:aa:50: bf:89:d0:99:ff:af:e3:a9:f6:bb:5b:26:9a:0f:e4:5a:08:70: bd:04:03:c4:dc:22:13:9a:f4:46:50:12:c0:96:93:cb:6a:5f: 47:ae:77:e7:da:d9:df:96:2a:8e:b3:af:05:45:7a:e5:21:5f: 1b:b1:c8:c5:74:07:bd:5a:da:bb:54:05:de:7c:29:ed:74:54: e4:ea:80:36:0c:7f:fc:15:82:31:72:3c:26:3d:a2:52:a5:e1: 87:e9:1d:ff:b9:35:0b:98:6b:5c:fa:c0:ca:69:d6:ff:d5:4d: c5:8d:9d:84:19:08:56:45:14:83:9b:7f:1a:f1:d0:94:98:ce: 4b:b1:53:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoRTUwQ0IyNTBCRkFEMDg2M0U4NUMyOTAyRUEwMjE5RDUz Q0MwODEyRTAeFw0yNDA1MTkwODQwMDJaFw0yNDA1MjYwODQwMDJaMBgxFjAUBgNV BAMTDTY2NDliYWUyLTMzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh5FAzkOp+yXTPqBU84N8ZOQNdKIsFEUwZKlS+I1yCkK2NVCjJ3Mgv7P50NTbR kTRpXbOjgJh9lG/SJR+FtaRw/Q7iN9FjO5YB89UtaQnxZ3UleKZ/4TO0+4TjNv03 7XSlYsF2AUDb/MF4Mh4At5oYIEQUgT+BOMalMPfPxA4gAwdchjr+9u5Y+vcBioR6 UCMIFSPVOZ9QGajP2cfcJL2JQUA7qbYJ3HRrM8hfYclVYw2eashSR/2uTZtZ0QPP mMx8vNCEQdjvuMTlLhay2aQutxmIjCU6h6JVVI+P01kW7+zubqTOh3619mbNYqQD +T9KeD574lJXb8zwqusDWI8hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEkPVFsxn tTUoOekfzr/fRsjpSZswHwYDVR0jBBgwFoAU5QyyUL+tCGPoXCkC6gIZ1TzAgS4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzZCN0Y5OTNDRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdT NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVF5eVVMLXRDR1BvWENrQzZnSVoxVHpBZ1M0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MTY5LzZCN0Y5OTNDRUJBRTExRUU4QTBFRDk2NEM0RjlBRTAyLzVReXlVTC10Q0dQ b1hDa0M2Z0laMVR6QWdTNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD88RvYz5VB5Z6uz1vdGvio6XQye3Kab/r4sTra8XSGoHx3+kJpYxKD3 QZagzQEqEm7Yk3rw7XP4fYX/HZngIhNBdlFE8p5KXKe7FjtJAcfQniwM5GgAhqEW 46v+z2D1Ea0urgvUK9DoeKXmLLAmcUvkX4wvJehJr+ZO88KqUL+J0Jn/r+Op9rtb JpoP5FoIcL0EA8TcIhOa9EZQEsCWk8tqX0eud+fa2d+WKo6zrwVFeuUhXxuxyMV0 B71a2rtUBd58Ke10VOTqgDYMf/wVgjFyPCY9olKl4YfpHf+5NQuYa1z6wMpp1v/V TcWNnYQZCFZFFIObfxrx0JSYzkuxU7A= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org