$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: faxIQLahsc6ftEOrQ6yXZwCGLRyyNGRmCkFGCtwuUfA= Subject key identifier: 22:54:CD:08:C0:FD:5F:50:E1:1B:D0:81:13:5B:F5:0C:A3:42:54:9D Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: B3 Signing time: Sun 19 May 2024 06:32:38 +0000 Manifest this update: Sun 19 May 2024 06:32:38 +0000 Manifest next update: Sun 26 May 2024 06:32:38 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: j4YhA8MyeGSDvs04izZGEw8qHWwZfQFixAt5dl2pJog=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: 26TuMkUeWf1IIXJf6DJPXqhsS/atk8cxhQXBhAka+ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: May 19 06:32:38 2024 GMT Not After : May 26 06:32:38 2024 GMT Subject: CN=66499d06-e17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:0d:8d:0b:a1:1e:84:ae:81:05:6b:91:76: 4f:ce:f3:44:a3:af:75:bd:81:e8:dc:de:2d:98:87: 25:ac:6c:a1:c7:c3:cb:ca:1d:61:c7:bf:eb:13:cc: d5:2f:74:b4:79:ae:bc:f8:db:4a:d9:4f:51:b3:06: 2b:c7:6c:8e:3a:7d:ba:01:14:c2:57:08:b4:5a:f3: d2:99:eb:49:8a:81:cb:4c:ec:5e:f8:9d:4e:cb:fe: 19:89:23:ab:04:02:4c:e4:d0:3c:7c:77:72:4d:52: db:5d:2d:37:f5:e3:63:fc:53:6a:e0:41:da:b3:d4: 2e:85:50:af:cc:83:77:3e:b2:ea:b8:4e:0a:aa:91: 7c:8e:5e:b5:ad:e8:3c:3f:79:48:1c:97:a1:4a:9f: 70:96:e5:10:df:13:0c:72:f8:48:00:f8:67:cf:59: 99:ec:08:c7:db:38:30:ca:c0:78:70:80:d1:01:2f: c1:2c:d8:34:91:d2:b8:3f:31:e8:a0:e1:ea:21:8b: 71:a3:d3:86:b4:65:ab:01:74:ed:c5:02:42:c9:33: 94:98:d1:34:69:d4:9c:70:63:36:cb:54:f7:4b:12: 12:27:ea:0b:e7:74:95:ff:d2:85:b4:c3:cf:0a:90: ac:2d:b5:ac:3c:5c:6f:c4:83:fb:ef:b8:d8:8e:91: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:54:CD:08:C0:FD:5F:50:E1:1B:D0:81:13:5B:F5:0C:A3:42:54:9D X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:71:ce:3b:a1:1f:e7:db:45:ba:67:4e:1f:eb:dd:43:59:74: 7f:09:c7:97:9b:f3:19:50:d2:94:1a:77:31:89:bf:dc:ad:09: 06:05:00:04:bc:cc:2e:d7:41:aa:1e:67:96:99:dc:12:0c:ed: a2:ed:cc:1b:ac:b5:79:dd:2f:a8:de:d7:75:ad:8e:ea:49:db: 9b:b5:93:bf:a8:41:9f:a9:39:75:f0:6a:ec:cf:59:f7:54:cb: 8b:28:a2:68:83:b2:8a:09:71:40:e5:92:48:73:9f:34:ee:86: 22:e4:c4:1c:9b:23:36:9d:4a:d6:d8:27:c2:48:99:8c:ca:a2: c4:a1:50:72:ad:fc:3e:26:10:c1:f4:d2:3c:01:90:6b:0b:ee: 31:51:8d:ee:bb:e0:77:5a:44:d2:7d:10:3a:66:0c:f8:17:9b: f0:01:94:f2:e3:d3:68:19:c8:23:e5:ef:80:9e:36:90:68:35: 73:1e:e5:fe:11:c5:96:67:55:cb:74:13:e4:8f:df:41:4e:93: e6:8b:97:bc:95:39:a0:51:be:74:e3:24:6d:94:1b:54:1a:61: f8:95:68:a6:42:f5:7f:c1:0d:70:3c:d5:21:43:ec:80:6d:f9: 5e:e1:c2:f5:d9:88:35:5d:06:8c:9c:af:2a:45:5d:79:8e:00: d6:24:27:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjQwNTE5MDYzMjM4WhcNMjQwNTI2MDYzMjM4WjAYMRYwFAYD VQQDEw02NjQ5OWQwNi1lMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtYNjQuhHoSugQVrkXZPzvNEo691vYHo3N4tmIclrGyhx8PLyh1hx7/rE8zV L3S0ea68+NtK2U9RswYrx2yOOn26ARTCVwi0WvPSmetJioHLTOxe+J1Oy/4ZiSOr BAJM5NA8fHdyTVLbXS039eNj/FNq4EHas9QuhVCvzIN3PrLquE4KqpF8jl61reg8 P3lIHJehSp9wluUQ3xMMcvhIAPhnz1mZ7AjH2zgwysB4cIDRAS/BLNg0kdK4PzHo oOHqIYtxo9OGtGWrAXTtxQJCyTOUmNE0adSccGM2y1T3SxISJ+oL53SV/9KFtMPP CpCsLbWsPFxvxIP777jYjpFeIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJUzQjA /V9Q4RvQgRNb9QyjQlSdMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDcc47oR/n20W6Z04f691DWXR/CceXm/MZUNKUGncxib/crQkGBQAE vMwu10GqHmeWmdwSDO2i7cwbrLV53S+o3td1rY7qSdubtZO/qEGfqTl18Grsz1n3 VMuLKKJog7KKCXFA5ZJIc5807oYi5MQcmyM2nUrW2CfCSJmMyqLEoVByrfw+JhDB 9NI8AZBrC+4xUY3uu+B3WkTSfRA6Zgz4F5vwAZTy49NoGcgj5e+AnjaQaDVzHuX+ EcWWZ1XLdBPkj99BTpPmi5e8lTmgUb504yRtlBtUGmH4lWimQvV/wQ1wPNUhQ+yA bfle4cL12Yg1XQaMnK8qRV15jgDWJCfE -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org