$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: Z4cNi9ikePTLhEy/Ze3RKYbUaXBiyA6bewemcPEIlc8= Subject key identifier: 6C:B3:06:D8:2E:D5:32:69:81:52:23:F7:98:3E:73:60:C9:4B:21:9D Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 503D Signing time: Sat 18 May 2024 15:15:48 +0000 Manifest this update: Sat 18 May 2024 15:15:48 +0000 Manifest next update: Sat 25 May 2024 15:15:48 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 4AytkpFeUsXLCd4OvhxRoc1rgUDo+txgCSRzSlm6uqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: May 18 15:15:48 2024 GMT Not After : May 25 15:15:48 2024 GMT Subject: CN=6648c624-3c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:a7:18:b5:9f:60:2e:73:05:8d:e4:e5:a4: b1:9f:83:c6:76:ef:d7:46:4c:a2:2e:76:ed:33:d8: 85:fc:4e:ef:b0:25:69:5c:c2:de:c7:ca:b2:05:95: 59:6d:7e:80:bf:3b:c8:f2:af:b2:82:e1:35:70:47: 78:97:7b:80:4c:c2:f2:c3:f1:0b:3f:7a:b6:5e:16: 01:34:2e:e3:bc:f2:86:a2:43:e9:3a:9e:6c:bc:a4: 1c:92:d7:ff:80:b9:38:ae:13:da:f7:0d:84:67:93: cc:da:e8:08:90:37:c2:3a:0a:3b:5f:c8:ce:7d:24: 77:d5:73:8f:f2:e7:3e:bd:77:07:0a:ab:07:ca:96: 59:68:34:ab:6a:2a:8d:ab:9b:09:a0:f5:58:a3:9f: be:52:13:4b:16:4f:59:b1:a4:f3:82:c4:1b:cb:f3: b3:a2:e6:00:42:93:0a:9e:05:f0:82:05:6f:e0:d0: 4d:0c:91:c1:24:f2:33:89:55:1e:c0:fc:15:4d:57: e8:2a:7e:41:75:8f:8c:3a:95:18:d2:75:86:b3:4c: 33:db:e8:9e:84:c8:4c:54:f5:11:08:ea:81:b9:92: e4:e1:c6:ba:f7:91:77:fa:40:94:ed:c9:bc:81:c9: e4:32:78:66:81:2b:84:dc:92:67:4d:d1:4a:6d:71: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:06:D8:2E:D5:32:69:81:52:23:F7:98:3E:73:60:C9:4B:21:9D X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:76:e7:5d:4f:f2:51:1d:c1:ce:dc:dc:c2:1d:ba:e0:e2: e6:48:59:68:dd:53:c1:d3:06:bc:99:e2:01:95:03:28:4d:42: de:f1:43:44:4e:34:b1:2c:e8:24:2b:06:b3:ed:35:f0:7c:3e: d3:1d:13:a0:90:08:da:c8:07:42:e3:65:ba:19:01:ce:95:53: 79:69:df:19:11:14:2e:c8:be:f6:bf:6d:58:53:27:cc:a7:25: 66:25:4b:a5:52:eb:13:f2:51:94:12:c9:eb:64:d1:85:cd:ff: 44:a1:97:77:62:17:49:eb:fb:2f:ac:82:4a:71:7c:5b:45:15: 31:5b:06:83:57:e6:4f:0c:3b:26:8b:c2:66:17:03:51:41:11: 03:a0:21:e8:60:34:ff:c4:54:09:be:ca:3f:26:37:52:01:fb: e5:6b:da:70:11:ce:87:3d:c5:9e:d3:dd:7d:67:37:3f:dc:87: d5:96:10:07:bc:42:72:8d:24:a8:21:37:6c:18:63:7d:88:1f: 90:54:1b:ac:85:52:07:f6:7b:30:d4:75:2a:90:17:a8:85:b5: 17:7b:6e:2f:43:83:65:ba:69:33:96:c7:1c:99:d8:91:a3:42: ca:1d:28:d8:fb:81:63:0f:d7:6c:88:07:81:fc:af:e9:74:d4: 05:70:b5:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjQwNTE4MTUxNTQ4WhcNMjQwNTI1MTUxNTQ4WjAYMRYwFAYD VQQDEw02NjQ4YzYyNC0zYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJqnGLWfYC5zBY3k5aSxn4PGdu/XRkyiLnbtM9iF/E7vsCVpXMLex8qyBZVZ bX6AvzvI8q+yguE1cEd4l3uATMLyw/ELP3q2XhYBNC7jvPKGokPpOp5svKQcktf/ gLk4rhPa9w2EZ5PM2ugIkDfCOgo7X8jOfSR31XOP8uc+vXcHCqsHypZZaDSraiqN q5sJoPVYo5++UhNLFk9ZsaTzgsQby/OzouYAQpMKngXwggVv4NBNDJHBJPIziVUe wPwVTVfoKn5BdY+MOpUY0nWGs0wz2+iehMhMVPURCOqBuZLk4ca695F3+kCU7cm8 gcnkMnhmgSuE3JJnTdFKbXGrawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyzBtgu 1TJpgVIj95g+c2DJSyGdMB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5enbnXU/yUR3Bztzcwh264OLmSFlo3VPB0wa8meIBlQMoTULe8UNE TjSxLOgkKwaz7TXwfD7THROgkAjayAdC42W6GQHOlVN5ad8ZERQuyL72v21YUyfM pyVmJUulUusT8lGUEsnrZNGFzf9EoZd3YhdJ6/svrIJKcXxbRRUxWwaDV+ZPDDsm i8JmFwNRQREDoCHoYDT/xFQJvso/JjdSAfvla9pwEc6HPcWe0919Zzc/3IfVlhAH vEJyjSSoITdsGGN9iB+QVBushVIH9nsw1HUqkBeohbUXe24vQ4NlumkzlsccmdiR o0LKHSjY+4FjD9dsiAeB/K/pdNQFcLXF -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org