$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: iLHkykzwdgFdXJJ2sefiScpvC/mB9oARa7pbvKW2ARM= Subject key identifier: 20:96:1E:71:95:3F:3E:57:98:25:3D:A7:3C:50:FA:C4:E3:98:B8:C0 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: AE Signing time: Sun 19 May 2024 06:33:36 +0000 Manifest this update: Sun 19 May 2024 06:33:35 +0000 Manifest next update: Sun 26 May 2024 06:33:35 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: eP9VZ4Xyb+fjKXhcpEicF/ruMwrcth4XtSitIc1qaWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: May 19 06:33:35 2024 GMT Not After : May 26 06:33:35 2024 GMT Subject: CN=66499d40-605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:e6:10:30:01:0d:7a:36:a6:a5:35:18:e9: 83:8a:2f:21:c8:7f:f1:db:64:e2:95:8e:02:45:43: ce:b0:9a:a2:62:f1:73:20:e6:37:45:53:41:72:3d: 5f:65:ed:22:40:2f:33:9d:b0:8d:f5:6e:f8:3b:49: fe:0d:c6:9b:8a:a2:2a:6b:7a:96:c7:ad:e0:73:27: 29:5b:51:78:64:2b:dc:41:95:cc:fa:b3:04:1d:7c: a7:7f:09:24:16:d8:fa:7a:99:78:b9:62:9d:fa:de: 91:28:49:97:6f:ae:47:ad:8b:60:51:1e:10:31:d4: b4:8e:1b:71:0c:d1:4f:af:c9:54:9f:24:9b:92:57: d3:3c:43:47:f1:d1:80:e6:be:96:6b:34:5b:a5:b5: f6:b5:6d:7a:b8:45:39:cc:23:98:5b:f0:1c:4b:fb: 90:f0:8b:9b:d4:49:85:0f:b0:35:a5:ca:c2:19:2c: 3c:31:28:af:92:b9:c1:bc:5d:46:b1:8b:45:74:17: 9e:04:c0:1d:4b:ad:3e:15:7c:ba:22:b5:b2:c2:4b: 0e:42:87:37:62:27:a6:ea:31:18:5c:75:e8:d7:15: d6:2f:de:55:a2:36:f2:60:77:a8:45:c1:70:fd:1a: 89:42:5c:74:f1:ac:25:2b:c5:10:83:56:76:21:e4: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:1E:71:95:3F:3E:57:98:25:3D:A7:3C:50:FA:C4:E3:98:B8:C0 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:85:d0:31:a4:ea:b3:39:d9:ea:40:ef:78:e3:00:6f:e7:14: e9:a1:85:a4:6b:bf:79:c1:f9:5d:d5:79:6d:14:04:27:12:99: 05:a1:55:d7:25:ce:cb:b9:4c:88:ee:b5:f7:05:71:63:ce:1a: 75:f0:09:02:d7:ae:f7:78:dd:37:6b:b8:ad:cf:c2:1b:29:99: a5:12:ab:7e:57:b3:79:7e:d4:0c:a7:2c:ff:74:7b:ae:79:f4: e3:9f:52:cf:c8:39:34:37:f1:9e:a4:c0:87:1a:0c:92:89:1a: 4d:84:4e:4a:54:a3:fe:c7:f0:c9:ef:58:de:d2:30:f9:c0:23: 18:c7:c4:85:1d:08:c3:dd:6c:36:1f:35:de:32:70:48:d5:fb: 61:51:4e:6c:55:02:59:70:e6:62:41:79:9e:5c:10:82:5c:26: 5d:07:f5:6b:74:05:13:e5:37:63:40:4b:23:1f:cd:1c:e8:68: a0:3b:cb:9f:58:0e:48:7b:0a:09:69:d3:57:a3:50:c5:06:ee: f0:22:4c:0b:36:7c:68:1b:81:ae:58:dc:9b:32:cd:17:c7:e2: d1:8e:39:65:63:50:90:83:70:93:42:b2:12:b2:ba:99:3c:8c: b0:d9:4a:b0:53:e3:ac:8c:04:ef:9c:57:df:cf:43:cd:04:b0: 82:7e:1d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjQwNTE5MDYzMzM1WhcNMjQwNTI2MDYzMzM1WjAYMRYwFAYD VQQDEw02NjQ5OWQ0MC02MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ7mEDABDXo2pqU1GOmDii8hyH/x22TilY4CRUPOsJqiYvFzIOY3RVNBcj1f Ze0iQC8znbCN9W74O0n+DcabiqIqa3qWx63gcycpW1F4ZCvcQZXM+rMEHXynfwkk Ftj6epl4uWKd+t6RKEmXb65HrYtgUR4QMdS0jhtxDNFPr8lUnySbklfTPENH8dGA 5r6WazRbpbX2tW16uEU5zCOYW/AcS/uQ8Iub1EmFD7A1pcrCGSw8MSivkrnBvF1G sYtFdBeeBMAdS60+FXy6IrWywksOQoc3Yiem6jEYXHXo1xXWL95VojbyYHeoRcFw /RqJQlx08awlK8UQg1Z2IeTKHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCWHnGV Pz5XmCU9pzxQ+sTjmLjAMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhdAxpOqzOdnqQO944wBv5xTpoYWka795wfld1XltFAQnEpkFoVXX Jc7LuUyI7rX3BXFjzhp18AkC1673eN03a7itz8IbKZmlEqt+V7N5ftQMpyz/dHuu efTjn1LPyDk0N/GepMCHGgySiRpNhE5KVKP+x/DJ71je0jD5wCMYx8SFHQjD3Ww2 HzXeMnBI1fthUU5sVQJZcOZiQXmeXBCCXCZdB/VrdAUT5TdjQEsjH80c6GigO8uf WA5IewoJadNXo1DFBu7wIkwLNnxoG4GuWNybMs0Xx+LRjjllY1CQg3CTQrISsrqZ PIyw2UqwU+OsjATvnFffz0PNBLCCfh1R -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org