$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: kmV5pXeiemyIbPEhG7oZwNWB/3umBjRTSrSoAWJdioQ= Subject key identifier: 69:F3:E0:ED:6C:5F:19:DF:13:86:CE:82:2A:BC:DC:CB:19:13:0C:6F Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2444 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2444 Signing time: Sat 18 May 2024 14:54:11 +0000 Manifest this update: Sat 18 May 2024 14:54:11 +0000 Manifest next update: Sat 25 May 2024 14:54:11 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: BU1fqRYKLb4lsVrfdMwkTVoD4N3DaqBAwpiAdpoH4IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9284 (0x2444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: May 18 14:54:11 2024 GMT Not After : May 25 14:54:11 2024 GMT Subject: CN=6648c113-fd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:71:d7:12:6f:a9:21:76:6b:13:ef:ab:a8: 04:c7:d9:67:26:25:02:f7:cf:e7:14:5b:4d:44:b8: f6:d8:b6:2b:72:92:3d:cc:e5:e0:e4:52:4f:79:6b: 0e:bc:26:0f:80:14:f2:ce:b8:ea:d8:a4:58:0f:59: 47:a5:93:cc:d6:7f:2e:6c:b5:e4:c8:7d:0d:94:91: 80:35:c2:9e:4e:a5:b7:67:78:68:a7:9c:c1:48:e9: 9c:a1:8a:42:50:8b:eb:23:44:b2:a5:a6:8a:13:94: 7a:09:c4:2a:4a:07:c0:6e:04:04:8a:00:f1:ec:b6: 4a:8b:0e:d1:a1:8b:4d:38:68:af:c5:50:8a:be:0a: 53:a9:4e:5d:b3:3f:70:0e:cb:16:19:be:51:db:1e: 14:f8:0d:a2:25:28:9c:ab:0e:2b:28:7e:2b:11:fd: 98:9b:41:11:f7:88:1a:fd:74:b7:ca:da:e8:f4:4e: 4b:34:88:f6:a9:f2:03:05:ea:3c:9c:c3:26:ed:73: 90:dc:a4:d8:2a:65:f9:52:cb:2d:53:75:57:52:34: 8c:a4:77:ab:ad:5b:1d:37:d4:4c:09:a9:e2:e4:c7: 65:62:fc:77:f0:8d:6c:9d:7e:da:d5:b1:b4:77:6d: 30:59:63:db:d4:a5:60:ef:d7:99:ab:c7:fa:6d:93: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:E0:ED:6C:5F:19:DF:13:86:CE:82:2A:BC:DC:CB:19:13:0C:6F X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:25:df:86:fe:fb:ac:ad:51:b5:3a:a0:3b:4e:5a:84:25:48: c1:d6:92:6a:0c:d0:be:3b:3a:15:c9:a2:96:eb:bd:c5:a0:0e: 2d:dd:ad:69:ad:92:3d:29:70:dd:c8:c0:62:45:1b:85:3f:82: 9d:07:d8:e0:fe:5a:f2:96:62:1a:2c:f8:c6:f1:c5:93:9c:b6: 23:35:2b:8f:fe:3f:af:f3:f2:8e:8e:b6:38:e6:00:8f:76:e2: 7b:dc:8b:ef:1f:43:5e:49:ec:dc:4f:ce:1a:67:94:49:00:b6: 4b:59:cd:b2:20:3a:b4:e8:4b:79:89:97:1e:8b:cf:4e:e2:0c: 0a:cf:c4:52:57:8c:02:42:0e:78:07:8b:52:f0:f4:17:b2:08: 93:7b:fd:bb:09:25:fe:da:cb:1e:ff:28:7b:d3:b1:2c:a5:6c: 7d:c9:a4:d8:b2:18:9f:d8:6d:e6:2d:eb:ca:72:a5:70:57:32: 8c:13:87:84:dc:4f:52:34:a8:be:a3:45:0a:72:7b:26:40:50: fb:fb:51:df:3f:b8:c4:d5:ae:f0:6e:04:c5:b1:ee:da:89:30: c9:95:59:2b:8e:52:7c:94:97:d3:34:2e:f9:b3:f6:ef:81:25: 4f:35:d0:ae:9b:2e:4d:8f:37:c6:fd:db:76:e5:ba:f6:a5:5b: 8c:d3:d3:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjQwNTE4MTQ1NDExWhcNMjQwNTI1MTQ1NDExWjAYMRYwFAYD VQQDEw02NjQ4YzExMy1mZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjlx1xJvqSF2axPvq6gEx9lnJiUC98/nFFtNRLj22LYrcpI9zOXg5FJPeWsO vCYPgBTyzrjq2KRYD1lHpZPM1n8ubLXkyH0NlJGANcKeTqW3Z3hop5zBSOmcoYpC UIvrI0SypaaKE5R6CcQqSgfAbgQEigDx7LZKiw7RoYtNOGivxVCKvgpTqU5dsz9w DssWGb5R2x4U+A2iJSicqw4rKH4rEf2Ym0ER94ga/XS3ytro9E5LNIj2qfIDBeo8 nMMm7XOQ3KTYKmX5UsstU3VXUjSMpHerrVsdN9RMCani5MdlYvx38I1snX7a1bG0 d20wWWPb1KVg79eZq8f6bZNuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnz4O1s XxnfE4bOgiq83MsZEwxvMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuJd+G/vusrVG1OqA7TlqEJUjB1pJqDNC+OzoVyaKW673FoA4t3a1p rZI9KXDdyMBiRRuFP4KdB9jg/lrylmIaLPjG8cWTnLYjNSuP/j+v8/KOjrY45gCP duJ73IvvH0NeSezcT84aZ5RJALZLWc2yIDq06Et5iZcei89O4gwKz8RSV4wCQg54 B4tS8PQXsgiTe/27CSX+2sse/yh707EspWx9yaTYshif2G3mLevKcqVwVzKME4eE 3E9SNKi+o0UKcnsmQFD7+1HfP7jE1a7wbgTFse7aiTDJlVkrjlJ8lJfTNC75s/bv gSVPNdCumy5NjzfG/dt25br2pVuM09PG -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org