$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: 6q+D2Y2KGGpICpTjdySszaDZ6unxEOq2VcIyCSO0Td4= Subject key identifier: 2D:91:34:7D:30:5D:52:DB:57:70:36:69:DD:FA:D5:E7:80:95:23:E1 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 33C3 Signing time: Sat 18 May 2024 15:30:15 +0000 Manifest this update: Sat 18 May 2024 15:30:14 +0000 Manifest next update: Sat 25 May 2024 15:30:14 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: tFir4LhuGAMgjbxk2HTyp5BpP06VAV0lzldfSE1/q+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: May 18 15:30:14 2024 GMT Not After : May 25 15:30:14 2024 GMT Subject: CN=6648c987-5eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:ab:d0:b4:10:72:6e:84:57:02:23:83:ba: 24:af:f9:78:de:1d:f0:10:b4:e3:dd:dd:1a:9c:26: 73:ad:78:da:28:87:86:71:e9:ee:38:98:3e:0b:9d: d4:fb:7f:32:bb:33:de:b5:ad:4c:12:f5:5c:d9:27: 25:e7:9a:c7:1d:ed:59:2e:83:b9:fc:53:ae:13:87: 1c:3a:a1:e7:62:ea:7f:ca:0e:42:d8:57:03:88:46: 54:24:1f:25:e6:65:e5:7b:ab:05:c4:91:e6:2f:9f: 54:01:b8:c0:4e:b4:0f:44:34:57:eb:05:e8:25:ae: 8b:86:a8:77:5d:fe:3a:c5:54:76:30:35:e5:90:37: 71:b9:aa:07:a2:22:21:94:c5:90:6f:28:f1:6c:9d: fd:95:77:ec:16:63:42:9e:b5:31:5b:15:f0:e3:db: 55:ca:b9:7f:e6:7c:fa:8b:82:de:49:2d:98:c9:f2: 04:66:90:89:fa:9f:a2:27:38:77:8e:23:4a:f6:9e: 46:04:ff:b4:df:eb:d1:0c:c9:a2:05:81:3f:d4:0f: c5:1f:ec:62:28:97:69:be:39:12:a9:91:34:7e:f0: d1:de:3a:ff:2c:3c:e6:77:a9:9e:ff:46:bd:78:3f: 1a:8d:f9:b2:96:ab:d3:56:86:fc:c8:5d:b7:64:a1: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:34:7D:30:5D:52:DB:57:70:36:69:DD:FA:D5:E7:80:95:23:E1 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:11:2a:f7:e0:eb:d5:c9:33:47:3e:fe:8d:bf:28:96:58:59: b5:24:84:02:4d:e4:c0:99:22:d8:ae:7f:49:5e:e4:40:90:a9: ee:41:91:6a:45:05:67:4e:77:2a:47:a3:46:ac:60:54:f1:cd: c9:f5:07:96:f3:60:25:ec:60:9e:a0:84:f6:bf:14:79:0c:62: 22:14:72:bd:17:3a:f2:cc:b6:4d:b0:14:d8:8f:43:f4:ea:65: 15:d1:7f:1f:1b:b4:9b:c4:b0:8e:c7:95:6e:db:14:b3:82:27: 18:b1:ea:8b:6d:0a:14:66:71:03:48:fa:67:5b:36:b1:50:0d: 09:71:fe:74:92:71:a8:56:90:8d:08:d7:fb:a3:44:fe:16:16: 8f:92:9a:8b:20:54:c8:9e:5b:71:0c:b5:d5:46:cf:27:b1:b6: 6d:0d:82:f1:a2:d2:62:66:fe:e8:7e:81:b8:96:40:81:9c:b8: 8b:0f:4a:1e:52:87:40:a5:e8:37:c8:7f:16:a2:43:71:26:c7: e3:9c:8b:01:0d:a4:80:2b:38:d6:a4:73:95:53:ac:b1:4a:59: 3d:ff:94:71:09:1f:08:3d:3f:47:02:54:e0:a8:d3:a6:86:ee: c1:39:01:fe:ff:16:db:47:26:1f:6f:5d:10:8f:93:21:54:7b: 36:f1:be:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjQwNTE4MTUzMDE0WhcNMjQwNTI1MTUzMDE0WjAYMRYwFAYD VQQDEw02NjQ4Yzk4Ny01ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/2r0LQQcm6EVwIjg7okr/l43h3wELTj3d0anCZzrXjaKIeGcenuOJg+C53U +38yuzPeta1MEvVc2Scl55rHHe1ZLoO5/FOuE4ccOqHnYup/yg5C2FcDiEZUJB8l 5mXle6sFxJHmL59UAbjATrQPRDRX6wXoJa6Lhqh3Xf46xVR2MDXlkDdxuaoHoiIh lMWQbyjxbJ39lXfsFmNCnrUxWxXw49tVyrl/5nz6i4LeSS2YyfIEZpCJ+p+iJzh3 jiNK9p5GBP+03+vRDMmiBYE/1A/FH+xiKJdpvjkSqZE0fvDR3jr/LDzmd6me/0a9 eD8ajfmylqvTVob8yF23ZKGIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2RNH0w XVLbV3A2ad361eeAlSPhMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNESr34OvVyTNHPv6NvyiWWFm1JIQCTeTAmSLYrn9JXuRAkKnuQZFq RQVnTncqR6NGrGBU8c3J9QeW82Al7GCeoIT2vxR5DGIiFHK9FzryzLZNsBTYj0P0 6mUV0X8fG7SbxLCOx5Vu2xSzgicYseqLbQoUZnEDSPpnWzaxUA0Jcf50knGoVpCN CNf7o0T+FhaPkpqLIFTInltxDLXVRs8nsbZtDYLxotJiZv7ofoG4lkCBnLiLD0oe UodApeg3yH8WokNxJsfjnIsBDaSAKzjWpHOVU6yxSlk9/5RxCR8IPT9HAlTgqNOm hu7BOQH+/xbbRyYfb10Qj5MhVHs28b4Z -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org