$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: EAeVgxKn0Yt8AMG0DXviYYXoKsAhG7B0VJuUYKJYwyM= Subject key identifier: CC:E7:2A:B8:19:9F:01:90:5D:C5:C9:6A:6F:25:99:E4:07:19:6F:B7 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 45 Signing time: Sun 19 May 2024 08:03:12 +0000 Manifest this update: Sun 19 May 2024 08:03:11 +0000 Manifest next update: Sun 26 May 2024 08:03:11 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: Hk3NUtVzghlUGhDlHjlBY0ZQdz4j8qj4vdGYotSx034=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: FUQ7hkmGES0QN9UAf6f/LO11kYNy/Xsa2qRfJOg9mdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: May 19 08:03:11 2024 GMT Not After : May 26 08:03:11 2024 GMT Subject: CN=6649b240-1ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:b1:e6:3d:c9:2a:ce:09:ac:60:66:8c:6a: d5:41:3e:07:14:98:05:19:1d:79:61:13:59:a9:f4: 6a:05:3b:07:04:32:38:f9:0b:84:a5:28:21:fe:eb: 16:4b:72:dc:6f:3b:27:f8:ae:0c:82:5a:eb:c1:8b: 90:e2:f2:91:db:da:78:e4:17:fb:e1:2a:0a:41:4f: 72:10:bc:01:e4:59:54:35:67:58:d6:88:08:94:51: 34:80:38:4c:ed:58:9d:7b:d6:a6:c8:d3:0a:14:9f: 0d:ee:c8:6d:6d:5f:2e:99:df:51:34:5e:f4:1a:1b: d5:51:83:68:f5:16:3b:8f:b4:ef:bf:d1:48:e0:2c: fe:5b:1f:94:a0:02:d7:13:ec:58:53:0d:c1:f1:ca: d2:c0:f7:0a:52:94:00:ce:00:87:88:e4:1d:46:35: fd:8a:c2:1e:6e:81:b6:32:97:85:0b:31:69:d4:57: e2:76:3e:6b:4f:e0:57:09:77:d6:e9:6a:d2:cf:19: 08:13:51:cf:62:43:00:ee:30:ba:af:d5:8b:d3:b4: ad:69:e1:12:bd:37:ce:74:7f:78:f2:95:0a:b5:85: ed:be:58:79:ee:6e:52:1d:20:88:66:f7:65:6e:fc: 84:fb:5f:a3:96:75:19:e5:9a:e3:b1:a2:3b:4d:c5: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E7:2A:B8:19:9F:01:90:5D:C5:C9:6A:6F:25:99:E4:07:19:6F:B7 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:eb:d8:9a:0b:87:6c:ff:e0:a6:94:4c:cd:a3:7f:64:59:5d: 8c:0a:d3:4e:46:f6:ce:cc:cc:2d:a0:a4:21:a2:f5:ff:e5:ad: 8b:73:1e:9b:3e:9b:f7:04:02:d5:14:58:9f:ca:0e:b6:52:f1: 27:c0:26:29:d9:91:58:3e:4f:53:87:06:b0:17:6f:99:d9:d6: 0b:2c:7d:62:fd:00:6c:05:2e:66:d1:f2:ee:b1:2a:5d:09:ee: 80:5d:a6:11:43:08:ef:ff:b0:db:73:a5:69:36:e7:6c:10:6b: 87:66:80:a5:0a:ce:33:99:76:98:d7:a9:da:cb:3e:ee:fc:7a: db:1f:56:5d:15:b5:bb:e9:45:cd:98:1b:a2:af:c7:92:d7:2a: e7:a6:ba:f2:1a:b5:ab:65:ff:bd:f0:c3:88:1a:8a:a4:5d:74: 2a:38:2c:eb:30:bb:8a:01:5c:7e:88:32:06:94:b8:2e:47:b8: 52:3b:9e:59:cb:80:75:34:25:96:2b:6b:c9:4b:1b:fe:fb:c7: 89:3e:83:ca:aa:6c:53:ac:bc:3e:97:1e:2f:13:7b:f4:7f:58: 48:4e:40:73:59:18:64:0d:17:fc:82:b5:f7:d6:d0:2b:6b:68: 11:e1:3d:70:d5:82:96:d2:92:00:da:b2:19:21:04:ab:00:79: bf:34:ef:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUQzMDExMC8GA1UEBRMoMEFBNzE2RUE4MUNDQzVEQjVFNEJBNzIxMTRDMzQyOUEx OUQ2RDk1RjAeFw0yNDA1MTkwODAzMTFaFw0yNDA1MjYwODAzMTFaMBgxFjAUBgNV BAMTDTY2NDliMjQwLTFhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFFrHmPckqzgmsYGaMatVBPgcUmAUZHXlhE1mp9GoFOwcEMjj5C4SlKCH+6xZL ctxvOyf4rgyCWuvBi5Di8pHb2njkF/vhKgpBT3IQvAHkWVQ1Z1jWiAiUUTSAOEzt WJ171qbI0woUnw3uyG1tXy6Z31E0XvQaG9VRg2j1FjuPtO+/0UjgLP5bH5SgAtcT 7FhTDcHxytLA9wpSlADOAIeI5B1GNf2Kwh5ugbYyl4ULMWnUV+J2PmtP4FcJd9bp atLPGQgTUc9iQwDuMLqv1YvTtK1p4RK9N850f3jylQq1he2+WHnublIdIIhm92Vu /IT7X6OWdRnlmuOxojtNxfMpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzOcquBmf AZBdxclqbyWZ5AcZb7cwHwYDVR0jBBgwFoAUCqcW6oHMxdteS6chFMNCmhnW2V8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRDMwL0M3NzQ1NUMwQUUx RTExRUVBN0VBMEE3N0M0RjlBRTAyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3FjVzZvSE14ZHRlUzZjaEZNTkNtaG5XMlY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RDMwL0M3NzQ1NUMwQUUxRTExRUVBN0VBMEE3N0M0RjlBRTAyL0NxY1c2b0hNeGR0 ZVM2Y2hGTU5DbWhuVzJWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHr2JoLh2z/4KaUTM2jf2RZXYwK005G9s7MzC2gpCGi9f/lrYtzHps+ m/cEAtUUWJ/KDrZS8SfAJinZkVg+T1OHBrAXb5nZ1gssfWL9AGwFLmbR8u6xKl0J 7oBdphFDCO//sNtzpWk252wQa4dmgKUKzjOZdpjXqdrLPu78etsfVl0VtbvpRc2Y G6Kvx5LXKuemuvIatatl/73ww4gaiqRddCo4LOswu4oBXH6IMgaUuC5HuFI7nlnL gHU0JZYra8lLG/77x4k+g8qqbFOsvD6XHi8Te/R/WEhOQHNZGGQNF/yCtffW0Ctr aBHhPXDVgpbSkgDashkhBKsAeb807xk= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org