$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: W1FPrzGKKMEbJ/NdQ2xlwkabTpFcMQS5cKEPHZs0PvU= Subject key identifier: 91:C9:2F:24:18:FE:F3:28:B4:CC:CB:C7:A0:7E:A8:56:18:55:1D:6C Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 1101 Signing time: Sat 18 May 2024 17:49:02 +0000 Manifest this update: Sat 18 May 2024 17:49:02 +0000 Manifest next update: Sat 25 May 2024 17:49:02 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: /KlnGYV3EdeqM5ZmLzdYBufWBJh38lpQTZ2cZyTi4H4=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: WdopqEhvTQ3vKYnwSSQrxk36f/vPLbjR5paNeXudr14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: May 18 17:49:02 2024 GMT Not After : May 25 17:49:02 2024 GMT Subject: CN=6648ea0e-427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:59:c5:c9:70:48:8a:10:41:90:96:44:f6: 49:fd:12:9d:dc:c4:b8:04:a4:ac:74:5f:d2:26:d0: 90:d6:94:fa:f3:de:d1:d2:27:9f:66:ff:49:94:8a: 97:70:5c:bc:46:8b:83:ef:d3:7b:04:67:4f:91:ea: e6:b0:9d:a3:57:f5:78:41:97:8e:e9:de:54:4d:3b: a1:41:53:ed:c5:dd:5b:9a:c0:1a:33:15:cd:cc:df: 48:2d:8e:90:c5:8d:a8:76:5d:44:b0:35:03:14:ae: 60:aa:f3:85:90:91:10:db:82:22:a9:40:82:cf:c6: 3b:b0:db:bd:d5:46:50:61:e8:72:12:4f:5f:ad:93: a3:74:54:0c:d5:0d:49:51:9c:63:02:ae:f5:6f:45: bb:a9:8e:51:c6:4f:e7:d1:a5:0d:74:b4:87:03:4c: 10:f9:bc:18:e6:a9:b4:b3:5c:65:e0:a6:c2:ef:e2: c2:dc:49:07:dc:d0:7e:59:06:8c:ff:ba:30:97:3b: 5a:17:3e:31:34:6c:1e:ff:68:2b:cc:9f:94:99:d3: c5:9b:31:b1:91:6e:0c:cd:d6:08:f9:11:66:23:bd: d3:31:69:0c:fa:f1:b1:43:84:17:60:21:97:5a:aa: aa:01:ec:c0:57:9a:8b:7b:68:22:ed:79:15:c0:d0: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:2F:24:18:FE:F3:28:B4:CC:CB:C7:A0:7E:A8:56:18:55:1D:6C X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:71:d9:a8:a3:7e:8b:10:7f:d3:4e:5b:9d:2c:9f:92:bc:04: a9:db:63:1c:3f:5e:a6:a3:92:64:67:24:09:1e:5f:7d:90:b1: eb:79:7e:37:69:2b:58:3b:2d:ef:59:97:b7:41:9f:ba:20:f2: dd:e2:4f:9e:a8:62:09:6a:27:94:d6:14:d2:30:47:d6:3a:6c: 8f:44:19:9d:12:19:27:61:20:08:b1:a6:f4:15:06:03:ca:53: 26:81:4c:a3:32:6a:c2:5f:fa:9e:5d:60:44:b7:e4:2a:ba:77: 5c:85:4d:3b:f1:42:cf:ce:41:55:f6:2b:41:1d:e9:a5:17:11: 19:3f:79:2c:1e:3b:8a:81:44:c2:cf:4a:a9:78:d8:38:3f:1e: 4f:b4:a9:e5:06:79:99:5e:c8:6d:1b:19:b1:27:17:1d:e4:2d: 7a:7e:01:67:02:d7:ff:ba:16:a2:2a:9a:ab:49:32:b2:79:2b: 45:de:f8:e3:5c:b9:ab:4c:c7:83:46:2f:56:fc:79:d2:1f:34: 8a:dd:f7:d4:25:93:56:d1:32:ad:31:ab:75:6a:90:ef:79:7b: 95:44:05:34:37:10:68:a0:26:09:97:8e:64:4c:00:f2:e3:5d: 95:26:62:1b:85:cf:70:13:ee:a9:24:10:56:e2:58:63:a2:90: f7:d7:15:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjQwNTE4MTc0OTAyWhcNMjQwNTI1MTc0OTAyWjAYMRYwFAYD VQQDEw02NjQ4ZWEwZS00MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx49ZxclwSIoQQZCWRPZJ/RKd3MS4BKSsdF/SJtCQ1pT6897R0iefZv9JlIqX cFy8RouD79N7BGdPkermsJ2jV/V4QZeO6d5UTTuhQVPtxd1bmsAaMxXNzN9ILY6Q xY2odl1EsDUDFK5gqvOFkJEQ24IiqUCCz8Y7sNu91UZQYehyEk9frZOjdFQM1Q1J UZxjAq71b0W7qY5Rxk/n0aUNdLSHA0wQ+bwY5qm0s1xl4KbC7+LC3EkH3NB+WQaM /7owlztaFz4xNGwe/2grzJ+UmdPFmzGxkW4MzdYI+RFmI73TMWkM+vGxQ4QXYCGX WqqqAezAV5qLe2gi7XkVwNALnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHJLyQY /vMotMzLx6B+qFYYVR1sMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAacdmoo36LEH/TTludLJ+SvASp22McP16mo5JkZyQJHl99kLHreX43 aStYOy3vWZe3QZ+6IPLd4k+eqGIJaieU1hTSMEfWOmyPRBmdEhknYSAIsab0FQYD ylMmgUyjMmrCX/qeXWBEt+QqundchU078ULPzkFV9itBHemlFxEZP3ksHjuKgUTC z0qpeNg4Px5PtKnlBnmZXshtGxmxJxcd5C16fgFnAtf/uhaiKpqrSTKyeStF3vjj XLmrTMeDRi9W/HnSHzSK3ffUJZNW0TKtMat1apDveXuVRAU0NxBooCYJl45kTADy 412VJmIbhc9wE+6pJBBW4lhjopD31xWl -----END CERTIFICATE-----Generated at Sat May 18 18:46:47 2024 by rpki-client on console-fra.rpki-client.org