$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: 6UJz2rFanxHx6VOtdxMtW3pPg6WoRYRF0H162u1zKrU= Subject key identifier: 61:42:CE:C4:2A:69:23:C4:B4:B2:F0:99:F5:8A:CC:C0:37:C1:FA:2F Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 9C Signing time: Sun 19 May 2024 06:51:19 +0000 Manifest this update: Sun 19 May 2024 06:51:18 +0000 Manifest next update: Sun 26 May 2024 06:51:18 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: 9Hkb/YA6t0HpWq8dqSTdJZd0TE2K9IqrJEvyoejfYGM=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: cAWcl90qX5LgvbTQqYzXpZ/JrQ2ME6XuMgDUMfAGsq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: May 19 06:51:18 2024 GMT Not After : May 26 06:51:18 2024 GMT Subject: CN=6649a166-3f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:fc:8c:4c:dd:33:e4:96:5c:7e:fe:f8:3f: 15:15:b9:6c:34:f6:d5:62:dc:63:ff:85:6b:48:d8: db:3c:7b:bb:9a:71:aa:b4:19:58:e3:62:00:e0:39: f6:f9:a9:05:98:7a:29:75:2f:08:cc:5a:af:d8:0f: f0:49:e7:ee:d6:b3:04:b8:73:3d:ba:54:00:c6:ce: 11:93:6e:57:cd:19:36:2c:23:07:7e:9c:76:34:d6: 05:54:40:60:aa:f9:95:f9:5c:19:de:c8:0b:65:c9: d2:8e:d4:18:92:84:1a:5a:50:12:e2:33:97:69:80: 3a:f4:8f:f8:49:c8:21:ac:13:87:ee:47:20:a4:53: 4d:93:a4:31:88:ca:de:af:3f:b5:ad:c3:9c:51:d2: ed:b2:7d:34:21:71:7c:ab:ac:16:a4:32:56:b1:45: b6:4f:7f:c1:f1:b4:d0:b1:0a:33:a3:45:b3:20:5f: c9:35:e3:32:19:4a:5f:67:47:c8:19:ba:a4:e2:07: 1b:f4:7e:58:6c:0c:36:6f:ec:dd:81:e8:95:a9:b2: 6a:d8:fe:a2:11:89:28:ab:92:73:4d:f7:28:a5:c9: bf:3d:4d:3c:73:78:6f:4e:71:3c:51:70:c4:69:bd: a0:4f:9e:e6:a6:d9:4a:05:18:72:0f:71:8d:8c:94: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:CE:C4:2A:69:23:C4:B4:B2:F0:99:F5:8A:CC:C0:37:C1:FA:2F X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:8b:ea:32:e0:c8:5f:ac:ac:39:88:39:7f:2d:9e:09:b2: 84:30:e3:19:4b:b3:85:37:2a:67:46:49:85:25:ad:21:0b:21: 16:b0:f0:12:bb:b4:47:ea:bc:c7:fc:11:2a:9b:49:e1:74:83: f4:8f:2e:85:9b:f6:7d:24:f6:dd:60:19:bc:98:3e:f1:cf:5c: fe:e8:40:94:a0:5c:5f:ef:1b:38:46:91:e0:f7:c5:a4:59:6f: 22:b0:af:89:61:d6:1e:9c:7f:17:f4:2b:3b:a1:89:77:cf:a8: 6a:90:fd:eb:dc:6f:4b:df:d4:93:97:a7:b8:37:88:5b:12:5a: dc:dd:c8:77:94:09:d5:ce:e0:c7:5d:15:57:ad:b1:bf:16:70: 48:87:43:c1:df:84:53:e0:28:0d:8f:1e:72:8e:32:91:c4:08: 48:d9:8c:28:cd:29:77:e6:de:09:6d:3d:b0:c9:ac:83:d4:fa: 37:ba:c3:be:fa:6a:4e:da:b1:d8:8f:87:09:21:7e:b5:8e:db: 58:ed:8c:4d:48:ee:83:ba:6d:f3:24:70:c5:30:23:76:ba:7e: 9e:79:14:27:87:20:85:88:b8:b9:03:2e:71:84:14:16:da:57: 99:a3:9d:db:a3:31:52:59:d6:f7:48:ba:5a:51:98:2b:e5:e9: b6:3b:bc:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjQwNTE5MDY1MTE4WhcNMjQwNTI2MDY1MTE4WjAYMRYwFAYD VQQDEw02NjQ5YTE2Ni0zZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusb8jEzdM+SWXH7++D8VFblsNPbVYtxj/4VrSNjbPHu7mnGqtBlY42IA4Dn2 +akFmHopdS8IzFqv2A/wSefu1rMEuHM9ulQAxs4Rk25XzRk2LCMHfpx2NNYFVEBg qvmV+VwZ3sgLZcnSjtQYkoQaWlAS4jOXaYA69I/4ScghrBOH7kcgpFNNk6QxiMre rz+1rcOcUdLtsn00IXF8q6wWpDJWsUW2T3/B8bTQsQozo0WzIF/JNeMyGUpfZ0fI Gbqk4gcb9H5YbAw2b+zdgeiVqbJq2P6iEYkoq5JzTfcopcm/PU08c3hvTnE8UXDE ab2gT57mptlKBRhyD3GNjJQqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFCzsQq aSPEtLLwmfWKzMA3wfovMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaFYvqMuDIX6ysOYg5fy2eCbKEMOMZS7OFNypnRkmFJa0hCyEWsPAS u7RH6rzH/BEqm0nhdIP0jy6Fm/Z9JPbdYBm8mD7xz1z+6ECUoFxf7xs4RpHg98Wk WW8isK+JYdYenH8X9Cs7oYl3z6hqkP3r3G9L39STl6e4N4hbElrc3ch3lAnVzuDH XRVXrbG/FnBIh0PB34RT4CgNjx5yjjKRxAhI2YwozSl35t4JbT2wyayD1Po3usO+ +mpO2rHYj4cJIX61jttY7YxNSO6Dum3zJHDFMCN2un6eeRQnhyCFiLi5Ay5xhBQW 2leZo53bozFSWdb3SLpaUZgr5em2O7yP -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org