$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: yfjY/pLCeIzV796qWP8WI60q3usDE32o8yuC30QpKnI= Subject key identifier: 8E:93:D2:B6:F8:F9:4D:74:90:31:6C:27:58:C4:F2:11:C5:83:3A:C9 Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 1B Signing time: Sun 19 May 2024 08:41:00 +0000 Manifest this update: Sun 19 May 2024 08:40:59 +0000 Manifest next update: Sun 26 May 2024 08:40:59 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: +rmuSeOaSmK7n8ldOllcWihDo8psLKYqq3ei8OrYl88=) 2: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: FmKOoIy9+bgPVPKgarvTsauo+TWTKJRdnaWb6dHntdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: May 19 08:40:59 2024 GMT Not After : May 26 08:40:59 2024 GMT Subject: CN=6649bb1b-145f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:6b:b4:82:44:dc:eb:6d:ed:6b:a4:ad:3e: fe:e4:06:d5:a0:df:65:b6:20:b8:5e:c0:cb:0a:9c: 08:c0:c5:ad:3c:cc:15:eb:2a:28:73:36:ac:55:cf: 46:51:3e:6d:76:15:67:ea:44:c7:c4:71:96:09:d2: ce:54:1a:d7:0c:34:c3:e1:98:c0:93:e7:11:ed:84: 13:04:ec:12:8d:bd:da:27:77:44:a8:48:55:43:16: 3e:48:54:69:ee:63:ac:05:8c:e4:3e:5f:49:c4:c8: 10:6b:97:97:32:0e:19:d0:ac:14:db:1e:94:1f:62: 29:42:c7:2a:83:b3:ff:4a:eb:c7:5d:99:fd:ed:cb: 99:33:f9:70:88:d3:52:65:52:b7:00:d0:e0:2b:87: 63:ca:7d:30:8c:58:85:a7:2f:92:58:36:89:2e:14: 82:44:d4:5e:74:22:10:ba:0d:b6:7c:18:b4:9c:b4: 43:ea:c0:9e:fb:f4:5a:c3:4c:50:50:c2:58:79:92: 12:f3:3f:44:9b:8c:e4:1c:4c:69:8d:67:06:30:f7: cf:9a:54:0d:16:de:81:6e:60:91:17:61:4f:01:b9: da:8d:e5:7c:42:88:2b:03:c3:67:f7:0d:cc:c4:bb: 15:06:18:15:96:e8:24:40:57:33:f2:79:c1:fe:15: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:93:D2:B6:F8:F9:4D:74:90:31:6C:27:58:C4:F2:11:C5:83:3A:C9 X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0e:90:4e:4e:e6:51:bc:89:e8:45:2a:d3:4b:7b:b5:6f:54: ac:d7:d6:20:e1:f7:c1:8b:b4:3d:e4:4f:b8:7e:87:21:d0:c6: d9:85:e3:12:4f:2f:51:ba:c3:b1:15:8c:65:69:bc:9b:f3:c9: 8b:d3:eb:bb:96:14:56:f7:b2:65:25:5e:91:c9:e0:98:f7:09: 76:49:29:ca:3a:df:aa:65:c5:6a:50:40:ce:08:a3:32:08:85: 1f:53:96:f8:2f:57:1c:89:84:0b:68:86:80:19:21:a9:03:ce: 4a:7d:3d:31:20:77:c2:dd:f6:41:e5:5d:fe:e0:bc:98:7a:d7: 25:da:3a:be:ca:5c:fa:6b:93:19:e5:ec:49:bb:42:aa:d1:f1: 4d:65:25:e8:aa:52:23:95:62:a0:d9:62:c0:c1:ff:de:66:00: ee:0b:12:14:89:83:1f:b4:41:2d:dd:2b:89:29:ad:48:71:cd: af:4e:c2:80:c6:8f:0a:9d:dd:16:7b:6a:6b:e1:69:fd:e7:d3: 22:aa:eb:1b:16:e6:54:1e:83:a8:f4:f4:df:b6:95:41:15:b9: 68:dd:a6:04:27:52:3f:78:02:36:66:4b:c9:8f:8e:59:9c:30: 9c:f7:ae:a9:24:f4:d7:fd:dc:19:bf:f6:c4:4a:4c:9b:50:a6: c8:45:8a:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Mzk4OTExMC8GA1UEBRMoOUE0N0JGNDBCRDQ4ODdFMjI0MTUzMzI3OUU3RjFEN0Yy QTVGNkZCQjAeFw0yNDA1MTkwODQwNTlaFw0yNDA1MjYwODQwNTlaMBgxFjAUBgNV BAMTDTY2NDliYjFiLTE0NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkiWu0gkTc623ta6StPv7kBtWg32W2ILhewMsKnAjAxa08zBXrKihzNqxVz0ZR Pm12FWfqRMfEcZYJ0s5UGtcMNMPhmMCT5xHthBME7BKNvdond0SoSFVDFj5IVGnu Y6wFjOQ+X0nEyBBrl5cyDhnQrBTbHpQfYilCxyqDs/9K68ddmf3ty5kz+XCI01Jl UrcA0OArh2PKfTCMWIWnL5JYNokuFIJE1F50IhC6DbZ8GLSctEPqwJ779FrDTFBQ wlh5khLzP0SbjOQcTGmNZwYw98+aVA0W3oFuYJEXYU8BudqN5XxCiCsDw2f3DczE uxUGGBWW6CRAVzPyecH+FZfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjpPStvj5 TXSQMWwnWMTyEcWDOskwHwYDVR0jBBgwFoAUmke/QL1Ih+IkFTMnnn8dfypfb7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOTg5LzMxNjFDMzdFRUNE MDExRUU4QTIyNEQ0OUM0RjlBRTAyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWtlX1FMMUloLUlrRlRNbm5uOGRmeXBmYjdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OTg5LzMxNjFDMzdFRUNEMDExRUU4QTIyNEQ0OUM0RjlBRTAyL21rZV9RTDFJaC1J a0ZUTW5ubjhkZnlwZmI3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwOkE5O5lG8iehFKtNLe7VvVKzX1iDh98GLtD3kT7h+hyHQxtmF4xJP L1G6w7EVjGVpvJvzyYvT67uWFFb3smUlXpHJ4Jj3CXZJKco636plxWpQQM4IozII hR9TlvgvVxyJhAtohoAZIakDzkp9PTEgd8Ld9kHlXf7gvJh61yXaOr7KXPprkxnl 7Em7QqrR8U1lJeiqUiOVYqDZYsDB/95mAO4LEhSJgx+0QS3dK4kprUhxza9OwoDG jwqd3RZ7amvhaf3n0yKq6xsW5lQeg6j09N+2lUEVuWjdpgQnUj94AjZmS8mPjlmc MJz3rqkk9Nf93Bm/9sRKTJtQpshFihk= -----END CERTIFICATE-----Generated at Sun May 19 09:04:15 2024 by rpki-client on console-fra.rpki-client.org