$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: XwDNbiUzW8MdG4y31apXclg4F34Cakq0Q1vlW2WETuA= Subject key identifier: 16:EB:1C:E3:BE:C2:E9:64:24:B8:60:AF:49:0F:58:9E:DA:67:17:56 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0D0C Signing time: Thu 30 May 2024 19:10:28 +0000 Manifest this update: Thu 30 May 2024 19:10:28 +0000 Manifest next update: Thu 06 Jun 2024 19:10:28 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: EmEZKww+069EqiZsEjx+/pg+tDkPyr2mTLW18qYJHNE=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: nvhDjt387zYhf/8ySzGmSAzk4CFMkqY2rRX2y6Ihwk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: May 30 19:10:28 2024 GMT Not After : Jun 6 19:10:28 2024 GMT Subject: CN=6658cf24-628e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:07:b3:0f:7d:3b:d4:87:39:56:75:ff:4c: e9:51:df:a5:a0:78:14:0c:b3:64:91:4e:72:82:0e: e9:f3:fa:bb:d3:68:e2:96:dd:58:39:ca:6c:97:d2: 43:db:9b:6d:3b:16:1c:54:46:69:94:8b:ef:cc:dd: ec:af:37:03:3f:ac:73:47:a6:0b:0c:f2:61:71:31: e0:ab:e5:27:49:ef:af:67:3a:a3:0b:78:7a:06:d9: f8:ac:74:ec:53:e5:79:b5:26:f3:39:8a:77:27:b1: a5:22:3a:6b:2a:f7:6d:b2:31:6b:e9:c2:bb:5f:50: 3b:ee:ed:c4:f3:73:72:93:47:c3:bb:66:c1:65:a2: 66:74:c3:0f:85:05:5b:a3:7c:64:8c:a3:64:7f:d0: 5e:20:c3:07:63:43:05:a3:f0:f2:34:62:d2:16:c3: b0:5e:21:bc:e6:13:d6:f7:05:a6:7d:32:ce:6f:84: 63:0f:3c:e6:12:fb:fe:a8:57:a4:4a:48:0f:a7:ae: 5b:d8:35:25:90:bd:5e:f2:01:5c:07:21:ed:2d:7c: 02:d4:b5:75:1b:f9:db:09:56:4b:44:c7:9b:3a:ec: d1:b2:d5:4e:f3:4e:05:58:d0:fc:58:bb:9f:b8:7b: a5:bf:35:13:66:38:18:20:a8:07:b0:51:44:0c:55: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:1C:E3:BE:C2:E9:64:24:B8:60:AF:49:0F:58:9E:DA:67:17:56 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ea:a5:ff:d1:67:49:49:8b:b9:3c:c8:b2:ee:e2:83:82:80: 69:8b:d7:bc:b2:7b:f4:00:72:22:cf:7b:1b:da:1e:ae:d8:aa: 1d:03:7a:d7:01:41:66:51:98:94:bc:14:ee:76:11:32:94:04: 2b:a1:92:a1:3d:24:38:f0:b2:73:65:a0:04:9c:f3:7f:dd:c6: fd:aa:51:ef:bf:17:56:24:8b:a9:ca:ab:7b:b9:66:02:6c:5c: 01:fc:56:bd:3e:c4:39:0e:23:f3:e5:50:dd:07:e7:f3:45:be: d3:59:af:2d:45:97:18:ab:1a:5a:30:e2:ae:55:74:1c:f0:15: 26:02:cb:62:eb:63:9e:f3:eb:2f:76:97:ee:92:61:54:c8:26: e8:f9:df:5f:21:d9:dc:57:c4:e6:3c:af:b1:56:15:59:50:fa: 23:35:31:02:e2:9f:6d:79:9a:45:e3:27:8d:a1:54:a2:96:60: 4d:cd:f4:53:f2:98:40:f3:14:c6:22:84:89:a6:77:d9:75:56: 90:16:3e:14:63:9b:f6:de:9a:32:61:ad:09:a6:52:6d:aa:34: d1:c9:2f:92:b9:06:aa:65:2c:bd:cc:f4:4a:7d:47:e7:08:c0: 47:b5:2d:47:95:7a:24:8f:50:d7:25:87:7d:f2:e2:a7:0c:66: 3c:6d:9d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjQwNTMwMTkxMDI4WhcNMjQwNjA2MTkxMDI4WjAYMRYwFAYD VQQDEw02NjU4Y2YyNC02MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaEHsw99O9SHOVZ1/0zpUd+loHgUDLNkkU5ygg7p8/q702jilt1YOcpsl9JD 25ttOxYcVEZplIvvzN3srzcDP6xzR6YLDPJhcTHgq+UnSe+vZzqjC3h6Btn4rHTs U+V5tSbzOYp3J7GlIjprKvdtsjFr6cK7X1A77u3E83Nyk0fDu2bBZaJmdMMPhQVb o3xkjKNkf9BeIMMHY0MFo/DyNGLSFsOwXiG85hPW9wWmfTLOb4RjDzzmEvv+qFek SkgPp65b2DUlkL1e8gFcByHtLXwC1LV1G/nbCVZLRMebOuzRstVO804FWND8WLuf uHulvzUTZjgYIKgHsFFEDFXPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbrHOO+ wulkJLhgr0kPWJ7aZxdWMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB96qX/0WdJSYu5PMiy7uKDgoBpi9e8snv0AHIiz3sb2h6u2KodA3rX AUFmUZiUvBTudhEylAQroZKhPSQ48LJzZaAEnPN/3cb9qlHvvxdWJIupyqt7uWYC bFwB/Fa9PsQ5DiPz5VDdB+fzRb7TWa8tRZcYqxpaMOKuVXQc8BUmAsti62Oe8+sv dpfukmFUyCbo+d9fIdncV8TmPK+xVhVZUPojNTEC4p9teZpF4yeNoVSilmBNzfRT 8phA8xTGIoSJpnfZdVaQFj4UY5v23poyYa0JplJtqjTRyS+SuQaqZSy9zPRKfUfn CMBHtS1HlXokj1DXJYd98uKnDGY8bZ1t -----END CERTIFICATE-----Generated at Thu May 30 21:49:46 2024 by rpki-client on console-ams.rpki-client.org