$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: K5yHsO5Ac9zzjGb7Iju6/9Wd+HHOmyLD2TIzUHUdJ14= Subject key identifier: 23:60:7B:99:6B:B4:00:95:8B:2E:02:BF:84:86:AD:B9:77:B7:10:2E Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 7C Signing time: Fri 17 May 2024 07:21:07 +0000 Manifest this update: Fri 17 May 2024 07:21:07 +0000 Manifest next update: Fri 24 May 2024 07:21:07 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: +RIz5tg7gFcE4w5s0/4bfcCfL06HzVKF1f3WFaqh3ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: May 17 07:21:07 2024 GMT Not After : May 24 07:21:07 2024 GMT Subject: CN=66470563-3fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:ca:02:5e:bb:f6:14:a7:0a:66:1b:89:be: 0b:b9:9f:2d:92:56:51:1c:7e:34:50:40:13:c7:51: 49:b1:3f:5d:99:27:fa:f9:60:0c:64:38:e3:a2:33: fe:1b:5c:8e:c9:b4:c2:c2:7e:26:5d:dd:8c:cd:3f: 46:30:04:95:40:b8:ca:5c:74:26:68:cd:11:45:ab: eb:39:85:08:2b:d9:0f:6b:35:4b:65:13:81:1f:fb: d5:80:38:cb:75:49:23:ef:79:32:00:dc:4d:00:ef: e7:7b:57:b8:f1:e2:c0:18:b5:0c:50:46:ee:3f:a1: a5:fb:24:31:93:bc:58:3f:41:e4:72:92:b8:86:9c: 88:5f:fe:e4:d9:4b:84:9a:6e:b0:8f:0c:ed:52:28: 58:e9:ac:bf:5a:a4:8d:56:19:11:1c:58:55:9d:84: 6a:14:1f:a0:93:38:04:91:7b:54:12:a7:30:dd:ee: 47:e7:0d:27:b9:b6:22:53:40:98:93:35:d5:18:96: 71:12:cf:ec:70:1f:ab:2b:e2:e4:a0:b0:95:a2:de: 86:7d:72:f0:a3:30:87:d3:70:15:e4:5e:31:88:fb: 08:6a:6c:6b:4a:f6:15:52:74:24:dd:ad:9e:9f:74: 24:b3:df:ee:0b:9e:9b:95:53:09:8e:4b:f0:de:af: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:60:7B:99:6B:B4:00:95:8B:2E:02:BF:84:86:AD:B9:77:B7:10:2E X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:3d:56:d7:21:5c:c1:2e:e5:f2:97:64:f7:42:94:05:2e: 0e:93:18:a1:6e:78:3a:ee:5b:bd:2f:36:43:c1:12:ca:e5:31: b7:ca:22:0c:15:4d:98:af:78:96:d4:c7:14:77:b0:8a:e5:d7: 13:7a:d6:25:6d:bc:06:4b:f3:9a:f6:09:d4:4a:62:35:8b:f3: 9b:81:27:8b:19:0c:fc:fc:0c:34:e3:21:77:d2:a7:d0:0f:b2: 37:eb:18:d7:dc:08:2b:b5:a6:63:70:de:3e:31:5c:99:71:f0: 25:7a:30:47:33:92:5f:fd:5f:35:bc:c3:13:ff:52:02:d4:23: 9c:c7:0d:f0:ac:f6:98:e1:b0:58:e2:de:62:ef:c5:d6:82:fd: 5c:bf:35:73:25:d6:4f:c5:e9:3c:8b:cd:7e:6f:b7:b3:7c:0e: ae:dd:7e:cf:cc:d9:0a:ad:fc:be:3a:cf:b4:60:0b:88:5a:01: 32:15:b8:4a:3e:5a:a3:c7:6f:70:af:f6:96:24:8d:bb:12:d2: 8a:40:de:16:87:fd:2c:30:b8:30:c3:17:ef:6f:05:27:76:b8: eb:20:99:7f:04:85:a4:07:f0:b5:0a:f4:11:b6:e7:7f:ea:76: 5c:80:5c:d9:38:eb:6d:6a:a0:fa:77:69:4a:80:04:24:0e:5d: 3f:5a:79:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkMwOTExMC8GA1UEBRMoNDM5MjlEOTE2REM5QzlDRTM0NjNGRjkxNThDQ0JFRkU5 RjE4MkMzQjAeFw0yNDA1MTcwNzIxMDdaFw0yNDA1MjQwNzIxMDdaMBgxFjAUBgNV BAMTDTY2NDcwNTYzLTNmYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfCsoCXrv2FKcKZhuJvgu5ny2SVlEcfjRQQBPHUUmxP12ZJ/r5YAxkOOOiM/4b XI7JtMLCfiZd3YzNP0YwBJVAuMpcdCZozRFFq+s5hQgr2Q9rNUtlE4Ef+9WAOMt1 SSPveTIA3E0A7+d7V7jx4sAYtQxQRu4/oaX7JDGTvFg/QeRykriGnIhf/uTZS4Sa brCPDO1SKFjprL9apI1WGREcWFWdhGoUH6CTOASRe1QSpzDd7kfnDSe5tiJTQJiT NdUYlnESz+xwH6sr4uSgsJWi3oZ9cvCjMIfTcBXkXjGI+whqbGtK9hVSdCTdrZ6f dCSz3+4LnpuVUwmOS/DerwYNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI2B7mWu0 AJWLLgK/hIatuXe3EC4wHwYDVR0jBBgwFoAUQ5KdkW3Jyc40Y/+RWMy+/p8YLDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyQzA5L0NENkQ1MjAyNTZD NTExRUVCRUQzMkUwQkM0RjlBRTAyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxE cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTVLZGtXM0p5YzQwWV8tUldNeS1fcDhZTERzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy QzA5L0NENkQ1MjAyNTZDNTExRUVCRUQzMkUwQkM0RjlBRTAyL1E1S2RrVzNKeWM0 MFlfLVJXTXktX3A4WUxEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIO8PVbXIVzBLuXyl2T3QpQFLg6TGKFueDruW70vNkPBEsrlMbfKIgwV TZiveJbUxxR3sIrl1xN61iVtvAZL85r2CdRKYjWL85uBJ4sZDPz8DDTjIXfSp9AP sjfrGNfcCCu1pmNw3j4xXJlx8CV6MEczkl/9XzW8wxP/UgLUI5zHDfCs9pjhsFji 3mLvxdaC/Vy/NXMl1k/F6TyLzX5vt7N8Dq7dfs/M2Qqt/L46z7RgC4haATIVuEo+ WqPHb3Cv9pYkjbsS0opA3haH/SwwuDDDF+9vBSd2uOsgmX8EhaQH8LUK9BG253/q dlyAXNk4621qoPp3aUqABCQOXT9aeXg= -----END CERTIFICATE-----Generated at Fri May 17 08:13:48 2024 by rpki-client on console-fra.rpki-client.org