$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft File: mqU9J74bthSVPDedOeC7xfHBJKc.mft (raw, json) Hash identifier: k0qYxoXTArcE7holQlbmYXawb5EpUjX20yJFdtM3/wk= Subject key identifier: DB:54:45:32:EC:8B:AE:96:1B:3B:50:06:9B:C0:F4:C1:0A:72:AC:80 Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 Certificate issuer: /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft Manifest number: 0B0D Signing time: Sat 18 May 2024 19:56:29 +0000 Manifest this update: Sat 18 May 2024 19:56:28 +0000 Manifest next update: Sat 25 May 2024 19:56:28 +0000 Files and hashes: 1: mqU9J74bthSVPDedOeC7xfHBJKc.crl (hash: /YBu3kYtQX+Wl0P4lCSyZU0nAw1PPsPtNF+Av7SvUjM=) 2: 1F1440787A1D11EEA924361CC4F9AE02.roa (hash: jAO7lY7VcvSQYu5LMEviNEfsPvvggvkCS3O1ZJi1CV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Validity Not Before: May 18 19:56:28 2024 GMT Not After : May 25 19:56:28 2024 GMT Subject: CN=664907ed-28a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:23:91:38:d1:48:e3:50:46:27:43:1f:83: 79:22:62:d1:8e:16:c8:b1:6f:8b:40:ec:d1:3c:0f: 5a:45:ce:16:b1:57:22:d9:7c:d9:9e:c8:36:ab:e5: a1:03:d9:0e:a7:af:a9:16:dd:bc:1a:6c:3c:df:68: a2:b2:4b:72:bf:17:de:f0:37:a0:13:38:34:84:0f: 5c:eb:78:68:57:40:a1:67:e5:b2:28:a0:c2:7c:e0: c6:79:60:e7:e3:5d:60:03:c1:c1:cd:22:45:e8:7e: be:4c:c8:f7:7e:db:f4:b3:7d:18:60:07:85:4c:2d: b4:7c:ff:67:48:41:57:44:73:4a:28:c1:dc:38:81: 80:c9:21:69:d0:66:a9:e1:04:16:f2:72:06:9e:4d: dc:a5:47:56:52:51:4c:42:c8:4e:e6:86:77:24:9e: 6e:a5:4b:37:0d:79:ff:1f:d6:38:2d:37:36:8d:7c: 08:66:14:c6:f2:de:49:0d:48:11:ba:db:33:69:31: 03:14:5b:91:ac:3c:e1:ad:26:47:2a:2a:31:c7:09: f3:a6:d5:b5:c7:29:ce:8b:99:ce:8a:53:47:d1:50: 3f:17:c0:2c:29:7c:5a:bd:e0:29:18:56:80:4f:55: 64:a4:5c:ae:d9:67:80:76:a8:ff:7f:e7:4b:b2:6e: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:54:45:32:EC:8B:AE:96:1B:3B:50:06:9B:C0:F4:C1:0A:72:AC:80 X509v3 Authority Key Identifier: keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:05:24:41:f8:a7:9d:7c:08:6c:7e:45:ec:9f:ca:10:45:ea: e2:86:d3:c7:2f:be:75:26:24:fe:24:7d:14:05:40:08:5f:7c: 6c:ad:9a:39:d1:31:14:83:47:5f:37:b2:11:22:cf:62:aa:67: cf:04:d0:94:07:05:de:21:ba:6f:ec:b7:ba:8b:44:f8:cf:cb: 6d:10:91:fa:f4:fd:26:8d:54:fa:86:7b:45:12:e7:c3:17:20: 1b:46:26:57:b2:5b:71:c7:3e:db:98:35:43:63:63:3d:0f:21: 25:6d:88:b3:12:ba:1b:de:ab:89:fb:93:c5:8e:bf:f5:c0:78: db:86:cb:22:ca:b0:df:81:cd:4e:7a:98:24:81:8b:42:ea:fc: 19:4b:20:74:d9:2a:18:4f:23:1f:4d:6e:10:de:d1:e4:3d:29: 4e:3f:59:1c:7e:55:26:88:d5:39:b7:00:81:4c:67:d3:15:b3: c2:fc:a6:78:3a:ea:1a:2b:d1:c9:00:16:aa:fd:37:35:4a:c6: 49:e8:4a:46:04:b4:04:e6:6b:ad:46:ca:8a:84:7f:08:9f:89: 5e:f3:60:f7:93:b2:21:53:8c:05:5f:9b:0a:ef:16:57:6c:59: c1:b3:5c:5f:3e:70:13:a4:9e:23:0c:53:1f:84:9e:da:60:a2: 68:a1:b7:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0Q0IxMTAvBgNVBAUTKDlBQTUzRDI3QkUxQkI2MTQ5NTNDMzc5RDM5RTBCQkM1 RjFDMTI0QTcwHhcNMjQwNTE4MTk1NjI4WhcNMjQwNTI1MTk1NjI4WjAYMRYwFAYD VQQDEw02NjQ5MDdlZC0yOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWIjkTjRSONQRidDH4N5ImLRjhbIsW+LQOzRPA9aRc4WsVci2XzZnsg2q+Wh A9kOp6+pFt28Gmw832iisktyvxfe8DegEzg0hA9c63hoV0ChZ+WyKKDCfODGeWDn 411gA8HBzSJF6H6+TMj3ftv0s30YYAeFTC20fP9nSEFXRHNKKMHcOIGAySFp0Gap 4QQW8nIGnk3cpUdWUlFMQshO5oZ3JJ5upUs3DXn/H9Y4LTc2jXwIZhTG8t5JDUgR utszaTEDFFuRrDzhrSZHKioxxwnzptW1xynOi5nOilNH0VA/F8AsKXxaveApGFaA T1VkpFyu2WeAdqj/f+dLsm77nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtURTLs i66WGztQBpvA9MEKcqyAMB8GA1UdIwQYMBaAFJqlPSe+G7YUlTw3nTngu8XxwSSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRDQi9BREVDNTQzQTFE NzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRoU1ZQRGVkT2VDN3hmSEJK S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xVTlKNzRidGhTVlBEZWRPZUM3eGZIQkpLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRDQi9BREVDNTQzQTFENzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRo U1ZQRGVkT2VDN3hmSEJKS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApBSRB+KedfAhsfkXsn8oQRerihtPHL751JiT+JH0UBUAIX3xsrZo5 0TEUg0dfN7IRIs9iqmfPBNCUBwXeIbpv7Le6i0T4z8ttEJH69P0mjVT6hntFEufD FyAbRiZXsltxxz7bmDVDY2M9DyElbYizErob3quJ+5PFjr/1wHjbhssiyrDfgc1O epgkgYtC6vwZSyB02SoYTyMfTW4Q3tHkPSlOP1kcflUmiNU5twCBTGfTFbPC/KZ4 OuoaK9HJABaq/Tc1SsZJ6EpGBLQE5mutRsqKhH8In4le82D3k7IhU4wFX5sK7xZX bFnBs1xfPnATpJ4jDFMfhJ7aYKJoobch -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org