$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: yP9MH30wktUHxx8N7TipSzlBh341k/axHQQXhA4Y514= Subject key identifier: 5B:78:47:F2:A6:71:DB:BA:7B:B3:55:F9:FB:8A:70:39:34:F4:36:28 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 10B5 Signing time: Mon 06 May 2024 21:03:48 +0000 Manifest this update: Mon 06 May 2024 21:03:48 +0000 Manifest next update: Mon 13 May 2024 21:03:48 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: ATSW+/FEpQJOS+CYxtCO11WC9s3VU6yIWUoeCiIoF2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: May 6 21:03:48 2024 GMT Not After : May 13 21:03:48 2024 GMT Subject: CN=663945b4-dbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:51:d1:f6:63:bb:dc:4a:73:b0:4c:d2:b0: 50:db:c0:c3:b6:11:b8:ef:f8:28:20:4a:33:33:3a: 14:a2:d8:85:b7:48:4f:c4:49:c9:1e:d2:07:59:e4: 01:1e:6c:cb:b9:98:b0:d5:f6:03:85:4f:1c:d3:9e: a2:c1:c5:38:bd:42:ec:55:12:12:f9:9d:a6:24:77: 55:d5:2e:2e:ac:69:b4:78:7a:89:2c:2b:1e:af:fb: 44:bf:ba:71:ad:da:68:df:f7:18:3a:4d:be:d9:71: 99:bc:0e:18:c8:22:13:a1:b8:34:32:2e:ff:94:71: f1:30:b9:4b:96:8e:ff:b2:da:7e:a6:ca:70:55:fc: 12:f4:4b:59:e9:1a:d4:90:b7:98:9f:18:c6:09:67: 0b:57:69:bf:7a:0c:ee:0e:6c:ee:a0:ed:82:2d:d5: 15:70:d6:a1:89:41:32:7f:ac:ae:2a:78:3c:70:19: 01:10:5d:6c:6f:1d:03:06:e7:49:c6:1e:a7:87:1b: 27:79:9c:a6:1d:13:bd:9e:23:3d:d8:66:b0:29:6c: 71:42:17:a6:93:c7:0f:33:82:e7:f1:c2:3c:72:67: fe:d4:9e:e6:17:0a:91:d5:3a:7d:39:3e:94:e2:f9: b8:a6:65:c9:ff:e1:2f:cd:21:db:e8:58:68:3b:02: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:78:47:F2:A6:71:DB:BA:7B:B3:55:F9:FB:8A:70:39:34:F4:36:28 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:23:04:e9:17:9e:70:c5:d6:ef:cd:96:75:fa:a5:f1:d2: a1:1c:77:5a:a9:73:7d:e6:93:cd:29:92:15:76:88:75:55:e9: a8:05:6b:7d:f6:de:a3:6a:91:c7:8e:c5:5e:c0:85:ed:48:49: 8a:32:66:a5:be:7b:70:71:72:f6:08:58:2d:6a:77:ef:0d:e9: 47:db:45:1c:e2:8e:b6:88:fe:65:fd:20:fe:ac:b1:c0:37:7f: bf:91:a3:d0:92:b5:e6:15:30:1c:7c:44:b7:69:e8:f4:46:05: 6a:02:6c:a7:04:ce:fe:de:a8:ad:3f:67:29:46:ba:b0:33:ce: e1:a4:92:dc:f2:3b:c6:71:8a:bc:68:d2:bd:22:8e:9a:15:fa: ff:e7:dd:36:e1:18:d4:c7:0d:9f:ec:83:f7:95:64:52:78:7c: 1b:09:8c:f6:78:db:4b:49:97:97:44:28:78:21:55:c7:de:92: 29:d8:9a:b9:dc:06:3f:1a:ca:01:fd:22:b3:d5:bd:c8:19:c0: 41:54:f0:ae:5a:e0:a0:7a:e6:bf:26:9d:e5:06:be:92:4f:c5: ca:7d:e3:63:cc:55:c4:cf:d9:4d:e3:66:d4:63:61:ed:ed:22: d6:61:e3:8c:6c:55:45:5f:bf:5d:25:c7:16:d2:d3:5b:4b:87: c4:0d:58:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjQwNTA2MjEwMzQ4WhcNMjQwNTEzMjEwMzQ4WjAYMRYwFAYD VQQDEw02NjM5NDViNC1kYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMhR0fZju9xKc7BM0rBQ28DDthG47/goIEozMzoUotiFt0hPxEnJHtIHWeQB HmzLuZiw1fYDhU8c056iwcU4vULsVRIS+Z2mJHdV1S4urGm0eHqJLCser/tEv7px rdpo3/cYOk2+2XGZvA4YyCITobg0Mi7/lHHxMLlLlo7/stp+pspwVfwS9EtZ6RrU kLeYnxjGCWcLV2m/egzuDmzuoO2CLdUVcNahiUEyf6yuKng8cBkBEF1sbx0DBudJ xh6nhxsneZymHRO9niM92GawKWxxQhemk8cPM4Ln8cI8cmf+1J7mFwqR1Tp9OT6U 4vm4pmXJ/+EvzSHb6FhoOwJTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt4R/Km cdu6e7NV+fuKcDk09DYoMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVCME6ReecMXW782Wdfql8dKhHHdaqXN95pPNKZIVdoh1VemoBWt9 9t6japHHjsVewIXtSEmKMmalvntwcXL2CFgtanfvDelH20Uc4o62iP5l/SD+rLHA N3+/kaPQkrXmFTAcfES3aej0RgVqAmynBM7+3qitP2cpRrqwM87hpJLc8jvGcYq8 aNK9Io6aFfr/59024RjUxw2f7IP3lWRSeHwbCYz2eNtLSZeXRCh4IVXH3pIp2Jq5 3AY/GsoB/SKz1b3IGcBBVPCuWuCgeua/Jp3lBr6ST8XKfeNjzFXEz9lN42bUY2Ht 7SLWYeOMbFVFX79dJccW0tNbS4fEDVhO -----END CERTIFICATE-----Generated at Mon May 6 23:05:44 2024 by rpki-client on console-fra.rpki-client.org