$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: MMQzBExDdC9+zj6vtH2Oj8ncBs2a9yFrXgRkdQPc6xw= Subject key identifier: 52:96:40:8A:87:75:F1:82:69:EF:E1:56:15:A6:B4:60:FE:7C:A0:55 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 034C Signing time: Sun 05 May 2024 03:03:23 +0000 Manifest this update: Sun 05 May 2024 03:03:23 +0000 Manifest next update: Sun 12 May 2024 03:03:23 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: W97MVvrJBZI5CiAYI/kjmBCoai+xw26gOLMAaUim/V8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: May 5 03:03:23 2024 GMT Not After : May 12 03:03:23 2024 GMT Subject: CN=6636f6fb-8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:de:b1:11:9f:4c:e5:2d:70:e7:cd:df:26: 94:33:5b:f5:9c:83:c8:bd:2d:6f:17:36:5b:8b:cf: 99:a9:69:71:24:ef:b8:e2:d5:07:13:4d:ca:64:47: 33:62:79:f2:35:71:97:f5:0f:21:57:3a:85:66:9c: ec:84:15:e1:1b:cb:b4:f2:99:ca:74:ea:a0:90:7d: d1:15:79:41:1e:e0:d4:ab:d4:86:e5:ef:0f:ec:7a: be:a3:65:8d:f5:6a:9b:77:4c:a9:8b:dd:a4:d4:28: 26:70:c0:09:26:d7:f4:92:72:41:0a:d6:2a:c0:22: 50:5e:d6:91:5a:21:55:45:cf:a4:07:29:f0:54:fa: d8:0b:6d:92:b7:f2:f2:b6:e4:fc:b3:24:1a:36:c2: 9b:2e:fb:f5:aa:87:10:1f:7a:6c:3a:b8:3f:59:4d: 50:b0:c2:d6:88:30:2c:ee:63:10:a9:fc:21:47:4b: 2d:70:ee:5b:30:3e:5b:9f:91:7a:37:82:b2:2c:6d: 01:dc:f6:cc:e3:0e:69:20:bd:b1:eb:6a:18:7c:fd: 37:c8:a4:ed:0c:d1:66:9c:a7:19:8b:92:99:34:f8: 9d:b3:00:8c:22:cf:14:80:e1:11:31:71:5f:ed:d5: 36:94:09:60:3b:e9:f9:9b:e8:be:5f:35:3d:0e:6a: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:40:8A:87:75:F1:82:69:EF:E1:56:15:A6:B4:60:FE:7C:A0:55 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:26:b9:a2:22:b5:96:76:6d:5b:bb:f6:5a:a4:08:2f:2d:c4: 84:ca:18:86:d2:7b:29:f9:2c:91:c3:22:e5:e1:64:c4:3d:50: 33:5c:30:55:44:c2:cb:a9:6d:d8:43:16:8c:96:2a:97:90:d3: 5c:3c:d6:bd:e3:db:84:45:27:75:10:2f:50:ff:f4:5c:92:3f: 79:f4:18:aa:5b:cd:e0:31:f1:4f:5b:8b:ee:ae:be:1f:26:7b: 3e:80:4d:6f:1d:b6:8a:8d:8f:fe:65:48:02:20:71:67:6b:0e: d7:15:d3:ea:2d:b1:32:ef:60:56:aa:75:68:e3:05:87:61:91: f5:76:ce:a9:bf:98:4b:8e:13:c8:e6:55:b5:12:97:8b:87:6a: d6:8b:3f:19:50:49:7c:66:3b:64:31:b0:36:2b:96:52:dc:70: 1c:88:c7:e8:16:fa:b9:b3:a4:ba:69:fe:c1:88:fd:06:8f:d9: 78:04:99:93:c5:54:a4:46:f1:17:0c:fd:0f:09:4f:59:c9:a6: 7f:9e:77:ec:76:d7:17:69:27:14:1a:e0:34:47:b2:a7:d5:70: 29:ef:20:12:7d:58:eb:81:72:11:f0:45:ab:28:8c:e0:e9:f4: 50:e7:14:8d:c3:4f:b8:3d:7e:f7:f8:3d:21:34:8b:47:22:86: f3:4a:a0:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjQwNTA1MDMwMzIzWhcNMjQwNTEyMDMwMzIzWjAYMRYwFAYD VQQDEw02NjM2ZjZmYi04MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCresRGfTOUtcOfN3yaUM1v1nIPIvS1vFzZbi8+ZqWlxJO+44tUHE03KZEcz YnnyNXGX9Q8hVzqFZpzshBXhG8u08pnKdOqgkH3RFXlBHuDUq9SG5e8P7Hq+o2WN 9Wqbd0ypi92k1CgmcMAJJtf0knJBCtYqwCJQXtaRWiFVRc+kBynwVPrYC22St/Ly tuT8syQaNsKbLvv1qocQH3psOrg/WU1QsMLWiDAs7mMQqfwhR0stcO5bMD5bn5F6 N4KyLG0B3PbM4w5pIL2x62oYfP03yKTtDNFmnKcZi5KZNPidswCMIs8UgOERMXFf 7dU2lAlgO+n5m+i+XzU9DmqP7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKWQIqH dfGCae/hVhWmtGD+fKBVMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLJrmiIrWWdm1bu/ZapAgvLcSEyhiG0nsp+SyRwyLl4WTEPVAzXDBV RMLLqW3YQxaMliqXkNNcPNa949uERSd1EC9Q//Rckj959BiqW83gMfFPW4vurr4f Jns+gE1vHbaKjY/+ZUgCIHFnaw7XFdPqLbEy72BWqnVo4wWHYZH1ds6pv5hLjhPI 5lW1EpeLh2rWiz8ZUEl8ZjtkMbA2K5ZS3HAciMfoFvq5s6S6af7BiP0Gj9l4BJmT xVSkRvEXDP0PCU9ZyaZ/nnfsdtcXaScUGuA0R7Kn1XAp7yASfVjrgXIR8EWrKIzg 6fRQ5xSNw0+4PX73+D0hNItHIobzSqD2 -----END CERTIFICATE-----Generated at Sun May 5 03:52:19 2024 by rpki-client on console-ams.rpki-client.org