$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: bEnyvhM1wC4fgBhWkAfMjPLLPmKbM+z4WH12DOX67KY= Subject key identifier: BE:45:DC:E5:A1:4E:29:BE:D3:63:3F:13:8E:9F:33:2E:C0:25:12:D5 Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 0F35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 1538 Signing time: Mon 06 May 2024 18:16:45 +0000 Manifest this update: Mon 06 May 2024 18:16:45 +0000 Manifest next update: Mon 13 May 2024 18:16:45 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: 7KfLgFgG5GcOHzOuF3f8mWtm24m0uqES7YUjxXN7USI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3893 (0xf35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: May 6 18:16:45 2024 GMT Not After : May 13 18:16:45 2024 GMT Subject: CN=66391e8d-13de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:6a:ef:97:cf:e3:33:a8:31:ae:d5:5f:e2: d7:83:a6:3f:d5:51:26:f2:35:9e:8b:33:5e:f4:a2: 13:1b:01:f4:87:c4:83:a2:a6:ea:c2:6b:66:59:b6: 55:3e:68:46:f1:27:dc:45:5b:38:98:55:3f:1e:e1: 42:f7:64:1b:f2:7d:04:fd:47:10:c3:02:f5:9c:a2: fc:09:0f:dc:65:18:ce:72:a2:31:9e:00:1b:58:09: 2c:c6:17:5c:4d:f1:26:60:e9:98:af:5d:3b:b0:96: fe:e4:a2:e2:83:bd:ef:1a:5b:bd:ae:4e:eb:bc:ca: 94:be:c0:87:06:8a:4c:1b:d5:93:a2:e7:75:4a:c4: 1a:a4:99:c6:96:8a:44:f5:09:de:6e:8e:45:4e:9f: 46:7b:46:95:51:40:5c:68:40:0f:aa:61:e6:b3:8e: 0f:4e:ff:98:45:d3:8c:7d:22:b9:d2:26:fa:33:a0: c9:a0:ca:0e:57:fc:2a:82:e2:d1:9f:df:24:a6:89: 10:94:3f:6f:dc:63:9a:9a:2f:3a:49:ac:3f:eb:6c: 01:cd:1c:40:7e:20:7b:ff:47:0d:4e:d0:e4:5b:f2: ec:cf:38:8c:f9:a0:03:f6:e3:fc:fd:81:ec:99:64: 64:71:26:96:07:03:e6:f4:c1:29:24:87:f9:32:74: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:DC:E5:A1:4E:29:BE:D3:63:3F:13:8E:9F:33:2E:C0:25:12:D5 X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6d:27:6e:e5:99:9e:7e:fe:25:d4:5e:51:4c:c4:41:5e:d3: 8e:ad:ec:ef:c2:93:5a:15:29:e9:53:79:af:e1:e2:4e:9e:a2: 86:7f:a9:e5:4c:86:df:a3:3f:f4:45:15:fd:e5:1c:db:83:75: c4:58:06:f2:d1:7d:08:96:9c:92:36:96:0c:dd:a8:08:75:c1: 7f:bb:8f:8f:e4:ed:ce:73:07:99:bf:dc:d7:12:62:47:f5:20: 19:ce:a9:4a:c9:54:7f:e6:c7:bf:97:f0:1e:4c:6f:c0:2e:5a: e0:a5:cd:1d:47:6d:cf:ae:16:af:c5:a5:ff:b8:1f:92:8e:9a: 36:c6:9d:05:dd:42:91:df:47:be:7a:d1:8c:86:1f:f9:b3:2d: e5:a6:b7:c5:94:5b:dc:1f:eb:8c:43:ec:a3:2d:06:29:14:d3: ad:be:6c:54:db:47:e9:e6:83:1e:0b:ee:19:20:75:b4:96:2b: 5d:0e:ec:5c:fd:4d:ed:d1:49:3a:a1:1d:b7:90:2b:c5:37:09: 20:4d:e3:09:d0:89:ca:8d:16:e5:f8:6a:1b:67:b3:1f:fd:e4: 67:68:5d:48:f6:56:90:72:f2:19:4f:2f:18:71:ab:8a:fc:89: f4:b5:5d:3d:4d:8b:d6:df:8e:01:e1:3a:83:3e:b2:e8:b6:f3: 6c:6e:2a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjQwNTA2MTgxNjQ1WhcNMjQwNTEzMTgxNjQ1WjAYMRYwFAYD VQQDEw02NjM5MWU4ZC0xM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hRq75fP4zOoMa7VX+LXg6Y/1VEm8jWeizNe9KITGwH0h8SDoqbqwmtmWbZV PmhG8SfcRVs4mFU/HuFC92Qb8n0E/UcQwwL1nKL8CQ/cZRjOcqIxngAbWAksxhdc TfEmYOmYr107sJb+5KLig73vGlu9rk7rvMqUvsCHBopMG9WToud1SsQapJnGlopE 9Qnebo5FTp9Ge0aVUUBcaEAPqmHms44PTv+YRdOMfSK50ib6M6DJoMoOV/wqguLR n98kpokQlD9v3GOami86Saw/62wBzRxAfiB7/0cNTtDkW/LszziM+aAD9uP8/YHs mWRkcSaWBwPm9MEpJIf5MnSbgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5F3OWh Tim+02M/E46fMy7AJRLVMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZbSdu5Zmefv4l1F5RTMRBXtOOrezvwpNaFSnpU3mv4eJOnqKGf6nl TIbfoz/0RRX95Rzbg3XEWAby0X0IlpySNpYM3agIdcF/u4+P5O3OcweZv9zXEmJH 9SAZzqlKyVR/5se/l/AeTG/ALlrgpc0dR23PrhavxaX/uB+Sjpo2xp0F3UKR30e+ etGMhh/5sy3lprfFlFvcH+uMQ+yjLQYpFNOtvmxU20fp5oMeC+4ZIHW0litdDuxc /U3t0Uk6oR23kCvFNwkgTeMJ0InKjRbl+GobZ7Mf/eRnaF1I9laQcvIZTy8YcauK /In0tV09TYvW344B4TqDPrLotvNsbiqt -----END CERTIFICATE-----Generated at Mon May 6 20:19:41 2024 by rpki-client on console-ams.rpki-client.org