$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: qinaYqhGKNUszKDfQFBj3XgafO8bM7OvqVaQf7O32x0= Subject key identifier: DC:75:BA:CB:39:A9:13:FE:06:4D:66:D8:41:8F:95:BA:A3:17:4B:32 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 10B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1DEE Signing time: Mon 06 May 2024 18:00:30 +0000 Manifest this update: Mon 06 May 2024 18:00:29 +0000 Manifest next update: Mon 13 May 2024 18:00:29 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: IIgxTa55k/4q5vKm8GucIU5PLKCc8AX4h8SpgiR447I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4276 (0x10b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: May 6 18:00:29 2024 GMT Not After : May 13 18:00:29 2024 GMT Subject: CN=66391abd-d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:36:1d:0e:ce:e2:8d:35:d0:d0:66:29:48: 48:82:f4:a4:de:44:09:3e:93:06:92:de:00:9f:d3: bf:6e:54:50:85:53:78:dd:0e:5d:e9:c0:c0:08:ca: 68:a3:f1:e0:b2:b1:8a:83:39:13:e8:ff:91:02:5e: a4:07:09:75:f3:7c:5a:22:bd:39:e8:79:29:0a:87: 36:3a:67:1c:46:64:b5:a9:bb:a6:ee:eb:9a:99:c1: a6:57:82:a3:e3:1a:36:35:78:2b:ba:00:db:d0:09: 35:46:85:09:77:0f:15:44:6f:79:71:6a:39:13:dc: 58:e2:83:92:8b:1a:1e:15:c9:fa:25:66:ac:87:d9: b0:3f:96:67:37:fc:d1:82:da:16:2f:c5:6f:3c:0d: 9e:b8:ee:1b:fa:e9:53:ed:35:61:7b:b5:96:e5:97: 07:61:4c:40:db:0e:cd:3d:af:56:68:a6:6c:35:0f: 45:8d:09:00:59:57:90:ca:34:12:44:f8:e5:e6:94: 18:7e:a7:56:41:fc:90:ee:1f:73:79:c4:f1:89:70: 05:c1:24:12:bb:65:d2:62:1e:56:63:3e:e3:f0:bb: a6:66:ff:24:b3:a6:55:01:dc:ba:5b:21:e1:31:65: 02:9e:33:68:fb:9e:b4:f8:3f:e2:c3:10:fa:58:d1: 3d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:BA:CB:39:A9:13:FE:06:4D:66:D8:41:8F:95:BA:A3:17:4B:32 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:cc:07:81:46:4c:17:a9:0f:f6:3a:34:9b:4a:97:7c:7b: d6:0c:6f:d8:c4:fb:e1:88:e5:59:84:a3:8f:10:7b:25:40:bc: 46:63:8e:65:4c:ec:6e:0b:15:03:62:39:77:44:d3:52:7c:9e: 85:38:29:60:12:80:aa:49:66:f9:c1:3c:51:80:60:c8:5a:e9: ec:0d:a0:c9:b3:81:d6:d2:77:2a:0c:df:80:b7:8e:d5:70:11: 63:d8:81:6e:8c:e3:00:1e:1f:d5:77:20:d8:d2:f9:40:03:b0: 03:f1:48:1f:85:c6:b3:14:0d:28:ad:93:30:51:3e:3a:17:c3: 53:6d:75:32:84:ff:80:93:f0:37:19:25:33:25:64:a9:06:08: a4:d9:db:46:b1:fd:01:61:03:e5:8c:dc:4a:60:db:20:6c:cd: 72:e1:84:e4:2c:c4:72:3a:1d:71:73:61:92:35:ce:8b:8a:49: c9:a7:83:20:aa:e2:f0:11:75:b0:8a:3e:08:59:c5:f4:56:d2: ff:46:c8:c4:37:a1:36:43:1f:fb:69:13:d4:69:c3:30:f0:5e: 9d:a5:8f:f7:42:67:84:e5:35:69:0c:b7:5c:8f:43:ac:22:c8: 91:8d:ed:90:19:96:71:83:49:89:4f:db:59:46:77:12:e5:ce: 11:35:8e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjQwNTA2MTgwMDI5WhcNMjQwNTEzMTgwMDI5WjAYMRYwFAYD VQQDEw02NjM5MWFiZC1kMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYc2HQ7O4o010NBmKUhIgvSk3kQJPpMGkt4An9O/blRQhVN43Q5d6cDACMpo o/HgsrGKgzkT6P+RAl6kBwl183xaIr056HkpCoc2OmccRmS1qbum7uuamcGmV4Kj 4xo2NXgrugDb0Ak1RoUJdw8VRG95cWo5E9xY4oOSixoeFcn6JWash9mwP5ZnN/zR gtoWL8VvPA2euO4b+ulT7TVhe7WW5ZcHYUxA2w7NPa9WaKZsNQ9FjQkAWVeQyjQS RPjl5pQYfqdWQfyQ7h9zecTxiXAFwSQSu2XSYh5WYz7j8LumZv8ks6ZVAdy6WyHh MWUCnjNo+560+D/iwxD6WNE9/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx1uss5 qRP+Bk1m2EGPlbqjF0syMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZMwHgUZMF6kP9jo0m0qXfHvWDG/YxPvhiOVZhKOPEHslQLxGY45l TOxuCxUDYjl3RNNSfJ6FOClgEoCqSWb5wTxRgGDIWunsDaDJs4HW0ncqDN+At47V cBFj2IFujOMAHh/VdyDY0vlAA7AD8UgfhcazFA0orZMwUT46F8NTbXUyhP+Ak/A3 GSUzJWSpBgik2dtGsf0BYQPljNxKYNsgbM1y4YTkLMRyOh1xc2GSNc6LiknJp4Mg quLwEXWwij4IWcX0VtL/RsjEN6E2Qx/7aRPUacMw8F6dpY/3QmeE5TVpDLdcj0Os IsiRje2QGZZxg0mJT9tZRncS5c4RNY6R -----END CERTIFICATE-----Generated at Mon May 6 20:19:42 2024 by rpki-client on console-ams.rpki-client.org