$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: 9jrYo+15f4nnMJWR42RTqxVMtci2U7MdKf95k31Wdq4= Subject key identifier: E0:FF:4A:26:51:4E:89:6A:D0:85:92:BB:F7:0C:A5:4C:9A:A8:9C:04 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: B1 Signing time: Wed 15 May 2024 06:39:42 +0000 Manifest this update: Wed 15 May 2024 06:39:42 +0000 Manifest next update: Wed 22 May 2024 06:39:42 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: 5zsHVsqAgYN9npNbQexM3gOIgWllwkNcZlxTRjc4ec8=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: 26TuMkUeWf1IIXJf6DJPXqhsS/atk8cxhQXBhAka+ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: May 15 06:39:42 2024 GMT Not After : May 22 06:39:42 2024 GMT Subject: CN=664458ae-b2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:d3:b5:95:c7:d9:e6:28:3c:ab:a3:27:31: 38:af:c1:85:d4:43:6f:69:42:20:00:06:05:c6:cf: 63:7b:e6:1a:14:96:cb:f9:ed:f5:76:78:42:b2:31: 38:f1:eb:76:f4:ee:b1:bf:52:4e:a0:cd:ea:1f:ef: ee:e4:c9:b2:a0:37:f5:b3:4b:8d:7c:3f:f4:64:bc: 46:13:96:5f:08:0b:c7:6c:4b:bd:ec:5f:b7:04:5a: 53:6c:1f:fd:e7:81:c4:17:d9:d8:4b:15:51:9b:8b: 42:c6:e5:bd:6c:1b:ef:d7:78:6a:93:f8:61:3f:52: c4:cf:36:c4:44:80:01:81:59:fa:f9:a6:95:0a:9f: 86:fe:33:ed:27:4b:e4:bc:aa:f3:cb:e1:f2:f5:42: d3:b7:c6:43:8b:2e:80:9e:76:c5:fb:82:e8:33:8d: 13:a0:b5:38:b3:96:9a:dc:6f:7f:e1:f0:20:ec:91: 65:b9:44:ee:19:c9:fa:65:d0:21:93:58:6b:37:36: a6:0a:b4:2c:2f:60:41:26:c9:29:99:60:d4:87:2e: e7:b0:39:1a:8f:3f:74:31:b9:de:18:3d:1b:ce:9d: 43:0e:bb:62:9c:4b:13:3c:34:f3:a7:de:b3:e7:e8: 64:95:b4:40:5f:af:c4:fb:33:ec:54:2c:68:57:b2: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FF:4A:26:51:4E:89:6A:D0:85:92:BB:F7:0C:A5:4C:9A:A8:9C:04 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:dd:71:fb:21:7a:31:a0:06:c2:d8:f3:56:70:c3:26:c1: 56:65:e9:61:67:30:9c:d0:8d:48:11:2f:9d:83:94:e1:15:81: fc:c6:8e:39:89:f8:58:dd:41:10:35:fb:3d:48:d3:c7:e9:18: de:32:c2:c1:76:bf:e0:a2:5f:ec:20:96:6b:f1:68:11:0b:64: 07:e5:4e:fa:66:44:b8:8f:b3:a8:cd:e3:06:54:d7:28:d3:44: d0:e6:18:43:3e:b2:ed:ac:6d:3c:de:a6:90:cc:27:cb:3a:9b: 60:65:d7:9a:4c:4c:c1:1b:ab:f0:f4:8a:e4:23:53:6c:32:a3: 85:00:83:de:07:4c:78:f5:33:62:0a:ad:8d:b6:15:cb:29:cd: 1f:27:8d:6f:13:8a:e8:87:90:51:2f:b0:ee:56:35:50:fb:49: a7:c1:c5:e6:9c:b0:08:e7:49:73:ac:72:f9:4a:4b:8f:62:20: 15:8a:03:23:cb:fe:df:0b:07:f7:da:93:ae:ee:9d:42:26:bd: 6c:37:e4:1b:28:42:b1:f7:a6:92:b7:c5:c3:b8:30:59:da:fc: 31:b2:62:fa:00:67:e7:6d:a1:b4:ef:1b:82:b1:67:a1:27:4f: 0d:40:ad:87:6f:11:44:41:ce:6c:cc:77:22:e7:a3:4e:d7:0b: 07:07:99:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjQwNTE1MDYzOTQyWhcNMjQwNTIyMDYzOTQyWjAYMRYwFAYD VQQDEw02NjQ0NThhZS1iMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1HTtZXH2eYoPKujJzE4r8GF1ENvaUIgAAYFxs9je+YaFJbL+e31dnhCsjE4 8et29O6xv1JOoM3qH+/u5MmyoDf1s0uNfD/0ZLxGE5ZfCAvHbEu97F+3BFpTbB/9 54HEF9nYSxVRm4tCxuW9bBvv13hqk/hhP1LEzzbERIABgVn6+aaVCp+G/jPtJ0vk vKrzy+Hy9ULTt8ZDiy6AnnbF+4LoM40ToLU4s5aa3G9/4fAg7JFluUTuGcn6ZdAh k1hrNzamCrQsL2BBJskpmWDUhy7nsDkajz90MbneGD0bzp1DDrtinEsTPDTzp96z 5+hklbRAX6/E+zPsVCxoV7LBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD/SiZR Tolq0IWSu/cMpUyaqJwEMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgKt1x+yF6MaAGwtjzVnDDJsFWZelhZzCc0I1IES+dg5ThFYH8xo45 ifhY3UEQNfs9SNPH6RjeMsLBdr/gol/sIJZr8WgRC2QH5U76ZkS4j7OozeMGVNco 00TQ5hhDPrLtrG083qaQzCfLOptgZdeaTEzBG6vw9IrkI1NsMqOFAIPeB0x49TNi Cq2NthXLKc0fJ41vE4roh5BRL7DuVjVQ+0mnwcXmnLAI50lzrHL5SkuPYiAVigMj y/7fCwf32pOu7p1CJr1sN+QbKEKx96aSt8XDuDBZ2vwxsmL6AGfnbaG07xuCsWeh J08NQK2HbxFEQc5szHci56NO1wsHB5l5 -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org