$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: 02JlXAVflwMKISR3QNueVygAI64azjIL1+j09hOycro= Subject key identifier: E4:E7:6F:E6:05:CA:50:A0:92:27:CB:4E:56:09:A4:6C:2A:D7:E5:E8 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: 2C Signing time: Wed 15 May 2024 08:40:26 +0000 Manifest this update: Wed 15 May 2024 08:40:25 +0000 Manifest next update: Wed 22 May 2024 08:40:25 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: Y32mNP8byuRQg7rcRiWbowvpeSIN3d0NjViX0rD6Wp4=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: zaJAYhQTcybhHQIlp/uCcC9JLNAhj46aBOJI3WaHnt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: May 15 08:40:25 2024 GMT Not After : May 22 08:40:25 2024 GMT Subject: CN=664474fa-6b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:4a:a9:40:fe:fe:55:c3:91:8c:f4:ec:c3: 16:28:f2:b9:77:4c:68:35:a7:a2:19:eb:f8:d8:c0: a0:d7:5e:ac:d5:e7:b4:90:ce:c5:71:41:f3:4e:45: 94:2e:e8:6e:57:26:51:a3:7c:22:05:47:96:53:a8: f3:e7:18:3e:2f:7c:2d:3b:cf:50:b1:a0:99:72:06: e8:03:d3:35:44:29:cb:93:80:a9:57:0f:2c:c7:0e: bd:3d:f6:db:3c:b4:b0:1f:2c:ad:51:80:57:27:7f: 2b:09:82:4a:c3:ff:2c:f6:46:77:77:72:2d:ab:cc: f1:10:af:74:85:84:25:e4:01:b9:b6:26:fa:63:a2: 1f:a6:dd:11:07:fb:61:e6:2a:cc:33:08:11:d7:c5: 32:62:f5:b5:fe:f7:98:40:39:90:c3:e5:dd:64:b5: e3:85:43:4e:26:9a:51:f2:eb:18:b0:a4:2b:37:11: 4a:69:ae:98:ae:a9:97:d7:85:81:45:f0:4c:70:60: d7:8a:28:d1:db:84:8d:7b:07:3d:91:45:8f:29:c0: 70:4c:25:14:54:43:ff:0d:36:2a:61:e3:79:c3:e2: 33:78:ab:27:6d:2f:8b:ed:55:7d:3a:9f:31:e7:ca: 4e:20:94:05:67:f0:10:ed:65:c7:a2:ee:99:74:36: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:6F:E6:05:CA:50:A0:92:27:CB:4E:56:09:A4:6C:2A:D7:E5:E8 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:47:bf:af:c6:5f:a4:54:6d:5a:1d:3c:d3:90:a7:9e:5a:b5: be:0b:e1:c2:36:24:b5:a5:57:91:38:1f:6a:b1:25:8a:cc:a9: 0b:b7:0a:75:b1:2f:fd:fb:cf:20:3b:4e:98:eb:aa:7d:bb:e2: 8d:57:f1:de:01:c4:84:8e:ec:ca:1b:35:1a:18:78:80:ed:65: 00:11:78:c8:1f:b6:0d:34:d2:1b:e3:47:13:1f:5c:69:d7:5c: 63:97:e5:7c:a3:90:7d:e2:1a:e3:2c:9d:61:88:4c:9b:7c:6b: 10:a5:4c:03:8e:84:f2:c1:11:4b:19:1c:25:93:22:bc:55:f2: 9d:c5:e6:44:bb:64:ca:cb:78:6d:e0:fd:fe:19:18:0a:28:cf: 1f:de:a8:02:ac:1e:7b:7d:2c:23:75:10:4b:42:76:47:f5:0c: 8b:ed:bf:7f:a5:91:d9:c3:ee:83:ff:fe:1d:e3:4f:fe:e0:60: 5e:ee:33:5b:44:88:52:af:f4:c1:1b:9b:70:73:08:9d:4e:1e: 47:97:51:97:d9:c0:ae:7a:60:d3:fd:2f:5a:53:57:ff:28:b0: 5f:49:45:4c:1c:82:9e:d7:35:aa:a9:dd:8b:e6:78:b9:d5:22: e7:34:e8:d6:f1:26:4f:21:c1:22:38:9a:78:e3:43:4d:03:59: 58:76:33:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzQxNTExMC8GA1UEBRMoQTgyRTYzMzFFQkY0NEY1OEZDNjU5OTg2REIwNTQ0QzY2 MTVGMjZGMTAeFw0yNDA1MTUwODQwMjVaFw0yNDA1MjIwODQwMjVaMBgxFjAUBgNV BAMTDTY2NDQ3NGZhLTZiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQJkqpQP7+VcORjPTswxYo8rl3TGg1p6IZ6/jYwKDXXqzV57SQzsVxQfNORZQu 6G5XJlGjfCIFR5ZTqPPnGD4vfC07z1CxoJlyBugD0zVEKcuTgKlXDyzHDr099ts8 tLAfLK1RgFcnfysJgkrD/yz2Rnd3ci2rzPEQr3SFhCXkAbm2Jvpjoh+m3REH+2Hm KswzCBHXxTJi9bX+95hAOZDD5d1kteOFQ04mmlHy6xiwpCs3EUpprpiuqZfXhYFF 8ExwYNeKKNHbhI17Bz2RRY8pwHBMJRRUQ/8NNiph43nD4jN4qydtL4vtVX06nzHn yk4glAVn8BDtZcei7pl0NtHtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Odv5gXK UKCSJ8tOVgmkbCrX5egwHwYDVR0jBBgwFoAUqC5jMev0T1j8ZZmG2wVExmFfJvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNDE1L0JEMUM5MzVDRDcz MjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUM1ak1ldjBUMWo4WlptRzJ3VkV4bUZmSnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NDE1L0JEMUM5MzVDRDczMjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFq OFpabUcyd1ZFeG1GZkp2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINHv6/GX6RUbVodPNOQp55atb4L4cI2JLWlV5E4H2qxJYrMqQu3CnWx L/37zyA7Tpjrqn274o1X8d4BxISO7MobNRoYeIDtZQAReMgftg000hvjRxMfXGnX XGOX5XyjkH3iGuMsnWGITJt8axClTAOOhPLBEUsZHCWTIrxV8p3F5kS7ZMrLeG3g /f4ZGAoozx/eqAKsHnt9LCN1EEtCdkf1DIvtv3+lkdnD7oP//h3jT/7gYF7uM1tE iFKv9MEbm3BzCJ1OHkeXUZfZwK56YNP9L1pTV/8osF9JRUwcgp7XNaqp3YvmeLnV Iuc06NbxJk8hwSI4mnjjQ00DWVh2M+M= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org