$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: 8FmSzF18rXetSrj96j4Wohk2iw+JqjnB7VJ6UMk6wu4= Subject key identifier: 10:92:15:31:F1:76:22:EC:64:A7:B2:73:75:ED:6E:17:3F:D9:DF:7B Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 5028 Signing time: Sat 04 May 2024 15:17:39 +0000 Manifest this update: Sat 04 May 2024 15:17:39 +0000 Manifest next update: Sat 11 May 2024 15:17:39 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 7omTXAL4jPUgIW+tuWC4JSko6juGPJP+kGtfwc3GlOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: May 4 15:17:39 2024 GMT Not After : May 11 15:17:39 2024 GMT Subject: CN=66365193-2cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:88:5a:d1:56:1c:3c:83:05:ec:ef:4b:69: bd:77:0f:b1:3a:5a:f3:48:9b:01:b8:21:0f:db:8d: 95:e6:c7:7a:c8:53:72:0e:a0:99:ed:7c:0e:fb:ba: b4:eb:c1:e3:c1:03:8f:fd:09:f4:ba:91:bf:bd:4b: 25:75:60:17:4d:36:8b:04:14:c7:dd:5d:04:dc:d0: 78:31:a6:fc:b5:63:86:7a:da:31:c2:1b:30:80:27: f2:ab:f5:95:c4:53:10:30:09:cf:71:18:59:61:12: fc:37:1b:87:09:a3:a9:c7:3e:d0:85:29:23:86:c4: 9b:99:8e:f9:9d:50:be:7e:e1:eb:93:13:76:d1:ee: 7f:a3:1f:7f:57:b9:ef:bd:a4:c2:12:5a:e1:47:20: f7:3c:c5:0c:ae:8e:0f:7b:ea:a3:92:63:94:5c:46: 69:10:30:c0:d4:02:8b:72:6a:89:4e:dc:df:79:00: e0:81:df:60:de:cf:be:23:f7:ed:9f:bc:87:c5:03: 32:85:83:62:b8:ed:7e:00:2a:af:e8:45:08:c3:4e: 6b:52:f2:96:fe:d4:e7:f0:fb:d4:7e:16:92:50:01: 64:a7:ab:fb:c4:59:79:ee:67:be:58:04:21:45:66: 79:7e:7d:1e:bb:08:7e:e3:9e:89:7c:75:12:1f:c1: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:15:31:F1:76:22:EC:64:A7:B2:73:75:ED:6E:17:3F:D9:DF:7B X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:e1:d4:ff:ff:5c:cd:63:22:63:42:06:54:68:18:9e:bf: 2a:7b:4f:d9:ab:ee:23:19:b3:15:30:2e:05:28:6c:09:1d:d9: 5f:9f:e9:22:a9:ec:04:c4:1c:66:d5:36:11:8c:1e:2b:28:e0: d3:1f:b1:53:21:93:40:de:69:35:d7:18:94:02:ef:18:35:ff: 39:d4:b7:55:48:39:9a:50:b1:54:9a:df:4d:aa:e2:44:4e:9e: 5f:d1:13:58:de:33:ae:9e:16:8b:2a:be:93:2b:22:c1:71:16: 57:e6:76:46:f3:5e:e8:ea:c3:d8:09:74:19:94:ed:3e:88:84: ed:04:69:cf:69:64:ff:e9:06:f0:ce:c5:02:db:ac:f9:e4:ba: e5:67:db:0d:c7:4e:8d:f7:c9:94:fb:08:ce:4c:2a:9f:60:27: 5f:7b:75:7b:93:2f:78:f5:8a:ef:40:6f:d2:95:4c:52:2e:4c: 6e:6b:33:67:71:06:ef:4f:d6:b4:1e:c0:64:86:5f:46:0d:9f: 2a:6b:e6:55:bf:80:fb:db:bb:6e:11:e3:15:52:58:4e:19:7f: a7:d2:b9:69:e2:28:d9:fd:16:42:74:1e:20:c8:2f:8b:a3:e8: 66:fa:0f:fd:14:86:18:5e:80:76:e0:81:b0:2b:ea:16:c1:1a: 43:b6:d3:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjQwNTA0MTUxNzM5WhcNMjQwNTExMTUxNzM5WjAYMRYwFAYD VQQDEw02NjM2NTE5My0yY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10WIWtFWHDyDBezvS2m9dw+xOlrzSJsBuCEP242V5sd6yFNyDqCZ7XwO+7q0 68HjwQOP/Qn0upG/vUsldWAXTTaLBBTH3V0E3NB4Mab8tWOGetoxwhswgCfyq/WV xFMQMAnPcRhZYRL8NxuHCaOpxz7QhSkjhsSbmY75nVC+fuHrkxN20e5/ox9/V7nv vaTCElrhRyD3PMUMro4Pe+qjkmOUXEZpEDDA1AKLcmqJTtzfeQDggd9g3s++I/ft n7yHxQMyhYNiuO1+ACqv6EUIw05rUvKW/tTn8PvUfhaSUAFkp6v7xFl57me+WAQh RWZ5fn0euwh+456JfHUSH8E5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCSFTHx diLsZKeyc3Xtbhc/2d97MB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/eHU//9czWMiY0IGVGgYnr8qe0/Zq+4jGbMVMC4FKGwJHdlfn+ki qewExBxm1TYRjB4rKODTH7FTIZNA3mk11xiUAu8YNf851LdVSDmaULFUmt9NquJE Tp5f0RNY3jOunhaLKr6TKyLBcRZX5nZG817o6sPYCXQZlO0+iITtBGnPaWT/6Qbw zsUC26z55LrlZ9sNx06N98mU+wjOTCqfYCdfe3V7ky949YrvQG/SlUxSLkxuazNn cQbvT9a0HsBkhl9GDZ8qa+ZVv4D727tuEeMVUlhOGX+n0rlp4ijZ/RZCdB4gyC+L o+hm+g/9FIYYXoB24IGwK+oWwRpDttNC -----END CERTIFICATE-----Generated at Sat May 4 15:45:49 2024 by rpki-client on console-fra.rpki-client.org