$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: piX/2tZRJC121FB/cO+fA/Fzol5gdo40r2YvvgGGYIQ= Subject key identifier: D6:13:6D:B4:AF:70:F4:51:58:70:BA:CA:BA:1B:99:3C:8C:26:79:20 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: AC Signing time: Wed 15 May 2024 06:40:37 +0000 Manifest this update: Wed 15 May 2024 06:40:37 +0000 Manifest next update: Wed 22 May 2024 06:40:37 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: CHkZRc7rbDUyvgGoPsbPdQmsMYzNsA72de5RANto0no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: May 15 06:40:37 2024 GMT Not After : May 22 06:40:37 2024 GMT Subject: CN=664458e5-b330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:38:2a:39:73:fb:d5:86:80:de:15:6b:fb: 72:dc:db:e0:ab:72:1f:41:7a:a6:73:f3:8e:90:e7: e0:57:70:ce:4f:d3:aa:dd:e9:11:d6:f8:7a:2f:f0: 40:e0:19:83:8c:a3:58:46:5b:ca:18:fa:60:88:70: ba:5b:47:64:3d:31:ca:0b:10:64:68:1e:66:d7:b7: 2d:f6:02:b2:a2:07:43:ce:b5:67:8e:24:6b:2a:7b: 56:0e:c8:47:5a:71:d0:e6:b0:86:c7:61:2a:91:cc: cb:a2:90:79:bc:9a:2d:60:60:a9:32:c7:44:a4:80: 41:0f:73:b8:96:1e:0b:1a:d0:7a:36:37:64:4f:a5: 2a:32:4b:70:c5:16:65:6b:f6:71:8b:28:55:c2:b5: 7d:ed:47:84:b1:9e:ee:32:81:40:a9:5a:36:a8:00: 3e:cf:cd:2b:72:f2:94:b3:55:e7:c3:c8:6c:f5:a9: 96:15:81:14:31:5a:eb:e1:4f:94:b9:d4:cc:d5:3a: b4:49:e9:75:2b:56:1f:bd:8e:b8:2a:1c:88:b9:99: e5:55:b6:fe:4e:55:d3:05:a0:d4:e4:a2:a7:70:13: 4d:1b:d0:3f:8f:f5:5b:bf:d4:a1:cd:67:b1:0d:5e: ad:e0:cc:4d:c6:2e:ce:20:4a:82:07:79:64:f4:3d: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:13:6D:B4:AF:70:F4:51:58:70:BA:CA:BA:1B:99:3C:8C:26:79:20 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:23:03:74:76:a9:d8:ee:db:8b:75:92:31:45:20:0c:de:c6: 08:4d:78:bc:24:ff:a0:ab:60:ab:d4:25:66:a4:4d:d7:eb:27: d6:f6:db:b0:97:29:ee:a1:b6:f5:c7:71:1a:c9:48:4e:a6:93: 38:ac:25:90:01:5f:b8:96:48:0e:e7:31:b4:f1:6c:dd:7e:87: c4:8a:c6:a2:15:db:5f:71:24:69:47:59:1d:e3:0e:3c:3e:30: 19:fc:43:ec:3f:57:83:38:33:59:ab:3b:22:4b:4a:b6:db:d9: 41:66:d7:0f:af:7d:06:42:37:10:12:63:bd:b7:de:fe:43:d5: 4e:fb:3d:ba:4e:8b:9d:1c:8b:05:20:d0:76:59:30:f9:d4:2d: f7:59:83:ee:95:3d:0a:1f:8a:2b:e4:0a:ef:d4:a9:75:4a:0f: b6:b9:ab:fa:ac:24:2d:fb:3e:23:0e:f7:5f:9e:2b:9b:2e:99: 34:fc:eb:a6:46:fd:f0:60:be:65:62:d0:91:4f:90:6c:72:49: 21:9f:b0:ee:eb:6f:2e:8a:34:60:c1:97:87:28:57:d5:5d:97: 18:b8:e2:18:5e:7d:ce:b4:a6:7d:a3:af:38:22:e2:5b:85:a4: f9:36:4e:2a:cd:de:e1:fa:d6:d7:5f:83:49:50:90:42:0d:e5: 60:c3:31:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjQwNTE1MDY0MDM3WhcNMjQwNTIyMDY0MDM3WjAYMRYwFAYD VQQDEw02NjQ0NThlNS1iMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdA4Kjlz+9WGgN4Va/ty3Nvgq3IfQXqmc/OOkOfgV3DOT9Oq3ekR1vh6L/BA 4BmDjKNYRlvKGPpgiHC6W0dkPTHKCxBkaB5m17ct9gKyogdDzrVnjiRrKntWDshH WnHQ5rCGx2EqkczLopB5vJotYGCpMsdEpIBBD3O4lh4LGtB6NjdkT6UqMktwxRZl a/ZxiyhVwrV97UeEsZ7uMoFAqVo2qAA+z80rcvKUs1Xnw8hs9amWFYEUMVrr4U+U udTM1Tq0Sel1K1YfvY64KhyIuZnlVbb+TlXTBaDU5KKncBNNG9A/j/Vbv9ShzWex DV6t4MxNxi7OIEqCB3lk9D2DTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYTbbSv cPRRWHC6yrobmTyMJnkgMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgIwN0dqnY7tuLdZIxRSAM3sYITXi8JP+gq2Cr1CVmpE3X6yfW9tuw lynuobb1x3EayUhOppM4rCWQAV+4lkgO5zG08WzdfofEisaiFdtfcSRpR1kd4w48 PjAZ/EPsP1eDODNZqzsiS0q229lBZtcPr30GQjcQEmO9t97+Q9VO+z26ToudHIsF INB2WTD51C33WYPulT0KH4or5Arv1Kl1Sg+2uav6rCQt+z4jDvdfniubLpk0/Oum Rv3wYL5lYtCRT5Bsckkhn7Du628uijRgwZeHKFfVXZcYuOIYXn3OtKZ9o684IuJb haT5Nk4qzd7h+tbXX4NJUJBCDeVgwzFP -----END CERTIFICATE-----Generated at Wed May 15 09:28:14 2024 by rpki-client on console-fra.rpki-client.org