$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: 1wxithEgTSHWSSrAHxoQXpnVjEzpbr4lxW7+yWX/vV8= Subject key identifier: A2:4B:9F:BD:01:02:B9:AA:66:DD:67:F0:B4:FD:4D:B7:44:09:A8:C6 Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 12B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 2749 Signing time: Sat 04 May 2024 17:43:50 +0000 Manifest this update: Sat 04 May 2024 17:43:50 +0000 Manifest next update: Sat 11 May 2024 17:43:50 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: An45NwEYDaDItKAvLDfTkMwZl3N69cKp9ZO/r/B39Y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4787 (0x12b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: May 4 17:43:50 2024 GMT Not After : May 11 17:43:50 2024 GMT Subject: CN=663673d6-b3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:5a:1f:a9:71:e9:c1:c3:5f:d0:56:0a:fd: 89:d8:9a:e7:bf:d9:fc:d8:58:5f:38:8a:58:12:db: 60:6a:fc:86:b1:9a:4c:27:20:03:f5:da:83:f8:33: 24:d7:1e:c1:0a:ac:2d:e7:2b:f9:d8:5c:08:e8:fb: 40:91:15:87:c3:12:9b:19:1a:f6:fb:25:0e:a3:44: c4:d8:e8:59:7d:63:2c:e8:3a:a2:81:60:17:aa:ba: 0f:a3:08:51:91:92:c2:51:98:9f:61:4a:97:8d:97: db:1b:b4:75:13:bc:d0:d8:13:47:ec:c8:a9:15:f3: 2f:37:16:bc:a6:1e:37:1b:40:99:16:28:f6:5a:29: cb:4d:00:94:43:4a:44:39:6d:d7:61:23:50:e1:34: d1:62:b7:ea:18:1f:59:22:08:a3:60:1f:50:2b:bc: 59:ed:06:89:d6:43:20:81:07:26:6d:a4:04:47:2c: 2c:b7:ad:20:2d:2b:4b:b1:8d:00:e3:af:90:48:ca: a8:7c:e8:1f:85:20:91:ee:88:d5:ad:05:51:8c:13: cc:f7:2b:b5:95:73:cb:01:bf:8c:cc:d8:d9:00:1c: 15:e8:8c:d4:6d:c7:40:e2:97:7a:89:87:4f:ab:2f: 07:3c:25:ba:bc:87:70:38:84:8b:0d:64:11:3c:98: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:9F:BD:01:02:B9:AA:66:DD:67:F0:B4:FD:4D:B7:44:09:A8:C6 X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:60:97:44:8b:39:f1:64:96:d4:aa:87:b6:44:a4:d1:a6:31: 7d:37:55:64:a5:05:ea:85:1d:31:4a:9d:3b:26:5e:d1:15:36: a9:1f:63:3b:2c:c2:b5:3c:9d:35:81:10:6e:22:2f:f7:d4:b7: eb:27:34:81:3a:5c:ee:d7:96:03:cd:69:3f:29:e0:5a:04:5c: 62:3d:ea:8f:1d:3a:de:be:9d:5a:01:a3:dd:82:bf:d9:00:0d: cc:47:8d:aa:37:6e:75:b5:d6:9b:4c:07:dc:37:a6:a3:be:4d: b8:6e:c3:a5:cb:db:d9:a9:91:d3:96:7f:23:aa:18:41:59:b0: 1c:1b:d8:60:60:38:e6:0a:a6:42:93:a3:ed:27:88:ce:9c:b1: 57:c4:10:59:c2:f2:fc:5f:61:d2:b2:b2:bc:94:1d:fd:bb:fe: 9a:6a:27:7a:4c:91:23:24:3c:ff:91:47:1a:10:92:bc:20:46: 13:80:25:d5:88:56:2b:dc:b4:e0:f5:d9:71:86:68:86:35:3e: b1:dd:47:b8:92:0a:cd:70:95:92:36:6c:0d:fa:86:ef:ef:60: f5:37:b7:3a:9f:37:6f:39:ed:09:88:25:bb:0c:6d:e1:68:42: a3:82:14:4a:8e:61:9a:0a:aa:83:18:5a:0a:02:f9:d1:a3:9d: df:ec:cf:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjQwNTA0MTc0MzUwWhcNMjQwNTExMTc0MzUwWjAYMRYwFAYD VQQDEw02NjM2NzNkNi1iM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+RaH6lx6cHDX9BWCv2J2Jrnv9n82FhfOIpYEttgavyGsZpMJyAD9dqD+DMk 1x7BCqwt5yv52FwI6PtAkRWHwxKbGRr2+yUOo0TE2OhZfWMs6DqigWAXqroPowhR kZLCUZifYUqXjZfbG7R1E7zQ2BNH7MipFfMvNxa8ph43G0CZFij2WinLTQCUQ0pE OW3XYSNQ4TTRYrfqGB9ZIgijYB9QK7xZ7QaJ1kMggQcmbaQERywst60gLStLsY0A 46+QSMqofOgfhSCR7ojVrQVRjBPM9yu1lXPLAb+MzNjZABwV6IzUbcdA4pd6iYdP qy8HPCW6vIdwOISLDWQRPJhG9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJLn70B ArmqZt1n8LT9TbdECajGMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJYJdEiznxZJbUqoe2RKTRpjF9N1VkpQXqhR0xSp07Jl7RFTapH2M7 LMK1PJ01gRBuIi/31LfrJzSBOlzu15YDzWk/KeBaBFxiPeqPHTrevp1aAaPdgr/Z AA3MR42qN251tdabTAfcN6ajvk24bsOly9vZqZHTln8jqhhBWbAcG9hgYDjmCqZC k6PtJ4jOnLFXxBBZwvL8X2HSsrK8lB39u/6aaid6TJEjJDz/kUcaEJK8IEYTgCXV iFYr3LTg9dlxhmiGNT6x3Ue4kgrNcJWSNmwN+obv72D1N7c6nzdvOe0JiCW7DG3h aEKjghRKjmGaCqqDGFoKAvnRo53f7M9r -----END CERTIFICATE-----Generated at Sat May 4 19:58:43 2024 by rpki-client on console-ams.rpki-client.org