$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: liuQ6fOaamznqdLXFtvBqGFW5dzuvp1gQhvOvouJ8pk= Subject key identifier: 93:9F:A8:B9:A3:46:AB:7D:CA:57:6F:3C:C6:CF:24:1F:D9:71:1F:E5 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 33BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 33BC Signing time: Sat 04 May 2024 15:32:24 +0000 Manifest this update: Sat 04 May 2024 15:32:23 +0000 Manifest next update: Sat 11 May 2024 15:32:23 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: 1zhvFhWk2QGA6STZSa8sgrFu99iG7nJI5LFb1DcG+3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13244 (0x33bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: May 4 15:32:23 2024 GMT Not After : May 11 15:32:23 2024 GMT Subject: CN=66365507-3839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:4b:f3:f1:b8:b2:ee:b3:5a:42:49:87:37: 29:da:95:15:9d:05:26:90:b6:2b:e5:20:9c:f9:dd: 31:cd:f1:01:78:b1:d5:f7:53:dc:06:62:27:2d:f2: bb:15:b4:89:f0:1c:bc:58:b5:2d:35:2f:28:09:81: 7b:82:43:56:c8:14:3b:ed:37:99:b0:9d:b2:d1:93: 93:99:d3:be:df:c8:8d:b9:6e:74:d3:35:34:e1:94: 4a:e2:e1:71:67:6a:96:0f:bb:87:a7:83:c4:56:46: 13:4e:3f:60:6b:60:3e:4d:34:eb:7a:ed:6d:f3:cb: 66:d9:f3:f5:c8:bb:88:eb:16:1b:66:14:a7:db:e2: 24:9d:19:66:c0:ad:1f:da:2d:6f:3b:f6:e4:42:e1: bc:48:e4:7b:8b:04:c3:45:79:f2:3e:71:48:51:59: e4:40:1e:b5:29:46:91:84:79:3a:28:a9:77:d6:98: 17:6d:c8:5e:d1:1b:b0:73:05:e3:8d:2e:87:ec:19: ae:81:41:e7:9f:e1:de:cb:af:12:cc:57:6b:17:b4: 03:82:5c:ce:0d:c7:b4:e3:91:46:07:27:fa:49:11: 48:ec:e2:d9:36:f0:0d:50:0e:b6:c2:9e:b1:25:a3: 80:e7:1a:eb:d1:89:43:6c:40:01:a2:85:9f:02:60: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9F:A8:B9:A3:46:AB:7D:CA:57:6F:3C:C6:CF:24:1F:D9:71:1F:E5 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:b5:96:fe:a9:4e:f4:77:37:c9:95:0d:eb:90:2f:56:ce: b9:3b:27:c9:75:0a:4b:0b:c6:4a:05:26:b0:4e:b9:21:57:19: f6:8c:24:12:0f:67:3d:12:09:5c:5f:ad:87:39:76:d1:a6:e3: 7f:68:ef:98:45:44:c0:32:44:f6:f2:50:5c:85:5c:be:ec:46: 7e:ec:bc:f8:6a:44:b6:6b:4d:b3:9a:89:b4:fd:2e:7c:2c:a0: fa:21:15:de:eb:e0:b2:2d:46:94:f7:3d:4b:12:1b:54:7d:ad: bf:c1:b6:ab:a9:0a:68:fe:b6:a0:59:5f:1e:32:58:04:7f:ce: f9:06:7a:6c:a8:0e:f7:0c:c5:3c:27:0a:04:e9:62:33:9d:3d: 53:b8:1c:28:1c:64:ca:2e:aa:19:b7:3b:11:d8:c5:20:6d:35: d1:bc:ac:a8:79:ac:05:e0:50:42:8e:f5:35:2f:f8:05:8a:c8: a7:0c:8e:76:37:ca:c4:d7:a4:8d:f0:03:a5:ca:38:ad:01:98: 2b:36:c7:1b:66:0e:70:78:29:17:31:f7:12:7d:44:7c:f9:a6: b6:e3:dd:38:0e:ae:ad:cf:9d:f1:6e:d3:0e:73:1d:83:25:83: 2b:54:89:ce:da:2c:0a:1c:cf:2c:05:0e:40:ec:f6:42:73:d4: 9b:6c:15:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjQwNTA0MTUzMjIzWhcNMjQwNTExMTUzMjIzWjAYMRYwFAYD VQQDEw02NjM2NTUwNy0zODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYdL8/G4su6zWkJJhzcp2pUVnQUmkLYr5SCc+d0xzfEBeLHV91PcBmInLfK7 FbSJ8By8WLUtNS8oCYF7gkNWyBQ77TeZsJ2y0ZOTmdO+38iNuW500zU04ZRK4uFx Z2qWD7uHp4PEVkYTTj9ga2A+TTTreu1t88tm2fP1yLuI6xYbZhSn2+IknRlmwK0f 2i1vO/bkQuG8SOR7iwTDRXnyPnFIUVnkQB61KUaRhHk6KKl31pgXbche0RuwcwXj jS6H7BmugUHnn+Hey68SzFdrF7QDglzODce045FGByf6SRFI7OLZNvANUA62wp6x JaOA5xrr0YlDbEABooWfAmDBlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOfqLmj Rqt9yldvPMbPJB/ZcR/lMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVX7WW/qlO9Hc3yZUN65AvVs65OyfJdQpLC8ZKBSawTrkhVxn2jCQS D2c9EglcX62HOXbRpuN/aO+YRUTAMkT28lBchVy+7EZ+7Lz4akS2a02zmom0/S58 LKD6IRXe6+CyLUaU9z1LEhtUfa2/wbarqQpo/ragWV8eMlgEf875BnpsqA73DMU8 JwoE6WIznT1TuBwoHGTKLqoZtzsR2MUgbTXRvKyoeawF4FBCjvU1L/gFisinDI52 N8rE16SN8AOlyjitAZgrNscbZg5weCkXMfcSfUR8+aa24904Dq6tz53xbtMOcx2D JYMrVInO2iwKHM8sBQ5A7PZCc9SbbBXC -----END CERTIFICATE-----Generated at Sat May 4 16:34:32 2024 by rpki-client on console-fra.rpki-client.org