$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: UwJMLjZ3Es+ARqs69zvsoffE7wDKu785sbn/e2JkQdQ= Subject key identifier: 50:EF:B6:A3:E9:9F:84:16:C4:81:3C:DF:09:E6:4C:5B:1A:E3:3E:CC Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 44 Signing time: Fri 17 May 2024 08:09:18 +0000 Manifest this update: Fri 17 May 2024 08:09:18 +0000 Manifest next update: Fri 24 May 2024 08:09:18 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: g1hHANhv6XAVmqL8QvRyv6Kxlan+q6iQi7mwPQKwQOE=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: FUQ7hkmGES0QN9UAf6f/LO11kYNy/Xsa2qRfJOg9mdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: May 17 08:09:18 2024 GMT Not After : May 24 08:09:18 2024 GMT Subject: CN=664710ae-373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:10:5e:14:1d:88:ec:e4:fd:1a:88:3e:cc: 0e:85:f0:56:c4:34:0c:8e:93:14:3f:19:7f:cf:dd: bd:22:f4:95:58:5c:3c:d6:bc:a1:bc:e2:09:68:73: 76:02:b4:9f:98:96:a4:05:02:06:92:0c:36:91:b6: e8:9a:d1:c5:08:ae:a4:14:77:30:0d:88:f6:92:68: 2a:fe:97:22:44:85:23:fd:c1:7a:06:b2:79:f1:0e: 1b:b4:8b:ab:69:b8:21:8f:8e:f6:06:2a:57:3c:99: 69:06:1a:ff:d6:61:f6:36:36:7c:59:bd:a9:2f:27: ae:68:bd:dc:53:c9:91:cb:d3:ea:d6:96:f1:c2:41: 30:2d:f5:09:a9:4f:ca:02:e3:84:24:86:3d:df:70: 57:2c:10:64:3c:e6:e0:4b:d9:d4:a7:5b:26:7b:3e: 35:5f:d0:e9:9e:83:16:ca:95:72:40:4b:e1:c3:d6: cd:74:86:f1:96:c3:3d:ac:b9:a3:cb:5c:8b:c2:ea: d2:2b:d4:e4:a1:77:8a:7c:6e:cd:01:30:64:f1:4c: cc:bf:62:8b:c8:e2:0a:cf:2e:3c:e3:27:37:99:b8: 0b:08:e6:47:70:9d:f3:0e:0f:83:bd:74:34:c5:0e: 0a:e9:5a:1f:67:95:5d:9f:90:69:2e:d8:93:70:cc: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EF:B6:A3:E9:9F:84:16:C4:81:3C:DF:09:E6:4C:5B:1A:E3:3E:CC X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:91:b0:3d:fe:8d:57:e9:1d:bd:d1:bf:f6:00:86:2a:bc:46: 53:41:9e:24:f2:1e:38:7b:02:e1:d8:47:19:fa:16:ba:eb:e6: 94:27:8b:53:12:88:a5:27:32:3f:db:a6:46:66:67:ac:0b:74: e0:f7:36:7f:98:52:35:64:9a:de:b5:b0:0e:5b:c2:5d:64:72: 6b:cb:c2:c2:6a:53:73:d3:a1:df:8b:cf:5d:64:5e:05:21:7e: 5f:b1:fc:ba:50:eb:04:43:72:6a:a6:a4:b8:5a:0f:89:9c:b2: 98:3e:87:9c:b0:b1:50:82:75:bc:b5:53:de:ea:6c:59:23:f4: 55:95:2c:0f:4e:1e:d7:82:92:cd:bb:da:b1:7e:40:b2:e1:6f: 80:97:c6:18:37:9d:55:16:ff:2c:e3:99:8a:8e:86:0c:b5:4c: ec:bc:d9:57:66:95:86:6d:a5:36:2a:ae:1a:bb:ff:8c:f0:47: 77:d8:c0:87:7a:04:79:7e:90:db:06:96:9a:f6:60:c4:f1:b2: fd:c0:2f:af:4f:0d:8c:30:b9:fa:94:05:7c:4e:2b:a3:2f:fc: bf:42:7c:9c:33:aa:90:c0:e6:05:1a:be:da:f4:cc:8b:a5:e4: b2:59:62:83:c8:7d:b0:20:ba:e9:0d:c9:0d:81:22:da:d5:31: 0e:4e:2c:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUQzMDExMC8GA1UEBRMoMEFBNzE2RUE4MUNDQzVEQjVFNEJBNzIxMTRDMzQyOUEx OUQ2RDk1RjAeFw0yNDA1MTcwODA5MThaFw0yNDA1MjQwODA5MThaMBgxFjAUBgNV BAMTDTY2NDcxMGFlLTM3M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42RBeFB2I7OT9Gog+zA6F8FbENAyOkxQ/GX/P3b0i9JVYXDzWvKG84gloc3YC tJ+YlqQFAgaSDDaRtuia0cUIrqQUdzANiPaSaCr+lyJEhSP9wXoGsnnxDhu0i6tp uCGPjvYGKlc8mWkGGv/WYfY2NnxZvakvJ65ovdxTyZHL0+rWlvHCQTAt9QmpT8oC 44Qkhj3fcFcsEGQ85uBL2dSnWyZ7PjVf0OmegxbKlXJAS+HD1s10hvGWwz2suaPL XIvC6tIr1OShd4p8bs0BMGTxTMy/YovI4grPLjzjJzeZuAsI5kdwnfMOD4O9dDTF DgrpWh9nlV2fkGku2JNwzHCtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUO+2o+mf hBbEgTzfCeZMWxrjPswwHwYDVR0jBBgwFoAUCqcW6oHMxdteS6chFMNCmhnW2V8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRDMwL0M3NzQ1NUMwQUUx RTExRUVBN0VBMEE3N0M0RjlBRTAyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3FjVzZvSE14ZHRlUzZjaEZNTkNtaG5XMlY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RDMwL0M3NzQ1NUMwQUUxRTExRUVBN0VBMEE3N0M0RjlBRTAyL0NxY1c2b0hNeGR0 ZVM2Y2hGTU5DbWhuVzJWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmRsD3+jVfpHb3Rv/YAhiq8RlNBniTyHjh7AuHYRxn6Frrr5pQni1MS iKUnMj/bpkZmZ6wLdOD3Nn+YUjVkmt61sA5bwl1kcmvLwsJqU3PTod+Lz11kXgUh fl+x/LpQ6wRDcmqmpLhaD4mcspg+h5ywsVCCdby1U97qbFkj9FWVLA9OHteCks27 2rF+QLLhb4CXxhg3nVUW/yzjmYqOhgy1TOy82VdmlYZtpTYqrhq7/4zwR3fYwId6 BHl+kNsGlpr2YMTxsv3AL69PDYwwufqUBXxOK6Mv/L9CfJwzqpDA5gUavtr0zIul 5LJZYoPIfbAguukNyQ2BItrVMQ5OLK8= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org