$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: LQAiUyIibY4YlLzvZkNaxK7lV65BiIf0CGH018OUcpw= Subject key identifier: E5:30:72:AF:E0:0C:AA:48:16:C6:E5:4B:5D:66:BF:07:6E:FA:42:5F Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 43 Signing time: Fri 17 May 2024 08:13:15 +0000 Manifest this update: Fri 17 May 2024 08:13:15 +0000 Manifest next update: Fri 24 May 2024 08:13:15 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: YyeAWUdB8xNn58i8+EygKJchzL7hJV0/4hyk7ixqTyw=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: ZOEE2RA5l92lEDxXtfiZnC9k9xK97dZYYa226sWye0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: May 17 08:13:15 2024 GMT Not After : May 24 08:13:15 2024 GMT Subject: CN=6647119b-5357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:ee:35:f3:b7:f2:c0:d6:12:52:a6:23:5e: 2a:eb:18:fd:ab:ab:e3:b6:0f:f8:a0:3b:e3:80:43: e8:b4:67:a2:d5:34:cf:1d:6a:19:9e:7d:db:c6:3e: 56:be:08:0e:f1:9e:03:96:c0:92:f7:62:0a:45:44: a5:1a:67:2b:dd:d2:77:2b:85:62:59:bc:04:3c:c8: 70:49:65:8d:29:91:4a:03:1b:6f:03:7a:17:93:76: a8:e3:32:5d:30:ab:ef:1c:63:21:10:1a:dc:e5:d1: e1:b2:51:65:a9:29:fc:f3:6c:8f:89:5e:6d:bd:c6: d7:6c:0a:2d:14:57:7e:40:01:f2:c1:9f:22:5f:28: 5e:6e:a4:ae:19:c5:a3:ac:60:de:96:ad:43:2a:1f: 43:ca:1c:95:56:08:18:32:2e:66:31:7b:41:e0:11: 4e:c5:6f:ac:62:11:e6:3b:ed:0d:bf:2f:e8:73:96: 63:0e:14:d4:78:a3:1b:48:2d:f1:63:fe:d5:04:43: ab:82:d1:15:61:1d:ff:c6:86:2a:36:92:51:ae:fd: 50:6d:5e:6e:72:a5:35:a3:8a:14:64:56:43:bb:7d: 0c:0d:29:3f:03:68:f7:af:b7:c1:62:c8:c8:13:11: 3d:63:40:d6:fc:fd:11:a1:b3:3f:95:ba:16:43:3c: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:72:AF:E0:0C:AA:48:16:C6:E5:4B:5D:66:BF:07:6E:FA:42:5F X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5f:88:64:b3:2b:61:83:9b:bc:b3:f5:23:03:ae:a4:96:7a: 5a:b1:eb:56:39:ee:22:11:fc:12:5b:df:a9:fb:49:9f:4c:df: dd:70:23:e3:b3:77:1d:f5:28:36:fe:b4:ef:65:2a:f4:bb:61: 8c:92:76:37:78:e9:ba:04:5e:42:fc:48:b7:e6:70:52:d8:c6: 29:1a:78:a1:cf:40:a6:75:c4:cd:05:91:e6:06:d3:3e:10:81: de:9c:df:b8:2e:c6:81:49:17:0d:54:72:5e:38:fb:8a:57:fe: 0c:10:da:67:6e:e3:22:8b:dd:5e:96:e1:b5:c2:1b:d6:3f:f0: 42:58:48:eb:73:db:40:77:4d:62:39:7a:21:ae:82:96:62:35: 2d:fb:b5:2a:9a:7e:bb:70:6d:4a:9d:65:40:c5:ff:19:7b:31: 0f:fe:10:81:18:81:e0:f5:9f:d0:50:20:a6:38:43:a2:be:a9: 23:e0:c3:a2:fd:75:3c:0f:98:c2:64:4e:55:7a:ba:52:4f:52: 71:63:09:ed:98:52:63:cd:d1:c0:09:b4:4e:05:f2:2f:66:e3: 6d:5a:a4:22:55:78:50:10:da:c5:78:0b:20:1b:d6:f4:cb:c9: e4:66:2c:98:e2:64:cc:0d:cc:43:93:9b:34:c2:f8:21:b7:9f: 6d:82:64:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE2NzExMC8GA1UEBRMoMDM1NERCRTFFRDNEOTlFMTk0NUUyNzI3NEJBMkY2MDNF QjZBMTc4MTAeFw0yNDA1MTcwODEzMTVaFw0yNDA1MjQwODEzMTVaMBgxFjAUBgNV BAMTDTY2NDcxMTliLTUzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj6+4187fywNYSUqYjXirrGP2rq+O2D/igO+OAQ+i0Z6LVNM8dahmefdvGPla+ CA7xngOWwJL3YgpFRKUaZyvd0ncrhWJZvAQ8yHBJZY0pkUoDG28DeheTdqjjMl0w q+8cYyEQGtzl0eGyUWWpKfzzbI+JXm29xtdsCi0UV35AAfLBnyJfKF5upK4ZxaOs YN6WrUMqH0PKHJVWCBgyLmYxe0HgEU7Fb6xiEeY77Q2/L+hzlmMOFNR4oxtILfFj /tUEQ6uC0RVhHf/Ghio2klGu/VBtXm5ypTWjihRkVkO7fQwNKT8DaPevt8FiyMgT ET1jQNb8/RGhsz+VuhZDPCdBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5TByr+AM qkgWxuVLXWa/B276Ql8wHwYDVR0jBBgwFoAUA1Tb4e09meGUXicnS6L2A+tqF4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTY3LzU1MTFBRjY4QjM1 MTExRUU5OEJBMDIxREM0RjlBRTAyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTFUYjRlMDltZUdVWGljblM2TDJBLXRxRjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTY3LzU1MTFBRjY4QjM1MTExRUU5OEJBMDIxREM0RjlBRTAyL0ExVGI0ZTA5bWVH VVhpY25TNkwyQS10cUY0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJfiGSzK2GDm7yz9SMDrqSWelqx61Y57iIR/BJb36n7SZ9M391wI+Oz dx31KDb+tO9lKvS7YYySdjd46boEXkL8SLfmcFLYxikaeKHPQKZ1xM0FkeYG0z4Q gd6c37guxoFJFw1Ucl44+4pX/gwQ2mdu4yKL3V6W4bXCG9Y/8EJYSOtz20B3TWI5 eiGugpZiNS37tSqafrtwbUqdZUDF/xl7MQ/+EIEYgeD1n9BQIKY4Q6K+qSPgw6L9 dTwPmMJkTlV6ulJPUnFjCe2YUmPN0cAJtE4F8i9m421apCJVeFAQ2sV4CyAb1vTL yeRmLJjiZMwNzEOTmzTC+CG3n22CZMk= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org