$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json) Hash identifier: OtS433Sn+PeCwM9M/DXNWsuzgN5qe1SwjgBSe+7ICF4= Subject key identifier: E4:29:49:D9:03:80:6B:96:92:C7:60:0F:97:5B:C6:BD:2B:6C:5E:DE Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft Manifest number: 67 Signing time: Fri 17 May 2024 07:43:40 +0000 Manifest this update: Fri 17 May 2024 07:43:40 +0000 Manifest next update: Fri 24 May 2024 07:43:40 +0000 Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: tm1M0Sk5V1xfdFOy5eQLec3tD3Q9Ddbx5tmaCj2akhg=) 2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: 3T8n7XFrrCjc9ierjYTs1Q2T8wlu+fKt96UZROhsq48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Validity Not Before: May 17 07:43:40 2024 GMT Not After : May 24 07:43:40 2024 GMT Subject: CN=66470aac-20f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:98:31:85:f4:0e:97:4f:74:cd:f1:ff:bd: 10:6e:1d:09:84:20:83:c9:27:92:b0:67:19:b1:bc: 09:fd:7b:f5:4c:b5:76:59:bd:ac:04:b8:1b:6a:71: e6:b0:e4:60:bf:1d:76:9e:dc:51:c3:07:3b:89:59: f3:9f:a4:1c:49:f3:dd:87:3a:f4:97:f4:5f:a2:c5: c3:26:20:94:4f:4f:c6:34:f9:b1:7a:de:f9:eb:2d: 9c:33:7a:1a:aa:e7:40:0a:98:60:4b:1b:fc:98:1c: 87:1f:0c:23:67:64:21:c3:f1:5a:9e:ac:55:1e:3a: 64:e1:75:59:25:a3:3b:8a:2b:ac:7f:1c:01:1e:a2: 55:15:81:61:6d:1d:c7:72:69:29:fe:50:c8:92:1e: 16:6c:09:8f:40:6c:68:f7:62:c5:00:9a:4e:94:ec: d0:8e:23:3c:09:eb:3e:3e:50:a3:fe:58:af:7b:d8: a1:5e:5b:9f:ff:15:a8:ed:ce:d6:1e:d0:f5:e7:c0: b9:9b:47:16:b0:1e:ee:c6:4b:9e:a2:fb:dc:00:61: 0b:af:11:61:7f:e3:47:b0:d2:f6:e0:03:95:81:f9: 96:b0:4a:06:55:6e:e3:3e:ad:6b:92:a8:ce:a7:fb: 1a:d1:99:ae:bb:01:9f:53:b4:42:0a:22:29:4f:18: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:49:D9:03:80:6B:96:92:C7:60:0F:97:5B:C6:BD:2B:6C:5E:DE X509v3 Authority Key Identifier: keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b3:ab:66:f4:cb:0f:b4:38:8f:ce:e5:44:9f:de:b4:93:e8: 75:cf:97:cf:6d:e3:2e:dd:ce:d3:b0:23:55:9b:31:9b:52:8d: dd:1b:d3:c2:39:93:be:4c:b1:4e:e7:68:22:33:aa:5b:a4:9e: 63:32:34:07:ef:3e:c0:a6:93:e0:a0:49:cd:88:0b:3b:85:77: 17:6a:f8:04:20:9f:09:60:ce:5e:48:6f:11:cf:ce:d8:78:d0: 2f:26:19:71:3d:5f:5c:ec:c9:fa:62:e1:4f:4d:3a:a6:65:08: e7:3b:10:9a:dd:65:7d:60:dc:ee:8b:09:ac:5a:01:ab:e6:fc: b0:fd:cd:d3:85:37:ef:ff:13:b7:68:e9:6b:0a:2c:92:83:a3: ee:41:67:55:40:0e:2c:2f:fc:2f:5b:0e:ea:88:69:fe:bb:8d: 71:f0:b7:40:47:1f:3b:81:89:ea:48:14:96:93:c1:19:29:c6: f0:7c:1f:f8:dd:01:ed:cc:c4:6e:29:79:cf:7f:04:75:27:fd: 89:e7:f3:cd:74:e8:1f:2e:85:c2:64:64:02:e8:06:d0:21:a5: 2e:47:0d:75:44:72:c4:3b:b6:03:73:19:7f:a5:f9:42:5b:80: a5:58:ee:a5:0c:3c:f1:fc:9f:26:66:48:e2:b7:3e:c1:52:a9: a5:62:01:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjkxNjExMC8GA1UEBRMoRDUwRDExODM3MzA4QUIxRjE1QTc1RjM1MTY0M0ZCN0ZD MDE0ODU0QzAeFw0yNDA1MTcwNzQzNDBaFw0yNDA1MjQwNzQzNDBaMBgxFjAUBgNV BAMTDTY2NDcwYWFjLTIwZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKN5gxhfQOl090zfH/vRBuHQmEIIPJJ5KwZxmxvAn9e/VMtXZZvawEuBtqceaw 5GC/HXae3FHDBzuJWfOfpBxJ892HOvSX9F+ixcMmIJRPT8Y0+bF63vnrLZwzehqq 50AKmGBLG/yYHIcfDCNnZCHD8VqerFUeOmThdVklozuKK6x/HAEeolUVgWFtHcdy aSn+UMiSHhZsCY9AbGj3YsUAmk6U7NCOIzwJ6z4+UKP+WK972KFeW5//FajtztYe 0PXnwLmbRxawHu7GS56i+9wAYQuvEWF/40ew0vbgA5WB+ZawSgZVbuM+rWuSqM6n +xrRma67AZ9TtEIKIilPGLSLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5ClJ2QOA a5aSx2APl1vGvStsXt4wHwYDVR0jBBgwFoAU1Q0Rg3MIqx8Vp181FkP7f8AUhUww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCOTE2Lzc0RUMzOTdFN0Qz RDExRUU5QUY3MzkxQUM0RjlBRTAyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhV dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVEwUmczTUlxeDhWcDE4MUZrUDdmOEFVaFV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC OTE2Lzc0RUMzOTdFN0QzRDExRUU5QUY3MzkxQUM0RjlBRTAyLzFRMFJnM01JcXg4 VnAxODFGa1A3ZjhBVWhVdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKezq2b0yw+0OI/O5USf3rST6HXPl89t4y7dztOwI1WbMZtSjd0b08I5 k75MsU7naCIzqluknmMyNAfvPsCmk+CgSc2ICzuFdxdq+AQgnwlgzl5IbxHPzth4 0C8mGXE9X1zsyfpi4U9NOqZlCOc7EJrdZX1g3O6LCaxaAavm/LD9zdOFN+//E7do 6WsKLJKDo+5BZ1VADiwv/C9bDuqIaf67jXHwt0BHHzuBiepIFJaTwRkpxvB8H/jd Ae3MxG4pec9/BHUn/Ynn88106B8uhcJkZALoBtAhpS5HDXVEcsQ7tgNzGX+l+UJb gKVY7qUMPPH8nyZmSOK3PsFSqaViARQ= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org