$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: 5Z5zrfoJrZFOvpeoEy+13Ryq146XWIwsdwosIKZ2wZw= Subject key identifier: 29:29:AB:33:4F:A0:88:EC:16:AF:AB:87:C6:95:93:D1:B5:22:07:B3 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 10F8 Signing time: Tue 30 Apr 2024 18:03:07 +0000 Manifest this update: Tue 30 Apr 2024 18:03:06 +0000 Manifest next update: Tue 07 May 2024 18:03:06 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: cRrk2ppu6PRlnBZ5H06bz7v1i2dPtykkg2WUfMQzPf4=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: WdopqEhvTQ3vKYnwSSQrxk36f/vPLbjR5paNeXudr14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Apr 30 18:03:06 2024 GMT Not After : May 7 18:03:06 2024 GMT Subject: CN=6631325a-3eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:bd:4f:22:8e:fb:e5:87:de:6b:b6:db:75: b3:a4:04:9f:d7:d7:0e:73:89:98:c8:6b:25:67:76: 66:ee:a6:02:03:8d:6e:31:bd:35:3d:8e:97:3f:87: ce:82:c8:46:3e:46:27:71:18:27:33:b5:f9:31:5b: a6:69:92:ac:34:1a:05:30:f4:f4:ea:38:6d:bc:89: bf:79:25:60:78:90:00:54:b0:e4:ff:48:92:4e:73: be:0f:7a:53:f5:1a:b6:82:9d:12:76:14:d6:da:93: 48:01:7b:4e:ab:6b:67:4e:65:9a:69:55:83:55:fa: 0c:2a:4d:bb:c9:71:9e:e1:8d:f3:14:6b:15:75:7c: c8:da:30:2f:1d:6c:06:c7:25:20:00:f5:93:8b:a8: 8f:19:84:9d:12:c8:52:1d:a5:0a:bb:6d:67:e6:53: af:ba:09:8f:98:e5:2a:3e:5b:5d:7e:21:b6:ea:0b: 1e:d1:d8:8c:00:f0:43:38:78:a2:e1:70:12:d3:84: cf:af:fc:0e:d3:2a:4b:92:34:1f:a8:14:92:cb:3f: 89:00:76:74:c2:d5:a2:27:ef:e9:74:5d:7d:bc:2c: 62:ef:48:5b:cc:47:e8:77:58:5c:73:70:32:cf:01: b6:44:c1:7d:39:da:ff:af:9d:a0:92:d1:d5:d8:0d: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:AB:33:4F:A0:88:EC:16:AF:AB:87:C6:95:93:D1:B5:22:07:B3 X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0f:a6:7e:0d:3e:fa:01:67:0d:f5:be:1d:88:80:57:88:ca: 7b:21:74:e1:2d:32:a3:f0:eb:b0:c5:77:52:0b:d0:db:1c:20: 92:cb:9c:ba:55:6f:df:84:4b:44:b7:4a:51:fb:50:22:4c:80: 6b:4c:61:b1:cd:c1:be:ae:87:64:2e:ff:8d:9c:d9:d1:33:6d: d9:a6:39:ad:12:95:b9:60:b1:93:0e:40:3f:77:68:97:00:cc: 6b:aa:5c:ee:46:74:64:04:e2:59:d9:8c:67:f2:67:ec:c9:4a: 88:cb:a1:98:94:84:78:b7:e0:65:1e:08:07:69:09:4e:23:69: 14:c3:87:eb:29:31:5f:12:5e:bb:44:55:86:fe:20:2b:f9:5c: 86:0a:82:95:98:0f:bd:b3:de:69:8f:62:fb:77:d1:25:4e:28: 5e:a1:68:82:d2:7e:6d:c8:97:7a:5a:74:89:2e:1f:ee:54:19: 9f:07:12:3b:0c:15:02:b3:4a:ca:b9:1d:01:c4:8f:1a:3e:41: 65:d6:be:e4:d1:e6:7f:36:f2:e6:e7:fa:da:22:b5:c5:e5:5f: b9:87:7e:e9:29:d0:fb:af:f1:92:78:52:a4:28:88:5a:d8:68: ab:41:71:6b:fc:e7:78:b3:f9:0d:b5:ff:a1:56:e9:a9:8d:5c: 62:b5:be:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjQwNDMwMTgwMzA2WhcNMjQwNTA3MTgwMzA2WjAYMRYwFAYD VQQDEw02NjMxMzI1YS0zZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eC9TyKO++WH3mu223WzpASf19cOc4mYyGslZ3Zm7qYCA41uMb01PY6XP4fO gshGPkYncRgnM7X5MVumaZKsNBoFMPT06jhtvIm/eSVgeJAAVLDk/0iSTnO+D3pT 9Rq2gp0SdhTW2pNIAXtOq2tnTmWaaVWDVfoMKk27yXGe4Y3zFGsVdXzI2jAvHWwG xyUgAPWTi6iPGYSdEshSHaUKu21n5lOvugmPmOUqPltdfiG26gse0diMAPBDOHii 4XAS04TPr/wO0ypLkjQfqBSSyz+JAHZ0wtWiJ+/pdF19vCxi70hbzEfod1hcc3Ay zwG2RMF9Odr/r52gktHV2A1IUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkpqzNP oIjsFq+rh8aVk9G1IgezMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJD6Z+DT76AWcN9b4diIBXiMp7IXThLTKj8OuwxXdSC9DbHCCSy5y6 VW/fhEtEt0pR+1AiTIBrTGGxzcG+rodkLv+NnNnRM23ZpjmtEpW5YLGTDkA/d2iX AMxrqlzuRnRkBOJZ2Yxn8mfsyUqIy6GYlIR4t+BlHggHaQlOI2kUw4frKTFfEl67 RFWG/iAr+VyGCoKVmA+9s95pj2L7d9ElTiheoWiC0n5tyJd6WnSJLh/uVBmfBxI7 DBUCs0rKuR0BxI8aPkFl1r7k0eZ/NvLm5/raIrXF5V+5h37pKdD7r/GSeFKkKIha 2GirQXFr/Od4s/kNtf+hVumpjVxitb5H -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:41 2024 by rpki-client on console-fra.rpki-client.org