$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: 5sK09+nIG043Zz9y3fSOYADAFcvhqaqGaYNSch8irRM= Subject key identifier: F8:DE:70:CC:13:82:1E:2D:A7:F4:0C:30:D8:7D:C2:01:0A:0D:30:70 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 33BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 33BA Signing time: Mon 06 May 2024 15:13:09 +0000 Manifest this update: Mon 06 May 2024 15:13:08 +0000 Manifest next update: Mon 13 May 2024 15:13:08 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: uFCr/4Z5TX/l5MStbRpEAn5KYRH0JIcNN2DRWSHDx9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13242 (0x33ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: May 6 15:13:08 2024 GMT Not After : May 13 15:13:08 2024 GMT Subject: CN=6638f385-4993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:5c:6d:0a:bf:d1:26:11:9a:00:e2:6b:4b: fe:23:a4:4c:4f:1b:eb:12:d5:67:e6:08:e9:5d:18: 85:36:51:3a:de:28:e2:2e:b8:13:ca:d2:8f:b8:e4: ea:d6:74:09:1a:96:82:3e:46:c4:73:13:2a:1d:b3: d4:fb:f3:57:ff:ed:61:c3:a0:16:80:ec:58:1b:d6: f9:65:09:38:d4:e5:11:3e:56:f0:e8:07:7f:9c:a6: f7:4a:93:12:ad:2e:9c:05:75:e2:45:ef:90:d2:df: 23:ec:87:92:52:01:b3:43:11:90:33:ab:58:9f:8f: 31:23:e4:0b:6b:37:a5:84:c9:e4:d7:de:11:c9:64: a8:68:bb:2c:a9:a7:66:36:08:77:4e:2d:cb:cb:b3: f1:87:bf:c1:77:7e:c5:23:69:94:c5:60:9d:cf:c1: a7:12:56:7e:1d:1a:b2:3f:39:d2:ba:3a:da:9f:ff: d1:98:88:5a:ec:f1:a5:47:51:c0:0d:eb:3a:aa:00: dd:18:59:e3:fc:a6:8d:26:01:54:cf:45:af:92:93: bf:8c:dc:5f:e2:08:e3:82:f5:18:3d:18:d9:b5:d9: ea:bc:3e:1f:99:cf:95:c6:40:48:2a:60:fc:e3:74: c5:26:75:40:0d:e8:ab:8b:83:78:d9:d2:ad:d5:4b: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DE:70:CC:13:82:1E:2D:A7:F4:0C:30:D8:7D:C2:01:0A:0D:30:70 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4b:5c:7d:96:97:0d:22:a5:59:17:df:d6:f3:4b:50:c3:3f: 9d:15:eb:ca:8f:b3:16:a1:66:f3:a9:e1:3e:14:f0:88:d8:6a: ad:f2:a3:8d:c0:92:9b:f6:26:55:b5:8e:e7:75:47:6d:7c:63: 8e:51:da:2d:19:c9:5c:ed:84:2b:eb:dd:77:71:39:1f:5a:b4: 9b:bd:3a:0d:3a:ec:c3:05:a5:ee:dc:fe:28:4f:42:6e:c9:ab: 4c:07:01:1a:94:8c:0c:24:40:80:1f:96:1d:84:1a:4d:b1:63: 24:d1:f5:53:b7:19:3f:dd:48:a5:07:fd:1d:5c:d4:3b:df:09: ee:68:26:a7:d6:33:cd:64:1c:06:96:36:cb:da:88:da:54:4c: eb:d4:de:89:5a:9f:8c:cb:8e:1c:7a:f0:11:0c:73:8e:fc:94: a6:05:bc:36:f7:82:9d:3e:29:88:24:a7:9d:d2:1c:b6:9a:3c: b7:f5:b7:36:49:cc:22:9c:72:f7:e4:2c:73:61:e9:46:45:1b: 00:1d:6c:0d:e3:fc:52:92:48:b1:f8:6b:17:58:a9:45:18:b2: 62:59:dd:34:24:e2:0e:d0:bb:0e:f2:13:87:2a:0f:85:0f:95: 90:f4:81:4d:2d:6f:0a:c3:50:8a:2e:51:4b:92:57:8d:ec:14: fc:02:c1:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjQwNTA2MTUxMzA4WhcNMjQwNTEzMTUxMzA4WjAYMRYwFAYD VQQDEw02NjM4ZjM4NS00OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3lcbQq/0SYRmgDia0v+I6RMTxvrEtVn5gjpXRiFNlE63ijiLrgTytKPuOTq 1nQJGpaCPkbEcxMqHbPU+/NX/+1hw6AWgOxYG9b5ZQk41OURPlbw6Ad/nKb3SpMS rS6cBXXiRe+Q0t8j7IeSUgGzQxGQM6tYn48xI+QLazelhMnk194RyWSoaLssqadm Ngh3Ti3Ly7Pxh7/Bd37FI2mUxWCdz8GnElZ+HRqyPznSujran//RmIha7PGlR1HA Des6qgDdGFnj/KaNJgFUz0WvkpO/jNxf4gjjgvUYPRjZtdnqvD4fmc+VxkBIKmD8 43TFJnVADeiri4N42dKt1UslmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjecMwT gh4tp/QMMNh9wgEKDTBwMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeS1x9lpcNIqVZF9/W80tQwz+dFevKj7MWoWbzqeE+FPCI2Gqt8qON wJKb9iZVtY7ndUdtfGOOUdotGclc7YQr6913cTkfWrSbvToNOuzDBaXu3P4oT0Ju yatMBwEalIwMJECAH5YdhBpNsWMk0fVTtxk/3UilB/0dXNQ73wnuaCan1jPNZBwG ljbL2ojaVEzr1N6JWp+My44cevARDHOO/JSmBbw294KdPimIJKed0hy2mjy39bc2 ScwinHL35CxzYelGRRsAHWwN4/xSkkix+GsXWKlFGLJiWd00JOIO0LsO8hOHKg+F D5WQ9IFNLW8Kw1CKLlFLkleN7BT8AsHR -----END CERTIFICATE-----Generated at Mon May 6 17:43:27 2024 by rpki-client on console-ams.rpki-client.org