$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: MX0f5m+3Zjod4G4qltJBBU90Y8nxET3cyF42O9N+SfA= Subject key identifier: 79:01:7D:C2:9A:71:9E:A5:F0:29:80:BA:FC:5D:D6:27:5F:47:22:2D Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 9B Signing time: Fri 17 May 2024 06:58:07 +0000 Manifest this update: Fri 17 May 2024 06:58:06 +0000 Manifest next update: Fri 24 May 2024 06:58:06 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: 2Ke+OW6TaR6Oh8xMnd6a0LZQqdP/qsdVUXlhljd9PR4=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: cAWcl90qX5LgvbTQqYzXpZ/JrQ2ME6XuMgDUMfAGsq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: May 17 06:58:06 2024 GMT Not After : May 24 06:58:06 2024 GMT Subject: CN=6646fffe-ab80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:fa:73:43:e0:7d:79:5d:d9:68:38:47:76: d5:14:8b:d0:ee:3d:f7:9f:2c:3d:1c:a1:e6:d4:1b: b1:97:51:11:83:52:9b:bd:66:3c:7e:53:55:06:50: 41:e0:ff:e2:fb:4d:bf:a7:4f:e9:84:44:29:83:c6: 37:23:86:ba:09:2b:72:11:40:2d:21:3b:f7:44:88: c6:53:16:de:e3:56:c5:1d:ec:10:06:94:3a:3f:88: 83:2a:e7:54:ae:a7:7d:3f:58:92:de:03:d5:74:5a: 51:b4:3d:c9:43:65:d2:61:ca:28:95:3c:ef:65:9b: 90:9c:a4:44:f6:8d:4f:74:7e:fe:d9:52:eb:67:e8: 68:83:3a:08:74:79:78:01:d0:e6:d0:0d:c8:e0:8b: 25:58:6b:3b:0e:89:a1:f2:d9:39:ad:dd:43:17:48: d0:24:5b:47:e3:53:ea:06:d7:0b:96:d3:1a:b3:30: 84:95:42:f6:7e:3f:83:ce:b6:1b:98:ef:11:ff:21: 6e:c4:aa:12:c4:a6:09:76:ae:7c:b8:f8:0f:1c:da: ea:f3:95:40:1f:f4:24:fc:07:87:ab:25:a2:51:a2: 98:e8:c9:9c:9e:73:e7:21:5b:5f:e4:d8:2a:d4:c9: dc:6a:98:e6:34:2c:0a:17:63:13:c4:53:4a:0e:87: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:01:7D:C2:9A:71:9E:A5:F0:29:80:BA:FC:5D:D6:27:5F:47:22:2D X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:37:c2:d3:17:ad:94:d6:ca:a6:f3:9d:ab:fe:ab:77:a1:d8: 08:d8:60:4e:75:3c:18:e9:9c:3e:bd:60:bf:71:d9:69:6e:76: df:fa:d0:7a:7c:7b:f9:5e:ad:b1:48:aa:e6:46:ce:47:50:f7: 46:39:5f:91:bb:e6:7d:7e:94:de:6f:70:62:e7:8d:4c:d9:f9: 55:38:9b:d4:d9:ce:74:62:51:d8:40:a1:8d:86:7a:ae:8c:70: 40:9a:ca:80:d6:af:d2:40:46:c4:e0:3b:00:59:07:68:db:c7: 33:c9:07:db:3f:8e:6d:b4:48:83:6b:f6:d2:fd:37:2c:00:b9: 81:91:2f:11:82:8d:09:80:41:92:d9:79:3d:d4:ae:64:d4:84: fb:4c:93:28:1e:60:a8:6e:88:af:2b:72:f3:1c:18:42:15:9d: 4b:21:cc:19:a2:5e:1c:23:f9:43:c8:d0:a4:dd:0f:72:94:3c: b3:79:fc:1c:69:86:2e:a8:e1:cb:4e:de:55:e7:f4:30:7d:d0: c7:a8:92:83:b7:bf:f7:44:e6:86:7f:9d:0f:a9:1f:16:ac:7d: 98:bd:82:8c:f0:79:b3:38:54:9d:a8:67:5d:3c:70:d2:c5:d9: 91:c0:55:9f:1c:e8:68:34:4a:cf:92:32:f3:29:f0:d8:9c:09: 7c:a1:21:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjQwNTE3MDY1ODA2WhcNMjQwNTI0MDY1ODA2WjAYMRYwFAYD VQQDEw02NjQ2ZmZmZS1hYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvn6c0PgfXld2Wg4R3bVFIvQ7j33nyw9HKHm1Buxl1ERg1KbvWY8flNVBlBB 4P/i+02/p0/phEQpg8Y3I4a6CStyEUAtITv3RIjGUxbe41bFHewQBpQ6P4iDKudU rqd9P1iS3gPVdFpRtD3JQ2XSYcoolTzvZZuQnKRE9o1PdH7+2VLrZ+hogzoIdHl4 AdDm0A3I4IslWGs7Domh8tk5rd1DF0jQJFtH41PqBtcLltMaszCElUL2fj+DzrYb mO8R/yFuxKoSxKYJdq58uPgPHNrq85VAH/Qk/AeHqyWiUaKY6MmcnnPnIVtf5Ngq 1MncapjmNCwKF2MTxFNKDoe/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkBfcKa cZ6l8CmAuvxd1idfRyItMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuN8LTF62U1sqm852r/qt3odgI2GBOdTwY6Zw+vWC/cdlpbnbf+tB6 fHv5Xq2xSKrmRs5HUPdGOV+Ru+Z9fpTeb3Bi541M2flVOJvU2c50YlHYQKGNhnqu jHBAmsqA1q/SQEbE4DsAWQdo28czyQfbP45ttEiDa/bS/TcsALmBkS8Rgo0JgEGS 2Xk91K5k1IT7TJMoHmCoboivK3LzHBhCFZ1LIcwZol4cI/lDyNCk3Q9ylDyzefwc aYYuqOHLTt5V5/QwfdDHqJKDt7/3ROaGf50PqR8WrH2YvYKM8HmzOFSdqGddPHDS xdmRwFWfHOhoNErPkjLzKfDYnAl8oSFL -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org