$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: KsQU7VHDp3QtPJyJe9TSK9pfQlnKzNDRb0LB+Amg7KM= Subject key identifier: 85:EB:1A:94:17:3C:A9:42:D9:A7:6E:58:A1:A1:66:47:83:19:43:43 Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 0734 Signing time: Sat 18 May 2024 22:26:45 +0000 Manifest this update: Sat 18 May 2024 22:26:44 +0000 Manifest next update: Sat 25 May 2024 22:26:44 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: QROzNl+MuWKufdDIRSjdlycUOPq/eSBUwCzJ30psPRU=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: WP0Cxklh3HNdj+FSDjyYK8dBUxC8tFYElxiXLoTsDfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: May 18 22:26:44 2024 GMT Not After : May 25 22:26:44 2024 GMT Subject: CN=66492b25-181f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:85:3d:4e:19:cd:db:63:2c:0d:27:21:b3: 83:74:62:b2:86:3e:93:2a:5d:88:89:47:48:98:77: 7d:b8:01:28:50:f9:8b:aa:ad:7b:d9:86:1f:59:fa: 58:84:8a:9d:db:c2:d6:4d:71:85:b9:2e:2f:1b:d3: 25:2c:24:8f:ae:c1:b5:e3:23:aa:d3:9e:2a:fe:d3: c8:a9:7d:e6:a2:b5:58:4e:b6:51:db:ea:d3:ed:2f: e2:6d:14:38:33:36:e6:c2:15:d5:ac:18:e6:57:85: ea:d7:13:cb:39:71:69:56:18:b2:0f:cb:5c:0a:7f: 84:90:27:0a:a8:64:fa:12:5f:c7:91:01:12:ff:d8: ca:b0:7c:c9:23:7b:33:26:70:e2:07:82:36:59:85: 85:32:30:af:87:41:69:e0:ca:b2:5c:83:b3:11:98: 60:dd:5b:57:c6:05:89:e0:59:a9:e5:65:b1:46:5e: 70:c4:96:b7:7e:1e:3b:99:2e:27:ea:83:ce:c6:90: 0e:23:c0:41:7f:a7:59:94:41:ba:45:79:23:8a:d3: 60:8d:e7:d2:c7:11:34:29:c9:39:d2:56:68:b9:a8: 35:0d:6a:61:4f:31:4c:47:65:e3:3a:82:96:8b:e8: 96:e4:46:1e:c1:28:e4:da:64:96:42:dd:df:4e:e9: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:1A:94:17:3C:A9:42:D9:A7:6E:58:A1:A1:66:47:83:19:43:43 X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ea:ec:0d:5e:53:fa:c5:0c:92:66:a8:b8:c5:45:3f:01:b6: cd:ff:1f:00:85:ab:75:1f:63:84:9a:78:8b:b8:e4:d6:e4:6b: 52:51:5e:40:e1:54:9c:5f:9a:2d:73:03:ed:3d:5d:34:22:07: e8:55:41:69:e1:dd:c3:1c:77:f1:81:51:55:7b:a9:5c:53:da: 02:30:e0:a5:86:68:a6:7f:b9:70:d3:6a:0a:0d:d4:4c:13:93: 26:ef:da:c0:fd:68:ff:a7:fc:b4:86:42:a4:f6:ff:03:e5:1a: 4d:27:e2:98:4e:69:16:fa:d1:51:16:5b:a6:3d:73:a0:84:86: dc:82:f0:b2:e7:1a:c3:f0:73:4c:90:66:12:f0:30:bb:ba:db: c6:5a:60:d6:f5:b2:35:60:94:7f:a8:6d:50:7a:7a:0e:c9:9b: 59:e8:c7:a0:d9:d4:67:14:de:35:6d:4f:1b:7a:5e:ac:d3:79: 36:45:a0:08:30:f0:93:8e:7c:a1:e3:0d:87:12:6c:17:e7:fd: 2f:52:21:5d:60:3f:13:c6:bc:8f:85:c0:de:b1:7c:0f:ef:7d: 2b:f7:df:fa:99:b3:2e:8d:98:ba:0d:dc:fb:66:a8:3d:44:68: 8e:34:09:fc:ba:72:c7:cb:ad:69:a0:05:4c:e9:e7:8e:6c:62: e2:4b:b6:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjQwNTE4MjIyNjQ0WhcNMjQwNTI1MjIyNjQ0WjAYMRYwFAYD VQQDEw02NjQ5MmIyNS0xODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cuFPU4ZzdtjLA0nIbODdGKyhj6TKl2IiUdImHd9uAEoUPmLqq172YYfWfpY hIqd28LWTXGFuS4vG9MlLCSPrsG14yOq054q/tPIqX3morVYTrZR2+rT7S/ibRQ4 MzbmwhXVrBjmV4Xq1xPLOXFpVhiyD8tcCn+EkCcKqGT6El/HkQES/9jKsHzJI3sz JnDiB4I2WYWFMjCvh0Fp4MqyXIOzEZhg3VtXxgWJ4Fmp5WWxRl5wxJa3fh47mS4n 6oPOxpAOI8BBf6dZlEG6RXkjitNgjefSxxE0Kck50lZouag1DWphTzFMR2XjOoKW i+iW5EYewSjk2mSWQt3fTukeswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXrGpQX PKlC2aduWKGhZkeDGUNDMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu6uwNXlP6xQySZqi4xUU/AbbN/x8Ahat1H2OEmniLuOTW5GtSUV5A 4VScX5otcwPtPV00IgfoVUFp4d3DHHfxgVFVe6lcU9oCMOClhmimf7lw02oKDdRM E5Mm79rA/Wj/p/y0hkKk9v8D5RpNJ+KYTmkW+tFRFlumPXOghIbcgvCy5xrD8HNM kGYS8DC7utvGWmDW9bI1YJR/qG1QenoOyZtZ6Meg2dRnFN41bU8bel6s03k2RaAI MPCTjnyh4w2HEmwX5/0vUiFdYD8TxryPhcDesXwP730r99/6mbMujZi6Ddz7Zqg9 RGiONAn8unLHy61poAVM6eeObGLiS7ZG -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org