$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: 3VcEVvAkvzori5I7/A4rRAzqCwQ+fyihs4mbCjrDivU= Subject key identifier: 29:F8:43:CC:B6:B1:EC:83:44:22:34:EE:48:69:1C:16:F2:4E:45:EA Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: CF Signing time: Sun 19 May 2024 06:14:42 +0000 Manifest this update: Sun 19 May 2024 06:14:42 +0000 Manifest next update: Sun 26 May 2024 06:14:42 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: gpdD3zY+AeBmhf4/Yw/cYt5ZuW1KgDODZxLwoQcLSjY=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: BX3eFxEq9yeeBZjSPRYwxqXIGZjkAuVHkNY/0eO84s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: May 19 06:14:42 2024 GMT Not After : May 26 06:14:42 2024 GMT Subject: CN=664998d2-9075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:c8:f8:9b:b4:11:db:f2:e6:59:1e:bc:20: 62:eb:3f:5d:3e:3a:31:91:ec:c9:1f:e9:1b:e1:a9: 09:a8:22:c5:90:f6:86:9b:ce:63:85:22:05:44:8a: eb:19:eb:01:a1:f9:47:36:67:f9:3d:be:b3:06:9b: 20:f5:b8:bb:f8:6e:c3:65:57:c0:fd:04:30:6c:1b: ef:6f:62:76:b2:2a:24:47:e8:26:51:4a:b3:21:1d: d1:39:64:5d:b0:f1:3b:c3:fb:56:3b:73:f0:9f:2f: 56:fb:a4:9d:63:c6:1c:5d:a5:7b:8d:d8:31:d5:37: 8d:39:43:aa:d1:4f:24:59:c1:21:e7:e9:2f:52:06: 16:25:62:f6:81:8a:f7:46:ef:bd:8f:55:3b:69:2a: 51:5f:cc:40:68:ca:7e:18:03:de:73:dc:73:1d:ea: 81:41:2f:d6:48:2e:b2:88:9c:7c:ff:c7:8f:56:82: 8a:11:e3:84:e5:9b:ab:79:c7:cb:6c:58:af:f9:04: 5a:3b:91:af:e7:d1:03:36:d2:f1:3b:0d:34:2a:1c: 16:18:94:2e:39:8c:4d:20:f2:3f:6b:c8:1c:3a:2e: c0:d2:a2:e4:d1:f1:f1:e4:60:9a:a5:10:e5:10:1d: b2:23:dc:34:ed:34:2f:89:a9:c3:ff:f5:a4:48:cc: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F8:43:CC:B6:B1:EC:83:44:22:34:EE:48:69:1C:16:F2:4E:45:EA X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:9b:d5:dd:e6:cf:cc:8d:bf:5c:c8:eb:f3:2c:1a:5f:1f:4d: 0d:bb:56:4e:1f:ac:73:fc:45:fd:bf:85:b4:2e:8f:7c:e5:28: cd:81:99:14:93:cd:e9:6f:8c:a9:f1:6e:b2:66:03:a5:7c:a5: 5a:fa:ec:1f:da:68:81:ea:3f:77:83:5d:d4:e2:60:4b:67:b7: 66:83:f1:d2:01:82:f1:c4:12:90:4f:95:1a:84:3d:03:6f:95: 4e:1d:e3:1a:d8:81:6a:37:a4:2e:6c:83:14:22:6a:ff:62:cd: 84:3b:3b:ec:9d:34:dd:10:2f:63:7d:bc:49:87:f8:7e:69:53: 00:0e:81:ee:12:5e:9e:3b:1a:bf:36:fa:1c:d7:d9:75:20:41: 29:bb:cc:f2:6c:b6:a6:7a:c2:2f:81:b8:b6:62:c3:c7:6d:68: b7:64:c9:d2:80:4f:d8:50:59:e1:e9:19:fc:80:82:2f:a6:7b: 70:4d:3e:be:7a:40:91:dc:64:0f:a1:6e:1c:0d:9e:be:eb:dd: f4:0f:95:9a:10:7f:1f:8a:11:55:7e:d2:8b:5d:8f:6b:c1:70: 56:53:78:85:8c:9c:db:78:12:89:a4:6d:00:1f:28:c4:56:3a: 9e:33:49:62:62:b4:b5:28:3e:d5:ce:cb:15:5e:2c:d1:11:7d: da:a0:70:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjQwNTE5MDYxNDQyWhcNMjQwNTI2MDYxNDQyWjAYMRYwFAYD VQQDEw02NjQ5OThkMi05MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu3I+Ju0Edvy5lkevCBi6z9dPjoxkezJH+kb4akJqCLFkPaGm85jhSIFRIrr GesBoflHNmf5Pb6zBpsg9bi7+G7DZVfA/QQwbBvvb2J2siokR+gmUUqzIR3ROWRd sPE7w/tWO3Pwny9W+6SdY8YcXaV7jdgx1TeNOUOq0U8kWcEh5+kvUgYWJWL2gYr3 Ru+9j1U7aSpRX8xAaMp+GAPec9xzHeqBQS/WSC6yiJx8/8ePVoKKEeOE5ZurecfL bFiv+QRaO5Gv59EDNtLxOw00KhwWGJQuOYxNIPI/a8gcOi7A0qLk0fHx5GCapRDl EB2yI9w07TQvianD//WkSMx/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn4Q8y2 seyDRCI07khpHBbyTkXqMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRm9Xd5s/Mjb9cyOvzLBpfH00Nu1ZOH6xz/EX9v4W0Lo985SjNgZkU k83pb4yp8W6yZgOlfKVa+uwf2miB6j93g13U4mBLZ7dmg/HSAYLxxBKQT5UahD0D b5VOHeMa2IFqN6QubIMUImr/Ys2EOzvsnTTdEC9jfbxJh/h+aVMADoHuEl6eOxq/ Nvoc19l1IEEpu8zybLamesIvgbi2YsPHbWi3ZMnSgE/YUFnh6Rn8gIIvpntwTT6+ ekCR3GQPoW4cDZ6+6930D5WaEH8fihFVftKLXY9rwXBWU3iFjJzbeBKJpG0AHyjE VjqeM0liYrS1KD7VzssVXizREX3aoHB5 -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org