$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: 9XVUHHr1GIcJwQi5G9SvmH8NWBlc2/WOCLasRTYBW68= Subject key identifier: 91:7C:0F:EF:6C:0C:A9:42:73:78:B6:CC:CA:4A:23:AD:55:E0:BE:6E Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0960 Signing time: Fri 31 May 2024 22:03:12 +0000 Manifest this update: Fri 31 May 2024 22:03:11 +0000 Manifest next update: Fri 07 Jun 2024 22:03:11 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: vAbDAdOxzU6GlNKJGEZGnTe6hI+5xWYyat9B9hkPO5s=) 2: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: 9bnCggl0fvzfuGxXiZ3dUvooNgJDnt9ZmP/W7MKEPCY=) 3: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: hKx/w/S039humUk4iHQL5u0Z8G8XH5zp8Qok64O9/Es=) 4: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: imQI59DVhgLieNmEpbCajiVFxlcjtCyGh3DF40cezqI=) 5: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: u9pUuFckbA0lalpdZimCBaZQxyWHNXXozEpb+d8oil4=) 6: 553170245AC511EBA052F663C4F9AE02.roa (hash: QGnpgaIGy5AOir91I7lncP9FpImJiqaLPZ1wopdnD1I=) 7: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: QTFQxSGbHvXz5vkvFn+KK94bpSwxQ7fT3LT2GWe203M=) 8: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: oO02yNbnDa4fMcN9qWc6Kj7arsuZ0bSU/AyW3pIl50M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: May 31 22:03:11 2024 GMT Not After : Jun 7 22:03:11 2024 GMT Subject: CN=665a491f-976d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:91:f6:48:a9:1f:2d:79:6d:5e:f0:8b:20: f2:a6:5f:84:24:8d:e5:ab:3c:5b:77:27:e7:69:14: cd:a6:49:97:f3:b2:2f:ce:02:58:be:b7:ab:1b:50: 2d:93:5d:06:80:ec:8b:f4:74:59:c8:be:f2:0a:5c: e1:37:47:a1:ed:8b:44:b0:b0:52:42:65:f4:48:c4: 98:36:67:d1:39:fa:07:46:a7:66:de:44:2d:5c:37: 5d:69:70:b8:7f:03:55:11:fb:d8:73:42:ca:ef:89: 5a:66:49:bd:18:66:79:6b:1b:a3:94:80:a7:30:26: dc:3f:b0:b0:b2:4c:b3:36:50:45:de:47:5b:77:a9: 42:44:67:a7:94:5e:ad:ba:03:f6:72:93:66:65:e3: 49:2e:ba:c3:46:58:cd:cd:cb:43:01:1d:83:30:e9: 6c:97:29:99:df:bd:79:f1:02:fc:e5:78:de:c7:63: 25:39:6a:c6:7e:07:b7:08:49:e4:d8:b9:33:b3:48: 7d:00:0d:a9:02:ff:b0:4b:d6:0e:99:8f:7a:e4:63: cf:ce:01:8a:06:bc:71:7a:c5:9b:a7:5c:3b:02:ff: 08:51:81:3c:e6:d9:05:71:e5:f5:59:20:f7:ec:31: af:c6:b8:bb:aa:cc:34:45:a2:ea:1a:f5:4c:5f:84: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:0F:EF:6C:0C:A9:42:73:78:B6:CC:CA:4A:23:AD:55:E0:BE:6E X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:a0:33:f7:1f:da:ba:ac:9a:85:dc:51:48:b9:66:75:a6:74: 9f:93:44:67:24:08:1b:57:5d:6f:3e:8f:fb:3c:fb:3e:86:9f: 7e:e8:0d:69:82:b2:68:07:32:b5:01:38:5b:2e:9a:05:2c:4d: c0:99:bd:b0:3e:ae:11:9f:6d:22:0e:69:f1:0c:8b:cf:01:e6: 24:8b:fe:e7:8b:3c:e7:05:b5:92:8c:32:f8:d6:8f:b7:e3:4d: fb:72:49:3c:88:67:5b:4d:bb:c7:ed:17:ec:5e:63:ed:eb:a8: 28:6a:e8:4a:d3:34:b9:35:d2:c8:b5:b7:71:02:66:d2:df:b5: 6c:5e:41:59:e3:08:88:f5:e2:2a:51:a6:23:fa:4f:c0:d1:b8: fb:30:71:6a:7e:13:a9:e5:37:ad:36:38:0b:cf:b0:76:1f:10: c2:cb:52:23:fb:0c:33:59:6f:63:07:f3:db:b5:15:2d:34:cf: ab:9f:c4:54:58:93:4b:d4:23:30:34:94:02:cd:45:44:c5:d7: e8:18:e3:2c:a2:b2:57:85:03:22:a0:ad:1f:ca:10:ef:d7:2d: ed:d4:c8:ee:5d:a5:ec:40:e5:7c:f8:af:a2:0d:8b:48:6f:8d: 99:c6:b7:88:dc:c6:df:78:57:b6:90:8b:89:ff:f8:5f:01:96: 17:83:00:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjQwNTMxMjIwMzExWhcNMjQwNjA3MjIwMzExWjAYMRYwFAYD VQQDEw02NjVhNDkxZi05NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPOR9kipHy15bV7wiyDypl+EJI3lqzxbdyfnaRTNpkmX87IvzgJYvrerG1At k10GgOyL9HRZyL7yClzhN0eh7YtEsLBSQmX0SMSYNmfROfoHRqdm3kQtXDddaXC4 fwNVEfvYc0LK74laZkm9GGZ5axujlICnMCbcP7CwskyzNlBF3kdbd6lCRGenlF6t ugP2cpNmZeNJLrrDRljNzctDAR2DMOlslymZ37158QL85Xjex2MlOWrGfge3CEnk 2Lkzs0h9AA2pAv+wS9YOmY965GPPzgGKBrxxesWbp1w7Av8IUYE85tkFceX1WSD3 7DGvxri7qsw0RaLqGvVMX4RP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF8D+9s DKlCc3i2zMpKI61V4L5uMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIoDP3H9q6rJqF3FFIuWZ1pnSfk0RnJAgbV11vPo/7PPs+hp9+6A1p grJoBzK1AThbLpoFLE3Amb2wPq4Rn20iDmnxDIvPAeYki/7nizznBbWSjDL41o+3 4037ckk8iGdbTbvH7RfsXmPt66goauhK0zS5NdLItbdxAmbS37VsXkFZ4wiI9eIq UaYj+k/A0bj7MHFqfhOp5TetNjgLz7B2HxDCy1Ij+wwzWW9jB/PbtRUtNM+rn8RU WJNL1CMwNJQCzUVExdfoGOMsorJXhQMioK0fyhDv1y3t1MjuXaXsQOV8+K+iDYtI b42ZxreI3MbfeFe2kIuJ//hfAZYXgwAM -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org