$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: fPThhNekUiAmDcDrPNiFdodsUnQaL5DCHEZYWJGNxj8= Subject key identifier: 1B:7B:BD:2F:64:98:10:E9:63:38:63:A5:21:AB:CB:68:54:79:C7:25 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0AFA Signing time: Mon 20 May 2024 01:08:51 +0000 Manifest this update: Mon 20 May 2024 01:08:50 +0000 Manifest next update: Mon 27 May 2024 01:08:50 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: cfCFlLp1PqgIgdFjMrbIkL3NlgX0R+ksyxwThoGCLVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 01:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2810 (0xafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: May 20 01:08:50 2024 GMT Not After : May 27 01:08:50 2024 GMT Subject: CN=664aa2a2-b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:1e:16:74:5f:fa:5e:3d:05:51:a3:e8:9d: 1d:69:83:17:57:22:ac:0f:29:b1:1b:5c:53:0f:c9: 88:bc:7f:89:87:aa:aa:ad:d1:ba:1f:e9:31:0f:d6: a3:5d:31:5c:77:b8:51:da:c6:2f:d9:59:03:1b:61: 21:ad:a5:0f:22:2a:dd:fb:ac:f2:91:8c:d5:72:7b: 1d:b4:4d:4b:2b:21:0d:cb:23:06:d5:8f:4d:25:c2: d5:50:68:ba:a5:b1:e6:5e:07:02:a3:b6:fa:c8:ef: 5c:ff:da:89:77:64:56:af:7f:92:f4:3a:c2:2b:08: c9:95:dc:50:bd:eb:e8:ed:eb:de:3c:f8:97:7f:4a: 41:b8:6d:a4:06:18:02:a5:a1:70:32:56:0b:0f:fa: 4a:bc:e6:da:2e:c8:77:36:ca:70:0f:a9:75:3b:fe: da:86:bc:10:8d:99:e2:42:8d:10:91:52:3d:86:88: bf:6a:e9:a7:4a:a7:40:14:6f:a0:00:49:f7:ba:48: 9f:63:65:0a:b8:2d:ba:b4:8d:0a:4e:40:a9:c2:91: 05:9e:0e:59:59:a0:39:7f:4a:8c:83:63:27:0a:e2: 0b:c8:8c:4a:d5:be:77:33:57:45:26:d5:b2:8d:ce: 4b:d2:bd:8a:f0:37:19:07:62:9c:68:b6:f2:ee:82: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:BD:2F:64:98:10:E9:63:38:63:A5:21:AB:CB:68:54:79:C7:25 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4e:7e:a7:6e:24:24:d8:0c:a3:ad:e5:08:7c:41:93:b5:42: c5:3a:c3:23:f4:f1:0e:b5:42:51:34:a5:48:82:4b:35:c6:48: 06:1e:96:78:61:db:e9:87:28:92:d0:80:7a:2e:4c:e7:45:85: 97:6a:72:02:58:63:b6:41:9c:9b:c3:5f:dc:22:2c:3d:b7:90: 72:d3:ec:30:ec:a6:5e:c0:4e:2e:9f:e8:fd:ea:fa:81:53:bf: 16:bc:a0:9f:0c:94:4a:c9:94:73:f0:82:52:41:c6:80:b9:ac: 72:c8:52:0e:9b:30:9e:d4:8f:11:b2:91:10:b6:8d:f3:0e:89: 0f:da:af:78:f2:3d:ca:11:4b:37:48:a9:d3:6c:48:22:6e:6e: 89:14:19:2e:82:bb:e5:0c:74:29:16:b1:ad:20:48:f1:4e:0c: 5b:a8:72:6d:79:d2:93:0c:17:65:1d:16:7a:58:78:de:34:76: fb:12:ff:d5:c2:b2:ba:f5:f7:84:87:38:5a:d0:8d:ee:f3:43: d6:2c:1a:b2:1f:bd:86:d4:3e:0a:e7:79:e3:40:ab:62:2a:57: dc:3a:b6:03:36:3c:83:ac:d0:13:b2:95:b8:a1:a3:a1:42:8f: 9b:4d:e2:2b:b7:2f:e7:49:5f:92:3f:9e:72:32:18:31:5c:b6: 40:c1:f7:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjQwNTIwMDEwODUwWhcNMjQwNTI3MDEwODUwWjAYMRYwFAYD VQQDEw02NjRhYTJhMi1iOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TAeFnRf+l49BVGj6J0daYMXVyKsDymxG1xTD8mIvH+Jh6qqrdG6H+kxD9aj XTFcd7hR2sYv2VkDG2EhraUPIird+6zykYzVcnsdtE1LKyENyyMG1Y9NJcLVUGi6 pbHmXgcCo7b6yO9c/9qJd2RWr3+S9DrCKwjJldxQvevo7evePPiXf0pBuG2kBhgC paFwMlYLD/pKvObaLsh3NspwD6l1O/7ahrwQjZniQo0QkVI9hoi/aumnSqdAFG+g AEn3ukifY2UKuC26tI0KTkCpwpEFng5ZWaA5f0qMg2MnCuILyIxK1b53M1dFJtWy jc5L0r2K8DcZB2KcaLby7oIZQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt7vS9k mBDpYzhjpSGry2hUecclMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Tn6nbiQk2AyjreUIfEGTtULFOsMj9PEOtUJRNKVIgks1xkgGHpZ4 YdvphyiS0IB6LkznRYWXanICWGO2QZybw1/cIiw9t5By0+ww7KZewE4un+j96vqB U78WvKCfDJRKyZRz8IJSQcaAuaxyyFIOmzCe1I8RspEQto3zDokP2q948j3KEUs3 SKnTbEgibm6JFBkugrvlDHQpFrGtIEjxTgxbqHJtedKTDBdlHRZ6WHjeNHb7Ev/V wrK69feEhzha0I3u80PWLBqyH72G1D4K53njQKtiKlfcOrYDNjyDrNATspW4oaOh Qo+bTeIrty/nSV+SP55yMhgxXLZAwff7 -----END CERTIFICATE-----Generated at Mon May 20 01:40:48 2024 by rpki-client on console-fra.rpki-client.org