$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: TFJun707iiHGOb+Pzpyg5Vs8rsTTCvIdEWNqfTiDa1c= Subject key identifier: 4B:5D:C0:EA:0C:21:5C:46:BA:A7:E5:F9:64:42:7F:D2:BF:4D:45:32 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 085F Signing time: Sat 18 May 2024 21:41:49 +0000 Manifest this update: Sat 18 May 2024 21:41:49 +0000 Manifest next update: Sat 25 May 2024 21:41:49 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: 3mYCIz2cHB2MzIkS4dky3gPiwkpHadAIxtPJfbaA72s=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: 9pM/SrMxIFEUbNEKruw9n+KIf/9j0euHGvBK52mAQY8=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: EIkDjvD6OdJF56nVBhQ0vcLS9lmzaIPhojjmsWvvLU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: May 18 21:41:49 2024 GMT Not After : May 25 21:41:49 2024 GMT Subject: CN=6649209d-34bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:25:43:b6:6e:82:f4:6a:be:8e:8f:e1:f6: 8e:34:b8:ed:11:4e:2c:36:ae:fb:11:e1:c9:39:16: 44:79:80:d9:65:77:1c:fc:fc:1f:52:fa:e5:d3:ba: 7d:16:1d:c7:ff:54:79:39:8b:6f:60:8d:ca:88:7b: 92:1b:a0:c2:cd:6a:de:30:3f:23:42:f6:b5:ad:5d: 53:01:87:f1:c3:81:ce:9a:cb:de:54:9e:02:8c:5e: a8:01:a4:54:14:45:fa:8d:36:34:77:41:35:6d:80: 1c:4c:90:06:ac:c5:8a:0e:cf:9d:7e:27:4c:33:0c: 58:8d:94:30:e3:e4:39:09:3a:d1:29:f8:c1:e7:1b: 43:1c:27:97:77:a0:35:3b:dc:f0:36:d9:3a:7e:fb: 26:c9:85:c6:86:25:63:86:cd:aa:26:4f:85:56:67: ce:65:55:55:33:f3:69:a6:63:bf:48:52:60:be:14: e2:9d:aa:04:1d:8f:09:ed:ce:f4:82:75:d6:b5:75: 0e:d3:3b:be:34:af:7e:9c:a7:dc:03:55:ff:a3:5c: 0e:83:b2:50:d1:46:13:9d:2b:e9:2c:1b:b6:85:16: 0b:16:e0:15:02:ce:cd:62:57:a1:2b:31:ae:5c:7f: 28:20:d2:dd:e0:4d:56:ad:63:ef:23:59:7b:cf:3a: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:C0:EA:0C:21:5C:46:BA:A7:E5:F9:64:42:7F:D2:BF:4D:45:32 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f1:f7:68:71:bb:59:19:b2:83:3e:dc:f4:3a:59:cd:9b:05: f2:77:d3:06:15:f4:6d:91:9a:37:4d:d5:47:10:30:8f:d9:a4: 69:55:e7:0a:10:b5:1d:83:90:66:f0:3e:eb:ea:3d:df:82:c1: 4f:b8:61:33:f5:4d:e6:23:4d:30:78:8e:ac:0b:36:75:d2:16: 70:d5:ff:f4:79:e5:84:c9:9f:5f:46:d5:d9:e1:09:4e:cd:2f: ee:28:76:5e:f1:1b:50:ff:60:00:ca:1c:04:fd:9c:b1:fe:40: 35:35:ee:40:04:9c:07:80:a3:d7:fc:1f:30:bb:4d:7e:bc:62: c5:32:18:95:39:6c:3e:1c:8c:b8:76:b0:24:a9:bd:b4:22:33: 43:80:2e:85:e8:84:bc:e8:08:61:d8:dc:a9:75:7a:ea:73:c0: 5b:05:22:94:85:33:a6:bf:7c:cc:09:5b:e5:21:02:b5:24:de: 0e:54:40:0f:6b:af:63:8e:24:4e:b6:0c:61:7f:b4:d5:19:4d: d8:51:a3:8e:73:0a:d6:33:40:94:18:d3:10:99:46:ee:64:44: c1:c4:7c:03:55:1f:f6:39:38:e0:08:7b:40:3e:4d:ae:21:f2: 91:6a:6c:3b:1d:46:74:40:f6:40:1c:28:a5:05:4c:bc:35:00: c3:95:65:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjQwNTE4MjE0MTQ5WhcNMjQwNTI1MjE0MTQ5WjAYMRYwFAYD VQQDEw02NjQ5MjA5ZC0zNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2wlQ7ZugvRqvo6P4faONLjtEU4sNq77EeHJORZEeYDZZXcc/PwfUvrl07p9 Fh3H/1R5OYtvYI3KiHuSG6DCzWreMD8jQva1rV1TAYfxw4HOmsveVJ4CjF6oAaRU FEX6jTY0d0E1bYAcTJAGrMWKDs+dfidMMwxYjZQw4+Q5CTrRKfjB5xtDHCeXd6A1 O9zwNtk6fvsmyYXGhiVjhs2qJk+FVmfOZVVVM/NppmO/SFJgvhTinaoEHY8J7c70 gnXWtXUO0zu+NK9+nKfcA1X/o1wOg7JQ0UYTnSvpLBu2hRYLFuAVAs7NYlehKzGu XH8oINLd4E1WrWPvI1l7zzp3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtdwOoM IVxGuqfl+WRCf9K/TUUyMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR8fdocbtZGbKDPtz0OlnNmwXyd9MGFfRtkZo3TdVHEDCP2aRpVecK ELUdg5Bm8D7r6j3fgsFPuGEz9U3mI00weI6sCzZ10hZw1f/0eeWEyZ9fRtXZ4QlO zS/uKHZe8RtQ/2AAyhwE/Zyx/kA1Ne5ABJwHgKPX/B8wu01+vGLFMhiVOWw+HIy4 drAkqb20IjNDgC6F6IS86Ahh2NypdXrqc8BbBSKUhTOmv3zMCVvlIQK1JN4OVEAP a69jjiROtgxhf7TVGU3YUaOOcwrWM0CUGNMQmUbuZETBxHwDVR/2OTjgCHtAPk2u IfKRamw7HUZ0QPZAHCilBUy8NQDDlWV3 -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org