$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: GhtDVSB0AO8yDDQvvAueiTFpS+gSaRrvC2wf4Uukz2Q= Subject key identifier: DB:A7:EC:68:DD:12:00:87:97:8E:AC:C7:4F:4D:95:81:03:A7:36:F7 Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0852 Signing time: Fri 31 May 2024 22:30:21 +0000 Manifest this update: Fri 31 May 2024 22:30:21 +0000 Manifest next update: Fri 07 Jun 2024 22:30:21 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: R42MUfoEjhsBm8995wNu0x2SYI0bSBSsZ9SViDyRVjw=) 2: D360357CE66B11EE914F865EC4F9AE02.roa (hash: 1JUqfa05MJsmEQMLJBHeRuxt4OjqJOiC52UPWlzvjPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: May 31 22:30:21 2024 GMT Not After : Jun 7 22:30:21 2024 GMT Subject: CN=665a4f7d-37e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:33:d9:74:08:49:f9:f2:5b:67:d1:73:55: 5c:08:9e:c3:bc:db:0f:79:29:1f:08:65:a2:9c:dc: 8a:b5:b7:fa:bb:dc:05:19:e5:bb:f8:9f:86:dd:0f: b9:0d:06:11:dd:2a:d8:5e:a7:c6:98:f3:eb:05:64: 59:3b:ca:1d:6e:64:ed:b3:7a:16:e6:f7:b8:8e:f8: 8a:20:54:0f:a5:64:25:f8:ea:d2:c4:f2:c2:01:63: 30:bb:5d:50:3c:7e:96:35:c0:92:70:13:fb:40:5d: 8e:72:21:cb:f5:d8:30:35:f0:6b:3a:2a:d3:a5:8e: b6:1b:6a:d2:4e:81:75:4b:d2:ad:73:e7:e2:89:79: 25:95:cb:27:e0:67:50:50:be:65:cf:bd:ac:34:14: 8c:e0:fe:31:76:18:50:6e:f4:77:9a:32:ae:40:ec: a4:5e:ff:34:5e:c2:a4:02:10:d8:d1:6e:b7:5c:14: 81:5a:9b:0d:ae:34:5d:bb:1f:ed:fc:68:77:b5:de: c4:69:ed:94:d1:c3:a0:ee:91:74:63:40:21:7a:f1: bf:bd:3a:02:74:97:bc:b1:82:64:bb:59:f3:ae:41: 50:18:93:94:5b:76:b6:25:00:8d:b2:3a:03:cf:9a: 2b:00:c8:53:91:b3:51:a1:54:6e:15:88:b9:3d:c8: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:EC:68:DD:12:00:87:97:8E:AC:C7:4F:4D:95:81:03:A7:36:F7 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d7:b8:d3:9b:7c:a5:64:fb:b3:31:db:07:c5:b0:2b:5b:3c: 0e:f6:87:89:6a:78:df:87:b3:a3:82:ac:3a:0a:2f:88:e9:1d: 8e:53:d4:af:51:37:88:0b:ba:47:a3:66:eb:b6:18:d7:9f:58: 8e:dd:13:3b:19:80:c0:5c:4c:60:e0:31:93:ef:d8:a1:e6:6f: d4:3f:59:27:9c:ce:a4:d0:3c:a9:e8:e3:c8:fb:0c:0a:90:1f: 98:e4:ec:52:ac:f5:7e:b5:59:7b:37:69:01:cf:63:10:49:8b: 4f:dd:20:d4:5a:e9:d9:1d:e8:64:5e:c8:57:ec:21:fe:af:47: 97:5b:1c:b0:0c:06:19:bc:8d:07:ad:50:7d:2b:e3:b2:58:71: 51:17:07:7d:ce:2f:85:2b:69:e3:11:8f:0b:57:c5:d4:bf:e7: 85:97:ba:4a:55:ec:07:86:74:d9:b6:3f:93:6f:af:f4:25:fe: 54:87:74:f4:56:6c:cf:08:cd:b5:8e:32:25:98:9a:eb:20:c8: 9e:8d:e5:08:2f:ee:ad:ad:19:9e:54:63:28:9b:c3:27:4e:7d: af:82:bb:55:b3:d8:20:5b:1c:eb:7b:c1:3b:a1:41:2f:db:a8: bc:ac:80:2b:fc:cf:52:31:9e:8f:90:35:64:2d:cf:51:e6:cf: d4:54:62:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjQwNTMxMjIzMDIxWhcNMjQwNjA3MjIzMDIxWjAYMRYwFAYD VQQDEw02NjVhNGY3ZC0zN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntYz2XQISfnyW2fRc1VcCJ7DvNsPeSkfCGWinNyKtbf6u9wFGeW7+J+G3Q+5 DQYR3SrYXqfGmPPrBWRZO8odbmTts3oW5ve4jviKIFQPpWQl+OrSxPLCAWMwu11Q PH6WNcCScBP7QF2OciHL9dgwNfBrOirTpY62G2rSToF1S9Ktc+fiiXkllcsn4GdQ UL5lz72sNBSM4P4xdhhQbvR3mjKuQOykXv80XsKkAhDY0W63XBSBWpsNrjRdux/t /Gh3td7Eae2U0cOg7pF0Y0AhevG/vToCdJe8sYJku1nzrkFQGJOUW3a2JQCNsjoD z5orAMhTkbNRoVRuFYi5PcghFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNun7Gjd EgCHl46sx09NlYEDpzb3MB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl17jTm3ylZPuzMdsHxbArWzwO9oeJanjfh7Ojgqw6Ci+I6R2OU9Sv UTeIC7pHo2brthjXn1iO3RM7GYDAXExg4DGT79ih5m/UP1knnM6k0Dyp6OPI+wwK kB+Y5OxSrPV+tVl7N2kBz2MQSYtP3SDUWunZHehkXshX7CH+r0eXWxywDAYZvI0H rVB9K+OyWHFRFwd9zi+FK2njEY8LV8XUv+eFl7pKVewHhnTZtj+Tb6/0Jf5Uh3T0 VmzPCM21jjIlmJrrIMiejeUIL+6trRmeVGMom8MnTn2vgrtVs9ggWxzre8E7oUEv 26i8rIAr/M9SMZ6PkDVkLc9R5s/UVGJu -----END CERTIFICATE-----Generated at Fri May 31 22:56:56 2024 by rpki-client on console-fra.rpki-client.org