$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft (raw, json) Hash identifier: IZLVoEI6ad5FhdVhKkrBfE3PhgC+x3kys2+mL/0m8Ow= Subject key identifier: FB:2D:89:A1:3B:A5:64:6B:79:C7:96:5E:35:BA:5C:C9:42:CD:74:E5 Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft Manifest number: 7E Signing time: Sun 19 May 2024 07:32:08 +0000 Manifest this update: Sun 19 May 2024 07:32:08 +0000 Manifest next update: Sun 26 May 2024 07:32:08 +0000 Files and hashes: 1: QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl (hash: PXlTTJTD5nuajk5utnTywVcS9pe5IWzw+oanfA/N23E=) 2: B184AEA47E7111EEB869AD1AC4F9AE02.roa (hash: LmJGmq2Ayop0EkwRwHAPkTavbUyr6FvfHRyacUH4ESs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Validity Not Before: May 19 07:32:08 2024 GMT Not After : May 26 07:32:08 2024 GMT Subject: CN=6649aaf8-24a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:4d:3c:c3:42:42:ab:27:cb:7b:b0:92:d3: 35:85:68:16:31:f3:2b:7b:1b:92:cd:30:36:72:12: e2:13:97:2c:4c:1e:e9:c3:59:bc:8e:19:dc:04:df: 14:ab:d3:16:10:b7:6d:ea:46:37:c7:f0:5a:89:57: 97:3b:2e:2f:01:44:80:c1:c8:a2:47:bc:a7:6a:a4: 6a:a2:de:c5:55:8d:10:f2:35:6b:53:e0:6f:8f:5b: 15:50:49:57:b4:e6:11:65:f4:56:bb:b2:a6:2c:1f: 3e:b8:e5:02:d3:b7:b2:a4:c7:53:13:8a:b2:e4:f2: bf:97:05:a3:a2:a6:25:78:5a:21:93:6a:1c:41:ea: a5:ba:75:9c:7e:fa:dc:9a:12:7f:d3:18:b6:7e:04: 5f:9e:b7:ee:e2:d7:f0:53:ce:a1:7f:2a:7e:58:e6: e0:3f:46:b4:03:63:c9:e0:24:cf:16:eb:30:b1:c2: ec:9b:4a:52:9b:cc:86:39:4c:c8:af:a3:f2:fc:70: 4b:fd:78:16:ea:8d:53:7f:d4:c7:06:20:7b:d1:9b: 5c:6b:74:6d:08:b3:b5:7a:15:39:a6:24:d2:fe:9d: a3:01:5d:19:97:80:ef:c8:e7:b3:a7:ba:15:61:d9: 2d:d6:9d:b8:00:8a:4e:1d:3a:09:b5:86:ec:8f:fe: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:89:A1:3B:A5:64:6B:79:C7:96:5E:35:BA:5C:C9:42:CD:74:E5 X509v3 Authority Key Identifier: keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:9b:16:34:e4:cd:17:8c:66:5c:65:d7:80:4c:a3:7c:d5: f2:51:9e:8f:5e:e1:6b:85:0d:40:21:49:47:93:a5:4f:ae:7e: 51:ea:af:5d:d5:d5:34:30:94:c7:2a:4e:e6:3d:c9:46:1f:27: ed:f3:db:6f:e0:d7:e1:a2:1c:e8:a2:07:42:8d:4d:8a:89:13: 4f:f8:01:47:42:a5:45:10:49:48:03:a9:0b:77:7d:91:59:69: 14:43:c0:c9:0b:5b:81:ce:fb:fe:fd:e3:50:3f:26:1e:5c:f0: f5:ec:bf:1a:7d:7c:2e:4d:19:2b:bb:59:f7:8b:5f:0e:4e:42: 29:b9:b4:56:25:56:a0:f6:f1:c5:bd:d9:77:df:ae:14:fd:7f: 20:72:dd:8b:87:f9:42:13:32:84:5e:ea:49:1a:45:f2:93:07: 47:a0:76:be:7a:1e:44:18:96:70:45:60:7b:e3:08:40:9b:81: de:43:f1:68:7f:84:1d:e4:64:1e:7a:d6:3e:51:25:ed:d6:67: 23:be:7e:8c:3a:fe:27:07:69:a2:68:44:18:35:98:0b:aa:39: e9:44:bc:be:d1:04:a9:fb:89:00:09:e5:a7:20:46:20:0c:bf: ec:62:67:56:52:a1:c4:1b:8b:c0:a8:0a:e5:2a:8d:0c:2a:03: d5:93:4a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5 NURBQjM0RTEwHhcNMjQwNTE5MDczMjA4WhcNMjQwNTI2MDczMjA4WjAYMRYwFAYD VQQDEw02NjQ5YWFmOC0yNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+JNPMNCQqsny3uwktM1hWgWMfMrexuSzTA2chLiE5csTB7pw1m8jhncBN8U q9MWELdt6kY3x/BaiVeXOy4vAUSAwciiR7ynaqRqot7FVY0Q8jVrU+Bvj1sVUElX tOYRZfRWu7KmLB8+uOUC07eypMdTE4qy5PK/lwWjoqYleFohk2ocQeqlunWcfvrc mhJ/0xi2fgRfnrfu4tfwU86hfyp+WObgP0a0A2PJ4CTPFuswscLsm0pSm8yGOUzI r6Py/HBL/XgW6o1Tf9THBiB70Ztca3RtCLO1ehU5piTS/p2jAV0Zl4DvyOezp7oV Ydkt1p24AIpOHToJtYbsj/6y/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPstiaE7 pWRreceWXjW6XMlCzXTlMB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUIxNy81OTY2REQyNjcyQTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9I MS13UXRwOGw2ZTZWMnJOT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjZsWNOTNF4xmXGXXgEyjfNXyUZ6PXuFrhQ1AIUlHk6VPrn5R6q9d 1dU0MJTHKk7mPclGHyft89tv4NfhohzoogdCjU2KiRNP+AFHQqVFEElIA6kLd32R WWkUQ8DJC1uBzvv+/eNQPyYeXPD17L8afXwuTRkru1n3i18OTkIpubRWJVag9vHF vdl3364U/X8gct2Lh/lCEzKEXupJGkXykwdHoHa+eh5EGJZwRWB74whAm4HeQ/Fo f4Qd5GQeetY+USXt1mcjvn6MOv4nB2miaEQYNZgLqjnpRLy+0QSp+4kACeWnIEYg DL/sYmdWUqHEG4vAqArlKo0MKgPVk0oW -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org