$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: Xf6A4fVkp4osMJB2fK5zqgyOZkZtpvXLJnXAc5P3yi4= Subject key identifier: 50:AE:6D:35:AC:2B:05:A5:E6:55:A2:25:92:90:E0:CC:A5:29:65:2F Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: E1 Signing time: Sun 19 May 2024 06:12:55 +0000 Manifest this update: Sun 19 May 2024 06:12:55 +0000 Manifest next update: Sun 26 May 2024 06:12:55 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: PEmK/Wtxuzc/LV69Ad57Ab5e9b5unNRKDoDYrGO7sQY=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: 6j7w9+hGUOPNXXB5FjLRh9dRH3zCAl46bVFBtFbG7eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: May 19 06:12:55 2024 GMT Not After : May 26 06:12:55 2024 GMT Subject: CN=66499867-c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:e3:fa:ac:60:22:d4:39:ca:79:c4:db:8f: 8c:c6:24:37:c1:72:11:dc:03:28:ad:5c:e7:60:c8: e4:78:3c:ca:e3:d7:46:63:e5:9d:ff:33:4e:d2:96: 5d:70:24:fa:33:e7:9b:c7:b1:72:a5:d2:1c:71:7f: c6:d0:ee:f0:4b:4b:20:1e:04:64:99:13:93:63:52: ea:16:70:2e:42:53:c2:19:e3:eb:f1:6a:7f:a5:9e: bd:5c:4f:6d:af:53:75:f3:94:5d:f8:0f:fd:09:e5: 6a:b5:8b:7c:d2:08:ad:77:96:ed:47:b0:5b:8c:ff: d3:06:45:f3:63:e4:83:09:e4:5a:f6:d4:14:8a:36: cf:c8:08:3f:5f:d4:8d:a6:8e:78:3c:14:5b:87:90: d0:72:30:d6:34:14:72:da:72:46:e4:08:73:59:c9: 93:90:07:30:28:52:3b:31:95:5d:02:5a:28:68:e9: 41:f7:50:8e:72:a7:68:54:de:93:86:bd:6d:d9:59: 83:11:7b:da:e7:c0:75:74:a0:a8:23:16:be:1e:65: c6:11:cf:0c:e0:26:72:65:8f:31:cd:37:fb:f3:83: cf:80:f4:b6:ca:f4:f5:a6:e4:40:86:0b:08:0d:21: 81:53:1b:7e:23:77:cd:9b:a7:df:5d:a2:dd:67:0c: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AE:6D:35:AC:2B:05:A5:E6:55:A2:25:92:90:E0:CC:A5:29:65:2F X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:37:f7:be:45:be:f0:d8:f2:04:0d:0d:b1:3a:4b:94:a7:c8: 0c:1b:e7:d4:69:88:37:c8:e3:a3:d3:b7:b3:43:37:40:82:48: ee:09:4d:be:1d:a8:84:29:91:5d:71:b9:20:b5:5c:74:00:67: a7:1a:b6:27:29:66:28:a7:eb:e2:fb:6b:50:0a:54:7d:d6:72: 43:9d:5f:85:24:a9:4a:07:27:4c:33:95:d3:78:6c:03:9d:4b: 50:eb:8a:0a:76:18:66:16:e3:46:c6:06:39:47:30:74:03:41: 70:c1:ce:8a:df:95:58:59:4e:07:51:0d:23:68:4b:f7:6f:41: ee:0f:b2:6b:22:e8:42:b4:0c:ce:22:db:cf:07:55:ce:33:85: ec:7d:30:bc:6c:0c:29:8d:8d:c8:09:c7:ad:e4:4d:bd:ee:4e: 4b:0e:2f:06:81:a0:06:fb:d1:34:9e:40:a7:0e:71:c5:06:37: c3:e7:f2:96:b8:f4:1b:b7:a6:9d:09:e8:79:fe:0b:00:27:44: d7:6e:07:f8:ed:66:9b:a0:6d:80:28:0b:10:c1:18:c5:1e:81: 31:d6:4b:53:28:c2:2a:97:2c:35:19:64:ca:0b:9b:66:6c:d4: 42:b2:2b:b1:55:c0:c2:4e:5b:eb:8f:53:c6:3f:a1:1e:c4:58: 38:8c:fe:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjQwNTE5MDYxMjU1WhcNMjQwNTI2MDYxMjU1WjAYMRYwFAYD VQQDEw02NjQ5OTg2Ny1jNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtbj+qxgItQ5ynnE24+MxiQ3wXIR3AMorVznYMjkeDzK49dGY+Wd/zNO0pZd cCT6M+ebx7FypdIccX/G0O7wS0sgHgRkmROTY1LqFnAuQlPCGePr8Wp/pZ69XE9t r1N185Rd+A/9CeVqtYt80gitd5btR7BbjP/TBkXzY+SDCeRa9tQUijbPyAg/X9SN po54PBRbh5DQcjDWNBRy2nJG5AhzWcmTkAcwKFI7MZVdAlooaOlB91COcqdoVN6T hr1t2VmDEXva58B1dKCoIxa+HmXGEc8M4CZyZY8xzTf784PPgPS2yvT1puRAhgsI DSGBUxt+I3fNm6ffXaLdZwx5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCubTWs KwWl5lWiJZKQ4MylKWUvMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkN/e+Rb7w2PIEDQ2xOkuUp8gMG+fUaYg3yOOj07ezQzdAgkjuCU2+ HaiEKZFdcbkgtVx0AGenGrYnKWYop+vi+2tQClR91nJDnV+FJKlKBydMM5XTeGwD nUtQ64oKdhhmFuNGxgY5RzB0A0Fwwc6K35VYWU4HUQ0jaEv3b0HuD7JrIuhCtAzO ItvPB1XOM4XsfTC8bAwpjY3ICcet5E297k5LDi8GgaAG+9E0nkCnDnHFBjfD5/KW uPQbt6adCeh5/gsAJ0TXbgf47WaboG2AKAsQwRjFHoEx1ktTKMIqlyw1GWTKC5tm bNRCsiuxVcDCTlvrj1PGP6EexFg4jP66 -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org