$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: A5JxHGi9zHP27oCUZT79U43OKdEe//hle1mmLIFm5+w= Subject key identifier: 63:57:83:C9:C6:C8:71:33:D9:52:CB:C7:14:9F:B3:08:1D:E3:60:8F Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1174 Signing time: Sat 18 May 2024 17:47:48 +0000 Manifest this update: Sat 18 May 2024 17:47:47 +0000 Manifest next update: Sat 25 May 2024 17:47:47 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: b9KYbPMaCI7cwkjr9KMyZtMBn1fPbEWs3/2qURtlJks=) 2: 68E5014A355C11EC96291331C4F9AE02.roa (hash: KxPY2GSftqdJFzgDeoNVtONYbEatx62Ixetc0d07l0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4486 (0x1186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: May 18 17:47:47 2024 GMT Not After : May 25 17:47:47 2024 GMT Subject: CN=6648e9c4-0d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:18:99:1f:cf:8d:72:82:9a:21:14:c6:61: 86:87:3f:21:df:2a:d9:32:18:89:c7:8f:21:34:8f: a9:33:ad:05:b1:02:44:ce:9d:47:d2:59:f1:59:69: d8:eb:6e:c2:62:e2:df:9c:3a:30:2e:3c:67:5b:7f: d9:94:91:88:9f:b8:63:56:c6:df:b7:24:96:51:eb: 5c:d4:37:cd:63:64:64:2c:09:b8:f2:b0:27:6f:b2: b7:42:76:1d:ac:86:54:0f:c1:59:49:f1:65:d2:ed: 8b:31:48:fc:a0:5a:e4:99:d3:24:d8:1d:cd:d0:5f: 39:15:5e:7b:7f:d4:c4:62:cc:b6:47:ef:a8:0d:ac: bd:3c:2f:79:89:56:d2:dd:ae:c1:84:01:8a:11:10: 41:3b:b6:46:81:49:d7:f7:b9:08:13:19:cf:b8:52: 11:15:db:f3:4d:5e:c3:10:4c:60:da:a3:05:b3:8b: b8:97:8e:7a:ef:7f:ab:1a:df:f6:0e:0f:77:b3:d4: 73:2e:39:71:c4:21:c2:26:68:40:86:ff:1c:79:82: b7:d2:ee:73:80:6a:b1:ee:3a:ca:bb:9c:f3:1f:5b: 8f:6a:54:94:d0:97:f6:c5:4b:e5:7b:37:d3:b0:47: 9c:85:9c:55:c4:f4:71:aa:b9:05:c3:ea:90:ff:79: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:83:C9:C6:C8:71:33:D9:52:CB:C7:14:9F:B3:08:1D:E3:60:8F X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:51:e0:e8:da:0c:eb:fb:02:f4:9d:de:83:d1:62:d4:c1: 9c:2c:7c:c8:e1:52:96:ec:8e:39:1d:4a:0d:9a:2e:7e:59:b2: f1:8f:14:73:a6:72:df:9e:3e:60:1c:07:1c:86:13:7a:3a:7d: 93:6d:9e:c1:0e:7e:7a:14:84:92:df:3c:15:e4:09:39:7a:0c: 5f:0a:d7:ac:42:ea:28:a6:11:bf:e5:6e:b1:e5:04:53:a8:a9: bc:64:5d:f5:89:2a:8a:a1:ba:cb:cb:d7:f4:a6:83:f3:5b:40: f1:21:2c:50:70:e4:fe:d1:82:8f:68:41:dd:06:dd:8f:39:fe: 5f:de:10:18:76:92:e3:a3:93:d2:1e:84:3a:85:05:22:6f:8b: 37:f8:15:21:90:e5:0d:4b:f7:4f:d4:40:f5:23:d6:18:ee:3d: 57:f1:f1:34:f6:f3:50:c8:f3:18:51:aa:89:23:0f:cf:ee:2d: ad:24:f9:e9:3a:e9:df:f3:b6:40:d4:0e:ce:e0:fb:98:3a:e7: 9d:7a:a2:91:37:2f:30:ff:be:b7:ed:9b:11:29:42:d5:96:41: b1:94:23:a5:eb:c7:35:c6:49:22:dd:83:53:27:36:48:1a:05: 24:b9:ad:1d:d5:cd:92:09:8b:7d:27:e8:e1:43:45:7b:bd:4a: 32:df:5f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjQwNTE4MTc0NzQ3WhcNMjQwNTI1MTc0NzQ3WjAYMRYwFAYD VQQDEw02NjQ4ZTljNC0wZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0wYmR/PjXKCmiEUxmGGhz8h3yrZMhiJx48hNI+pM60FsQJEzp1H0lnxWWnY 627CYuLfnDowLjxnW3/ZlJGIn7hjVsbftySWUetc1DfNY2RkLAm48rAnb7K3QnYd rIZUD8FZSfFl0u2LMUj8oFrkmdMk2B3N0F85FV57f9TEYsy2R++oDay9PC95iVbS 3a7BhAGKERBBO7ZGgUnX97kIExnPuFIRFdvzTV7DEExg2qMFs4u4l45673+rGt/2 Dg93s9RzLjlxxCHCJmhAhv8ceYK30u5zgGqx7jrKu5zzH1uPalSU0Jf2xUvlezfT sEechZxVxPRxqrkFw+qQ/3nnwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNXg8nG yHEz2VLLxxSfswgd42CPMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK71Hg6NoM6/sC9J3eg9Fi1MGcLHzI4VKW7I45HUoNmi5+WbLxjxRz pnLfnj5gHAcchhN6On2TbZ7BDn56FISS3zwV5Ak5egxfCtesQuoophG/5W6x5QRT qKm8ZF31iSqKobrLy9f0poPzW0DxISxQcOT+0YKPaEHdBt2POf5f3hAYdpLjo5PS HoQ6hQUib4s3+BUhkOUNS/dP1ED1I9YY7j1X8fE09vNQyPMYUaqJIw/P7i2tJPnp Ounf87ZA1A7O4PuYOuedeqKRNy8w/7637ZsRKULVlkGxlCOl68c1xkki3YNTJzZI GgUkua0d1c2SCYt9J+jhQ0V7vUoy318Y -----END CERTIFICATE-----Generated at Sat May 18 19:15:23 2024 by rpki-client on console-ams.rpki-client.org