$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: 7XnqfaRyN/tv8nhM/0st10GBEziQWcTG3eNJPus+yzU= Subject key identifier: FB:83:A5:24:00:89:62:B1:B5:B8:95:C6:E4:52:57:79:08:2B:90:0E Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2CA3 Signing time: Sat 18 May 2024 15:46:22 +0000 Manifest this update: Sat 18 May 2024 15:46:22 +0000 Manifest next update: Sat 25 May 2024 15:46:22 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: 4lWc2PnMC6u2SkJ1X7heohpx9Lfe2zXHYo+wx5I4H/A=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: oMXVitKOrtArR9RmoXdCduX1UF3xuxb7v/toH3I9Okw=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: 6qZEdC79FWE/RTlhtP+n8r05lhzMLnxTSfxisKuoX/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11453 (0x2cbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: May 18 15:46:22 2024 GMT Not After : May 25 15:46:22 2024 GMT Subject: CN=6648cd4e-6283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:9b:f7:68:66:d4:bf:0b:29:b1:70:3e:de: 63:c7:98:b1:68:46:a3:e4:b1:d8:f6:00:d6:87:29: 0e:91:05:80:9d:0a:b2:42:fa:be:75:5d:d2:45:f0: ad:a8:13:1f:0f:8f:84:67:d1:e0:9d:f5:ad:21:ea: c8:21:44:d1:85:97:35:dc:fa:34:20:48:64:17:5c: de:5b:9f:27:9e:f5:54:f4:c4:91:a3:34:41:c3:25: 17:c6:ad:8d:6b:7d:4d:d9:a0:54:af:a0:7d:aa:58: c2:ce:46:49:88:27:a0:ea:f5:54:56:8c:a4:81:56: e3:05:9c:0b:d8:ee:13:8c:99:62:12:ec:17:f2:08: 0c:eb:2e:c7:ba:85:19:0d:33:d6:d2:08:96:f8:3c: 1d:86:fa:e8:1d:69:18:09:bd:60:6e:b8:f5:c9:2a: 3c:03:25:82:25:e3:ed:20:ba:b1:52:7d:df:05:a4: 8f:12:97:70:05:d8:7c:ad:d1:2f:18:c9:f2:e6:af: c3:62:2c:c1:87:6e:e9:93:22:17:7a:4b:5e:48:e5: 87:44:d9:b4:ba:ad:b3:b1:af:20:c0:6e:bb:24:c8: 0c:55:ee:c8:a3:a7:bc:c1:23:a6:77:de:81:91:8e: 06:13:be:4f:0f:83:60:d4:35:25:9b:7b:f3:f0:a8: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:A5:24:00:89:62:B1:B5:B8:95:C6:E4:52:57:79:08:2B:90:0E X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:12:5f:0d:68:cb:70:de:fd:6a:f5:19:96:68:b0:dc:01:99: dd:8b:c0:52:e4:3c:aa:8a:9b:d2:96:08:5e:1f:32:76:5c:41: 3c:f1:a7:79:aa:8b:d0:df:36:c8:6b:2c:bf:60:ce:4a:8f:96: d4:b2:55:90:1a:13:f4:c9:c6:29:1c:97:9c:2c:58:46:66:85: b6:59:c4:e6:36:65:c3:bc:02:e0:76:05:85:43:01:ca:d4:cf: 19:fc:96:80:8b:5c:77:e3:93:eb:fa:23:4e:76:44:e0:bd:25: 85:40:43:44:ec:b2:dc:df:67:8a:96:0e:bf:c2:8b:09:47:3f: 2f:b9:c6:71:60:b1:e2:7c:3f:af:8f:80:52:62:65:fa:84:2b: 01:12:73:cd:eb:e8:73:cd:c5:39:5e:d9:4d:c8:dd:2f:08:40: 92:db:c5:56:c2:80:8c:51:7c:35:cd:75:13:8a:01:3e:98:39: b7:f4:1e:6b:ba:f2:90:9d:16:26:22:d0:2f:11:2a:16:ba:ec: 8f:0e:7e:38:9b:49:de:89:08:5e:e7:43:47:f9:90:2a:3a:ec: 0d:b5:06:dc:d7:ea:b0:79:38:8f:e7:fa:73:42:39:47:ac:92: a5:af:59:41:c1:83:2a:e2:b7:75:8f:34:77:f7:1f:3a:2d:89: ea:8c:7e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjQwNTE4MTU0NjIyWhcNMjQwNTI1MTU0NjIyWjAYMRYwFAYD VQQDEw02NjQ4Y2Q0ZS02MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQyb92hm1L8LKbFwPt5jx5ixaEaj5LHY9gDWhykOkQWAnQqyQvq+dV3SRfCt qBMfD4+EZ9HgnfWtIerIIUTRhZc13Po0IEhkF1zeW58nnvVU9MSRozRBwyUXxq2N a31N2aBUr6B9qljCzkZJiCeg6vVUVoykgVbjBZwL2O4TjJliEuwX8ggM6y7HuoUZ DTPW0giW+DwdhvroHWkYCb1gbrj1ySo8AyWCJePtILqxUn3fBaSPEpdwBdh8rdEv GMny5q/DYizBh27pkyIXekteSOWHRNm0uq2zsa8gwG67JMgMVe7Io6e8wSOmd96B kY4GE75PD4Ng1DUlm3vz8KhtsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuDpSQA iWKxtbiVxuRSV3kIK5AOMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANEl8NaMtw3v1q9RmWaLDcAZndi8BS5DyqipvSlgheHzJ2XEE88ad5 qovQ3zbIayy/YM5Kj5bUslWQGhP0ycYpHJecLFhGZoW2WcTmNmXDvALgdgWFQwHK 1M8Z/JaAi1x345Pr+iNOdkTgvSWFQENE7LLc32eKlg6/wosJRz8vucZxYLHifD+v j4BSYmX6hCsBEnPN6+hzzcU5XtlNyN0vCECS28VWwoCMUXw1zXUTigE+mDm39B5r uvKQnRYmItAvESoWuuyPDn44m0neiQhe50NH+ZAqOuwNtQbc1+qweTiP5/pzQjlH rJKlr1lBwYMq4rd1jzR39x86LYnqjH5i -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org