$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: B8FAxSikyNswNeMURBjR3Py5ab4kKNqTad6ay70aBXc= Subject key identifier: 12:4F:22:67:4F:54:4A:7E:C0:87:47:F0:4A:89:84:69:2E:6D:1D:51 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 28 Signing time: Fri 31 May 2024 09:26:17 +0000 Manifest this update: Fri 31 May 2024 09:26:17 +0000 Manifest next update: Fri 07 Jun 2024 09:26:17 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: tOGJRzJopk1zJwhLef3W6707LDQogalqJG3AkP5MYVA=) 2: 57810624E12B11EEA7895018C4F9AE02.roa (hash: 4Mi5qLB24cuitrWVdl8VvHohaQSxomWOQc8JXZdPjdE=) 3: 57F1B45AE12B11EEA7895018C4F9AE02.roa (hash: wLrFru85QTYkMRJ3lt5lokeRkglQfQ0Ot5fTaQUe/xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: May 31 09:26:17 2024 GMT Not After : Jun 7 09:26:17 2024 GMT Subject: CN=665997b9-607a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:7f:9b:d1:6e:1b:ed:03:91:a4:1c:a0:87: 6a:dc:fd:5c:32:b4:26:b5:49:d3:13:bd:75:22:99: de:ca:2c:7d:ff:0a:57:72:8b:97:0e:48:2a:b3:50: 7f:c9:9a:ae:d2:f8:ab:fa:fb:c9:c5:ae:7f:08:9e: c4:53:17:a7:a7:5d:e8:8d:0b:cc:a3:d8:0b:b9:1a: 7b:ba:e1:db:9d:6e:aa:df:04:ed:68:14:19:8d:88: dd:0d:98:26:72:df:ad:ea:80:36:b2:6d:2a:3a:f4: f9:b5:1a:ba:4a:94:d3:b4:db:f7:73:38:68:82:09: 5c:64:1f:3a:77:88:da:90:27:43:8d:b5:a8:06:c3: ea:c9:7f:94:67:ae:8d:fd:61:21:11:ab:50:f8:7c: 24:cb:16:d3:01:6f:79:86:93:56:30:6b:4a:55:79: 0d:a3:bf:55:43:fb:ee:fc:b7:f4:2a:4c:98:d7:17: 96:05:2a:12:2a:53:2d:8c:ca:94:bb:78:75:28:c5: 8a:c2:1b:ab:b7:db:02:a0:ee:d8:5e:73:3d:45:a4: 10:12:f6:c6:e5:de:c9:4f:56:50:ce:a0:69:3b:66: c7:8d:eb:fc:fb:2a:67:e3:62:b0:9f:0a:d8:8f:d1: 49:76:1e:d5:d2:d0:4e:99:83:d2:55:32:50:72:3f: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4F:22:67:4F:54:4A:7E:C0:87:47:F0:4A:89:84:69:2E:6D:1D:51 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:4a:c5:05:4e:c4:8d:ab:05:46:a3:6e:07:81:80:39:25: c4:74:ac:59:d5:d7:78:1e:53:37:c1:66:82:6c:a7:09:1b:ea: 57:17:81:78:27:d4:02:07:df:16:2b:8c:82:17:94:c9:13:53: 9d:76:64:5d:af:8b:bb:33:4a:a6:9f:2c:a0:34:3b:f9:50:3e: 28:73:0e:c6:21:e7:89:f3:e0:90:87:05:1f:b3:ef:0d:4c:a2: d1:17:43:80:dd:03:e1:4b:e6:ed:a8:d8:d5:5d:5c:83:7e:2a: ad:b7:a1:b9:5b:bd:46:53:06:eb:51:ba:d6:24:45:6d:8e:79: e8:fd:a3:9e:a9:67:fc:50:05:3e:e9:34:1d:7c:f5:33:e8:03: a5:48:9a:19:c0:d0:18:d4:68:5d:26:74:8d:01:bf:6e:4d:91: 2e:82:b1:4e:87:8c:9a:cb:ce:8c:97:86:55:d3:37:b2:91:13: 9f:d5:57:0a:31:4f:4d:20:40:40:b6:3a:9a:73:84:da:2b:a6: a6:1f:9d:f5:18:0e:59:e2:8f:82:2e:dc:ae:72:bb:33:26:51: e2:ab:9e:85:8c:d8:54:93:44:da:59:61:bd:8a:4e:a0:b9:fb: f5:54:ec:64:d6:a7:16:98:ad:75:b8:ee:8c:88:ec:7e:55:cf: f4:31:e0:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTY4QjExMC8GA1UEBRMoNDJFNjY1RTExMTA0RDhDRDA4M0ZCMTlEM0M2RjM1NUM3 NjI4QzQ0NTAeFw0yNDA1MzEwOTI2MTdaFw0yNDA2MDcwOTI2MTdaMBgxFjAUBgNV BAMTDTY2NTk5N2I5LTYwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkin+b0W4b7QORpBygh2rc/VwytCa1SdMTvXUimd7KLH3/Cldyi5cOSCqzUH/J mq7S+Kv6+8nFrn8InsRTF6enXeiNC8yj2Au5Gnu64dudbqrfBO1oFBmNiN0NmCZy 363qgDaybSo69Pm1GrpKlNO02/dzOGiCCVxkHzp3iNqQJ0ONtagGw+rJf5Rnro39 YSERq1D4fCTLFtMBb3mGk1Ywa0pVeQ2jv1VD++78t/QqTJjXF5YFKhIqUy2MypS7 eHUoxYrCG6u32wKg7thecz1FpBAS9sbl3slPVlDOoGk7ZseN6/z7KmfjYrCfCtiP 0Ul2HtXS0E6Zg9JVMlByP3kzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEk8iZ09U Sn7Ah0fwSomEaS5tHVEwHwYDVR0jBBgwFoAUQuZl4REE2M0IP7GdPG81XHYoxEUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjhCL0ZDMUQyNzM2RTEy QTExRUU4Njg0QzIxN0M0RjlBRTAyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXVabDRSRUUyTTBJUDdHZFBHODFYSFlveEVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NjhCL0ZDMUQyNzM2RTEyQTExRUU4Njg0QzIxN0M0RjlBRTAyL1F1Wmw0UkVFMk0w SVA3R2RQRzgxWEhZb3hFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDHSsUFTsSNqwVGo24HgYA5JcR0rFnV13geUzfBZoJspwkb6lcXgXgn 1AIH3xYrjIIXlMkTU512ZF2vi7szSqafLKA0O/lQPihzDsYh54nz4JCHBR+z7w1M otEXQ4DdA+FL5u2o2NVdXIN+Kq23oblbvUZTButRutYkRW2Oeej9o56pZ/xQBT7p NB189TPoA6VImhnA0BjUaF0mdI0Bv25NkS6CsU6HjJrLzoyXhlXTN7KRE5/VVwox T00gQEC2OppzhNorpqYfnfUYDlnij4Iu3K5yuzMmUeKrnoWM2FSTRNpZYb2KTqC5 +/VU7GTWpxaYrXW47oyI7H5Vz/Qx4Lk= -----END CERTIFICATE-----Generated at Fri May 31 13:04:14 2024 by rpki-client on console-ams.rpki-client.org