$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: orjiNwV7w3oay4RbJSp773h5ovxY/d4lxcnR6Psoa7Y= Subject key identifier: 7A:87:72:54:78:DC:8B:E3:7E:27:ED:F2:58:76:F9:1D:18:AF:A9:C1 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 33DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 33D3 Signing time: Thu 30 May 2024 14:44:32 +0000 Manifest this update: Thu 30 May 2024 14:44:32 +0000 Manifest next update: Thu 06 Jun 2024 14:44:32 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: RFE1jKg3xXmy+hdJQEwOodjIldW/H5BDEw6qqmn7ec8=) 2: 7A42D8C8DD3C11EA8C68452FC4F9AE02.roa (hash: DhlrL6zHl9QmuuWPTGOqHQVWE9R1KKjeYbDMioancRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 14:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13275 (0x33db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: May 30 14:44:32 2024 GMT Not After : Jun 6 14:44:32 2024 GMT Subject: CN=665890d0-a1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:11:fd:bf:60:61:06:16:96:4c:84:d3:d9:8b: 14:b5:0a:17:73:b4:19:3a:88:43:d9:f5:40:bc:f1: 55:63:4f:d0:61:b4:75:b2:b0:dc:b5:e0:c4:8a:43: 30:d6:2e:bc:06:64:04:23:51:8e:5c:a1:04:fd:31: 03:29:91:9e:c5:ca:0e:fb:67:f6:a7:8a:ef:f3:5f: dd:e9:74:09:4a:6d:0c:cc:b1:2c:b9:c6:e5:78:d3: 88:e7:37:fa:19:a1:0d:8b:c9:47:69:d3:1b:9e:b5: ff:ec:ce:fa:0f:db:a5:0b:35:07:cb:74:94:45:4f: f2:06:59:40:b6:89:b3:a0:06:70:2f:10:6c:4a:ac: ba:02:89:ad:05:74:ee:17:a9:c9:b2:ac:e8:33:5b: 06:c5:da:66:cc:ac:77:4e:8d:77:c0:38:92:7c:b8: b9:3f:4c:88:68:10:08:1e:c6:02:f4:c1:a6:57:87: 2b:02:70:b0:ee:dc:94:5a:c5:47:da:06:63:08:87: b0:02:b4:6a:04:af:45:da:a9:9e:92:92:01:25:fe: 79:4b:42:40:9a:b5:6b:6b:63:c8:a7:bc:be:97:88: 84:ba:2d:c0:b5:8e:66:90:e4:1b:9d:3c:b4:3b:87: ab:e7:bb:16:1b:3f:74:f8:c1:c1:7a:50:28:19:9a: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:72:54:78:DC:8B:E3:7E:27:ED:F2:58:76:F9:1D:18:AF:A9:C1 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:14:a3:8a:6d:40:8c:66:79:d4:35:25:4d:24:41:68:9f:d1: f2:bf:37:f3:ae:d5:02:b7:b4:38:46:36:66:f0:9b:41:ac:82: 16:31:57:b4:36:1b:38:ea:da:9a:c0:52:16:97:12:29:75:9a: b4:fb:97:44:44:fd:b0:78:37:97:3b:c5:e5:26:cf:51:d9:89: 1f:8a:51:79:d5:1a:1f:13:7f:89:45:4c:5a:96:b8:50:bb:6a: 6e:94:7d:0c:57:b7:fd:bd:6a:6f:17:fe:41:14:ee:b5:29:84: 5d:82:d5:3f:19:b1:47:0e:37:8c:c3:49:dc:7c:a1:a9:16:3c: 62:dc:ba:73:f9:e3:68:01:61:76:99:fe:11:7e:bd:50:3d:31: 7e:4c:26:72:08:27:b6:ab:2d:11:94:87:16:ad:5d:c1:d9:a9: 66:aa:91:ed:94:28:53:0e:2d:be:20:06:bf:3d:4c:20:84:50: 2d:c7:4b:1a:ca:73:2a:db:bb:a5:e0:2c:b2:c8:0b:2e:29:d1: 1c:5f:08:08:74:2b:ff:0f:ee:b6:4a:82:3f:55:77:e5:f2:5f: e4:8d:4e:53:80:fc:38:01:50:46:15:eb:8c:95:c0:14:e6:04: d0:db:56:4a:ca:8c:69:48:ed:27:16:43:9c:61:63:8f:78:5d: a5:21:3c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjQwNTMwMTQ0NDMyWhcNMjQwNjA2MTQ0NDMyWjAYMRYwFAYD VQQDEw02NjU4OTBkMC1hMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RH9v2BhBhaWTITT2YsUtQoXc7QZOohD2fVAvPFVY0/QYbR1srDcteDEikMw 1i68BmQEI1GOXKEE/TEDKZGexcoO+2f2p4rv81/d6XQJSm0MzLEsucbleNOI5zf6 GaENi8lHadMbnrX/7M76D9ulCzUHy3SURU/yBllAtomzoAZwLxBsSqy6AomtBXTu F6nJsqzoM1sGxdpmzKx3To13wDiSfLi5P0yIaBAIHsYC9MGmV4crAnCw7tyUWsVH 2gZjCIewArRqBK9F2qmekpIBJf55S0JAmrVra2PIp7y+l4iEui3AtY5mkOQbnTy0 O4er57sWGz90+MHBelAoGZqZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqHclR4 3Ivjfift8lh2+R0Yr6nBMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDFKOKbUCMZnnUNSVNJEFon9HyvzfzrtUCt7Q4RjZm8JtBrIIWMVe0 Nhs46tqawFIWlxIpdZq0+5dERP2weDeXO8XlJs9R2YkfilF51RofE3+JRUxalrhQ u2pulH0MV7f9vWpvF/5BFO61KYRdgtU/GbFHDjeMw0ncfKGpFjxi3Lpz+eNoAWF2 mf4Rfr1QPTF+TCZyCCe2qy0RlIcWrV3B2almqpHtlChTDi2+IAa/PUwghFAtx0sa ynMq27ul4CyyyAsuKdEcXwgIdCv/D+62SoI/VXfl8l/kjU5TgPw4AVBGFeuMlcAU 5gTQ21ZKyoxpSO0nFkOcYWOPeF2lITyo -----END CERTIFICATE-----Generated at Thu May 30 18:45:55 2024 by rpki-client on console-ams.rpki-client.org