$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: OGK71mlUAgEiv2ZOWOZd6Nw5fJhNgIdYr7PmnIXEV1M= Subject key identifier: 14:2C:12:92:70:0B:99:7C:92:E0:D6:9B:EC:59:95:5E:AE:B5:01:F2 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 04C7 Signing time: Sun 19 May 2024 01:24:59 +0000 Manifest this update: Sun 19 May 2024 01:24:58 +0000 Manifest next update: Sun 26 May 2024 01:24:58 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: 4vCP/YvN50BEcET80OYbAqmCYd4BiLhf3u6jKKjubhg=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: /G+AQ8TJkbikggjTpkYg/WgLzS7otK6YzAWhBXn6B7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: May 19 01:24:58 2024 GMT Not After : May 26 01:24:58 2024 GMT Subject: CN=664954eb-6ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:c3:f2:bb:d5:54:db:2f:0f:a7:e7:d6:d5: 01:14:1f:95:57:55:89:8c:b1:94:b0:25:a3:63:fd: 5c:97:12:44:76:b7:8b:46:7a:a6:5b:3d:86:bf:55: 88:2a:d8:a9:8d:30:3b:f3:b8:75:21:d8:a8:48:69: aa:1f:6e:c7:05:cb:89:ce:03:95:bd:64:8e:71:0f: be:34:0d:66:1b:5e:02:e8:6e:5c:8e:21:a4:3c:59: f2:32:1c:41:69:8c:cd:0d:1b:95:13:12:89:12:3d: 7d:b5:ce:bb:6b:81:fc:31:da:77:b0:9b:a5:fb:57: 87:67:c9:19:d5:dc:02:d9:ae:52:74:88:7d:53:45: 3a:50:bf:33:d9:ec:a6:a5:eb:93:6c:54:7d:1e:5e: 78:96:56:a4:0c:89:ad:c9:8e:a9:d7:a8:99:d6:b4: fe:e2:54:36:27:9b:31:15:c5:f0:f7:6e:43:54:95: 97:35:97:00:1a:bd:de:b8:37:06:33:86:b0:58:62: 43:e6:9f:9b:40:10:21:0d:d9:cb:c0:9c:aa:24:67: 96:eb:54:5c:51:63:ec:bc:a8:3b:96:f5:d7:31:5c: 85:e8:0f:62:2a:b0:09:ae:96:03:d9:cd:73:27:29: 50:89:cc:17:08:c6:10:f5:1c:61:ef:84:a6:8f:08: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2C:12:92:70:0B:99:7C:92:E0:D6:9B:EC:59:95:5E:AE:B5:01:F2 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:39:8e:b9:73:07:69:3c:cd:9d:27:15:b8:79:ad:30:d9:b3: e9:b3:dd:ef:71:35:bf:45:91:34:ae:78:17:16:4a:4c:fc:e1: ae:5b:c9:a6:b1:2e:ca:44:a9:b8:0d:fd:fc:b6:cd:77:ce:e2: b7:07:46:5d:05:0f:b0:5d:ec:a4:f1:27:09:65:19:83:84:dc: db:1f:10:65:99:65:bb:20:84:cd:76:b9:b3:c8:d8:34:49:fd: e2:2e:64:b6:f7:a9:c5:ab:3d:5c:de:78:69:d6:81:6e:3b:1a: 15:49:e0:68:bd:fb:e8:07:97:5a:6f:51:4f:0c:e1:72:65:5f: 5e:be:79:89:59:5d:17:58:82:37:be:bf:d4:98:69:1b:50:ba: 66:2c:5d:35:66:45:2c:c9:7f:85:e5:db:c5:e1:e8:5a:a9:e6: 09:7c:50:fd:3f:ef:c6:b2:0a:39:32:bc:38:3b:32:7d:6e:cc: d5:d8:f6:9f:a3:55:5f:c8:0c:2d:49:3b:93:b0:3b:34:4c:1e: 76:b4:89:04:53:3a:8b:05:5e:db:c4:a6:3a:71:95:8f:cc:59: 6d:47:4f:7d:c4:54:c3:d9:57:ed:59:e9:2f:70:a6:c4:40:ba: 65:4b:9e:4f:61:b1:3f:f2:06:99:6b:9a:7a:99:00:c8:b9:0e: cf:de:17:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjQwNTE5MDEyNDU4WhcNMjQwNTI2MDEyNDU4WjAYMRYwFAYD VQQDEw02NjQ5NTRlYi02ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yzD8rvVVNsvD6fn1tUBFB+VV1WJjLGUsCWjY/1clxJEdreLRnqmWz2Gv1WI KtipjTA787h1IdioSGmqH27HBcuJzgOVvWSOcQ++NA1mG14C6G5cjiGkPFnyMhxB aYzNDRuVExKJEj19tc67a4H8Mdp3sJul+1eHZ8kZ1dwC2a5SdIh9U0U6UL8z2eym peuTbFR9Hl54llakDImtyY6p16iZ1rT+4lQ2J5sxFcXw925DVJWXNZcAGr3euDcG M4awWGJD5p+bQBAhDdnLwJyqJGeW61RcUWPsvKg7lvXXMVyF6A9iKrAJrpYD2c1z JylQicwXCMYQ9Rxh74SmjwhJLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQsEpJw C5l8kuDWm+xZlV6utQHyMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUOY65cwdpPM2dJxW4ea0w2bPps93vcTW/RZE0rngXFkpM/OGuW8mm sS7KRKm4Df38ts13zuK3B0ZdBQ+wXeyk8ScJZRmDhNzbHxBlmWW7IITNdrmzyNg0 Sf3iLmS296nFqz1c3nhp1oFuOxoVSeBovfvoB5dab1FPDOFyZV9evnmJWV0XWII3 vr/UmGkbULpmLF01ZkUsyX+F5dvF4ehaqeYJfFD9P+/Gsgo5Mrw4OzJ9bszV2Paf o1VfyAwtSTuTsDs0TB52tIkEUzqLBV7bxKY6cZWPzFltR099xFTD2VftWekvcKbE QLplS55PYbE/8gaZa5p6mQDIuQ7P3hfS -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org