$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json) Hash identifier: 6MmjaX8fSrzMEuJ0aOrCJzLR5QmLEJe+6RNsF8shTfQ= Subject key identifier: BC:37:1C:53:45:BE:5E:DE:10:85:D1:BB:79:5A:ED:00:12:8B:94:09 Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft Manifest number: 3C Signing time: Sun 19 May 2024 08:13:28 +0000 Manifest this update: Sun 19 May 2024 08:13:27 +0000 Manifest next update: Sun 26 May 2024 08:13:27 +0000 Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: 0Cm1rYiYWvQ+2j4OAW56gdLmN3NGQiLxzcHn1Z0HpBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Validity Not Before: May 19 08:13:27 2024 GMT Not After : May 26 08:13:27 2024 GMT Subject: CN=6649b4a8-31f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:28:e0:8c:c5:f6:40:8b:ef:a4:0d:2d:eb: 61:e7:cc:da:46:73:f7:a3:b5:ad:e2:30:db:90:c8: 3d:4b:54:e2:12:2e:8f:ac:01:df:f6:0c:2c:da:08: 2a:30:14:cb:8a:3e:c4:07:4f:85:fd:e3:d6:7a:0a: df:e5:ad:9e:1d:a4:5e:6f:c9:38:39:48:d6:c6:71: 09:03:34:56:3f:4e:f6:5a:73:3a:3a:2b:0d:c1:dc: 69:2b:74:26:2d:4f:8e:60:1a:34:b8:04:22:b1:50: c3:7e:d4:d8:91:af:a5:4b:88:0d:98:c3:88:a2:f6: df:39:3c:9d:c5:82:3b:4f:88:92:99:f3:0e:10:f4: 90:89:81:b1:a5:60:6b:c8:78:94:4a:0f:df:e8:f4: 03:ec:41:9b:1c:db:9d:17:f5:ac:15:27:b9:1e:91: 4b:3f:a2:31:24:e5:a7:d2:9c:f4:26:b0:61:a6:60: 6c:ea:50:c0:db:51:29:71:e0:db:4c:72:b5:46:5b: 63:3f:e4:f5:cd:61:f3:dd:28:5a:45:4c:db:ab:60: ee:be:0f:30:18:d5:94:b6:a6:7a:62:54:56:8d:22: 8b:34:49:9b:b8:c3:43:93:24:c1:2c:d0:86:a9:37: 86:7a:a2:63:3b:82:b9:9d:50:68:c7:bf:a5:5a:c4: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:37:1C:53:45:BE:5E:DE:10:85:D1:BB:79:5A:ED:00:12:8B:94:09 X509v3 Authority Key Identifier: keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:eb:e2:1d:39:6b:41:e7:10:6a:8f:35:68:f3:c4:20:0e:bb: de:ad:a9:58:de:be:c7:d2:90:da:2f:4a:f1:a6:d2:6f:37:13: 0c:0a:c2:0d:fd:5c:6d:9c:73:2d:2d:1f:ad:f1:aa:09:2b:7c: 7a:5d:f4:b5:f0:28:b0:b1:74:77:45:ee:6f:05:ea:01:f4:81: 46:01:3e:ff:d6:a9:3f:14:d8:1c:db:30:bf:60:7f:89:1c:c5: 5b:5c:c3:cd:70:0c:7c:e5:0f:c5:a0:4a:ae:1d:9a:81:c4:61: 84:10:b8:50:5e:53:b9:d7:56:86:3c:14:cc:0b:c6:16:a0:2a: d0:93:47:58:f4:62:24:9f:4e:a5:c9:83:b1:dc:75:78:cb:00: 24:fd:d7:55:64:39:b6:1e:b8:f0:63:f7:23:60:6b:97:1a:9f: a7:61:76:24:46:e9:0e:ae:d8:b5:ac:08:bd:45:5f:de:6b:c9: 0d:9f:d2:f9:e5:bb:59:5f:6f:c2:da:8f:04:bf:f4:52:61:8f: f8:05:27:09:24:16:e0:0f:70:59:48:f1:38:15:59:81:cb:5d: 46:d7:dd:25:a2:76:ad:af:5e:8c:1b:cb:6d:98:ce:3f:1f:7f: 5f:c7:30:ff:6f:86:07:58:17:7e:9a:d4:4b:a5:0c:8e:dc:29: 44:a9:8e:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkYyNzExMC8GA1UEBRMoNDIwQzVDNDQ5NEY5RkZBQjdBODVBMzcwQkZDM0U0OTVD Q0ZBNEJBMzAeFw0yNDA1MTkwODEzMjdaFw0yNDA1MjYwODEzMjdaMBgxFjAUBgNV BAMTDTY2NDliNGE4LTMxZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPwCjgjMX2QIvvpA0t62HnzNpGc/ejta3iMNuQyD1LVOISLo+sAd/2DCzaCCow FMuKPsQHT4X949Z6Ct/lrZ4dpF5vyTg5SNbGcQkDNFY/TvZaczo6Kw3B3GkrdCYt T45gGjS4BCKxUMN+1NiRr6VLiA2Yw4ii9t85PJ3FgjtPiJKZ8w4Q9JCJgbGlYGvI eJRKD9/o9APsQZsc250X9awVJ7kekUs/ojEk5afSnPQmsGGmYGzqUMDbUSlx4NtM crVGW2M/5PXNYfPdKFpFTNurYO6+DzAY1ZS2pnpiVFaNIos0SZu4w0OTJMEs0Iap N4Z6omM7grmdUGjHv6VaxFTbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvDccU0W+ Xt4QhdG7eVrtABKLlAkwHwYDVR0jBBgwFoAUQgxcRJT5/6t6haNwv8Pklcz6S6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRjI3Lzg0MDk4RjVDQkI2 QzExRUVBNjgwQUU2REM0RjlBRTAyL1FneGNSSlQ1XzZ0NmhhTnd2OFBrbGN6NlM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWd4Y1JKVDVfNnQ2aGFOd3Y4UGtsY3o2UzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RjI3Lzg0MDk4RjVDQkI2QzExRUVBNjgwQUU2REM0RjlBRTAyL1FneGNSSlQ1XzZ0 NmhhTnd2OFBrbGN6NlM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/r4h05a0HnEGqPNWjzxCAOu96tqVjevsfSkNovSvGm0m83EwwKwg39 XG2ccy0tH63xqgkrfHpd9LXwKLCxdHdF7m8F6gH0gUYBPv/WqT8U2BzbML9gf4kc xVtcw81wDHzlD8WgSq4dmoHEYYQQuFBeU7nXVoY8FMwLxhagKtCTR1j0YiSfTqXJ g7HcdXjLACT911VkObYeuPBj9yNga5can6dhdiRG6Q6u2LWsCL1FX95ryQ2f0vnl u1lfb8LajwS/9FJhj/gFJwkkFuAPcFlI8TgVWYHLXUbX3SWidq2vXowby22Yzj8f f1/HMP9vhgdYF36a1EulDI7cKUSpji8= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org