$ rpki-client -vvf rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft File: q6y5DDE0hQG0sdXlosfP8f2HtVs.mft (raw, json) Hash identifier: V6T4yB6ZOuy5xcf9A2qEvOJxyQKsLU+QjVCrBAsMhTI= Subject key identifier: FB:4A:75:BD:70:6B:D1:28:96:9E:F8:E2:B9:38:4A:F6:51:6A:96:37 Authority key identifier: AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B Certificate issuer: /CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft Manifest number: 0505 Signing time: Sun 19 May 2024 01:10:18 +0000 Manifest this update: Sun 19 May 2024 01:10:18 +0000 Manifest next update: Sun 26 May 2024 01:10:18 +0000 Files and hashes: 1: q6y5DDE0hQG0sdXlosfP8f2HtVs.crl (hash: yZbH1/sV2+nXHoJXcwM9IzBSxx8auvzkHrmFIxU1f2A=) 2: DC3716ACC0AD11EBA91C5655C4F9AE02.roa (hash: zjF6hV/xCm0hZGzWLZIyEd9PhQ3Ngnb2LQfu5dnHHQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B Validity Not Before: May 19 01:10:18 2024 GMT Not After : May 26 01:10:18 2024 GMT Subject: CN=6649517a-4fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:d5:bf:de:b0:cf:15:ef:68:11:02:7a:0e: 7f:a8:a2:62:14:75:2c:71:ad:e4:07:82:08:a0:95: 10:35:f4:4b:13:6f:0f:b7:fa:3a:4b:35:97:d8:56: eb:0f:d5:e8:c7:d0:6b:8a:86:5f:4b:ce:60:7d:79: 7b:c5:97:4a:d4:9f:f4:a3:77:da:d4:0b:f9:4c:07: 7c:40:08:a1:39:55:a3:1c:f8:22:9a:cf:8c:77:68: d0:21:8f:c2:fa:e5:8d:fc:29:fa:0e:de:46:1a:79: 3b:30:e4:46:73:7b:a9:19:d6:30:af:31:3e:43:0f: 37:12:88:ff:95:36:61:e5:4e:2a:64:44:7a:1e:06: d8:3b:37:a4:5b:7d:11:10:6a:81:0f:4f:93:c5:7f: ce:1b:d0:12:55:d1:9d:80:08:70:a8:77:73:6d:50: bd:2f:c2:08:32:be:6d:e9:47:19:e8:96:4b:5b:1e: 03:03:98:2a:b8:86:e7:36:71:d7:90:6f:50:c6:dc: 00:43:70:df:d6:bb:27:f4:71:05:df:4c:18:30:d7: 11:e4:08:98:be:a2:07:73:35:e5:0b:ec:80:03:8d: ce:f3:33:8e:9a:04:cf:ed:c9:d3:97:41:dd:46:62: 70:9c:cc:bc:30:35:ec:3c:99:00:c2:68:78:61:be: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:75:BD:70:6B:D1:28:96:9E:F8:E2:B9:38:4A:F6:51:6A:96:37 X509v3 Authority Key Identifier: keyid:AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:da:03:72:b6:2e:fe:db:fd:2b:0b:e3:33:97:c0:64:44:d9: 86:7b:bb:11:aa:fa:d4:34:3c:7f:ed:21:aa:fa:89:8d:1d:6b: b1:51:cb:a6:0e:44:b6:1a:bb:7c:c3:30:5a:b2:ee:66:cb:9f: a9:ab:f8:d0:69:02:e5:1a:41:d9:60:df:bd:2e:75:7c:20:dd: 14:df:8e:64:92:39:c9:04:c8:5b:b7:d8:99:42:9b:95:79:a8: 0a:18:7b:79:29:a7:f7:2c:24:ab:6d:d3:92:99:94:97:90:38: e6:98:b4:47:28:18:bd:6a:de:90:f8:39:81:7a:5c:27:13:86: 2c:4d:21:93:71:70:8e:11:48:48:3c:98:96:6b:6a:21:65:26: a0:ad:50:a3:6a:4f:5c:16:54:1a:b1:67:0c:e5:9a:bc:3c:f1: af:7c:20:95:1d:43:03:2e:6f:8f:cb:4b:d5:a2:a4:f5:e5:72: 9a:4c:6a:34:f0:48:ef:6b:11:07:a6:a3:86:bf:0d:a8:69:e7: aa:68:51:6b:00:f8:ea:c8:bb:ae:91:27:49:39:9e:c4:6c:3e: 31:e0:12:36:a6:2c:36:42:af:56:80:40:49:8c:e5:b2:c4:a2: cd:d2:3f:92:3d:70:a9:30:77:72:13:fa:f1:ab:cf:5b:71:04: b4:eb:f7:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3OTAxMTAvBgNVBAUTKEFCQUNCOTBDMzEzNDg1MDFCNEIxRDVFNUEyQzdDRkYx RkQ4N0I1NUIwHhcNMjQwNTE5MDExMDE4WhcNMjQwNTI2MDExMDE4WjAYMRYwFAYD VQQDEw02NjQ5NTE3YS00ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03HVv96wzxXvaBECeg5/qKJiFHUsca3kB4IIoJUQNfRLE28Pt/o6SzWX2Fbr D9Xox9BrioZfS85gfXl7xZdK1J/0o3fa1Av5TAd8QAihOVWjHPgims+Md2jQIY/C +uWN/Cn6Dt5GGnk7MORGc3upGdYwrzE+Qw83Eoj/lTZh5U4qZER6HgbYOzekW30R EGqBD0+TxX/OG9ASVdGdgAhwqHdzbVC9L8IIMr5t6UcZ6JZLWx4DA5gquIbnNnHX kG9QxtwAQ3Df1rsn9HEF30wYMNcR5AiYvqIHczXlC+yAA43O8zOOmgTP7cnTl0Hd RmJwnMy8MDXsPJkAwmh4Yb6L0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtKdb1w a9Eolp744rk4SvZRapY3MB8GA1UdIwQYMBaAFKusuQwxNIUBtLHV5aLHz/H9h7Vb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5MC9CRjJDRTNGMEMw QUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhRRzBzZFhsb3NmUDhmMkh0 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2eTVEREUwaFFHMHNkWGxvc2ZQOGYySHRWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTc5MC9CRjJDRTNGMEMwQUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhR RzBzZFhsb3NmUDhmMkh0VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI2gNyti7+2/0rC+Mzl8BkRNmGe7sRqvrUNDx/7SGq+omNHWuxUcum DkS2Grt8wzBasu5my5+pq/jQaQLlGkHZYN+9LnV8IN0U345kkjnJBMhbt9iZQpuV eagKGHt5Kaf3LCSrbdOSmZSXkDjmmLRHKBi9at6Q+DmBelwnE4YsTSGTcXCOEUhI PJiWa2ohZSagrVCjak9cFlQasWcM5Zq8PPGvfCCVHUMDLm+Py0vVoqT15XKaTGo0 8EjvaxEHpqOGvw2oaeeqaFFrAPjqyLuukSdJOZ7EbD4x4BI2piw2Qq9WgEBJjOWy xKLN0j+SPXCpMHdyE/rxq89bcQS06/eF -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org