$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: Wf66Ct/Y4J0ReKV0JIOGp5Pvsm3TTQ3Z4bo/+h1XMt0= Subject key identifier: 23:8B:DC:26:D4:24:5D:F2:03:98:1F:C4:03:AF:3A:AB:5D:9B:33:8E Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 0485 Signing time: Sun 19 May 2024 01:38:05 +0000 Manifest this update: Sun 19 May 2024 01:38:05 +0000 Manifest next update: Sun 26 May 2024 01:38:05 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: eQZ6bNjmWdlhIO2P9EJxLaUreDoa2/X+UxfHdkPtrIM=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: L0GPAaTO/zUuo8/ywpi/empeBCEhT7S0e3ZEy5Wo7pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: May 19 01:38:05 2024 GMT Not After : May 26 01:38:05 2024 GMT Subject: CN=664957fd-ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:df:91:12:f2:f5:6e:4d:98:47:33:23:a0: d0:47:ec:39:ec:1c:7a:2e:15:59:16:6c:dd:e8:22: a2:21:52:64:05:3a:a0:24:74:92:7f:65:0a:c2:44: a2:2f:38:52:2c:be:5d:2a:d8:c4:f4:be:bc:35:a8: 1f:ba:87:d5:ec:ef:e1:da:2b:56:4f:91:7a:b6:2b: 90:11:72:3f:f8:19:bc:eb:74:40:8e:5f:75:9b:e2: 33:9d:94:36:64:5d:cf:d8:80:86:50:00:cf:82:2d: 1a:9b:f1:e1:74:52:13:6a:55:a4:db:7e:8e:c1:2d: b0:15:ad:f1:4e:32:14:39:0f:fe:ac:be:fe:2e:9b: 80:6e:45:54:53:0f:e6:da:c4:5d:5c:36:ec:af:d4: 31:a1:7d:8c:39:48:02:3d:f8:05:fb:a2:0d:95:33: f7:90:5b:09:cc:bc:4c:60:0f:7d:6c:94:71:31:1e: 3c:86:99:4f:a2:05:f0:bf:6a:d2:4e:8e:71:e1:af: 0f:2a:d3:bc:af:cb:1f:1c:2a:a0:42:4f:54:86:24: 16:66:d2:4d:b8:70:2c:df:f5:f8:23:08:17:1f:db: bd:75:f7:2d:5d:27:96:0b:cb:9c:3d:fc:c8:9a:21: 00:64:95:49:50:ad:9a:de:98:a1:34:10:c1:57:da: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:DC:26:D4:24:5D:F2:03:98:1F:C4:03:AF:3A:AB:5D:9B:33:8E X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cc:a7:e3:2d:14:71:70:b2:c8:7a:15:e9:db:78:fe:e0:e2: 11:f7:50:6c:bf:9b:d8:ee:a5:d5:9e:15:eb:9f:66:2a:44:09: a3:c8:fd:ef:86:cd:c6:5a:c7:c4:e0:87:90:a8:4b:7d:66:92: e9:b1:45:15:81:d8:b9:24:ba:7e:ec:e1:5c:f9:b3:aa:65:a9: 1e:9c:73:55:f6:1b:75:41:11:a8:67:50:48:91:61:76:40:4a: 33:7e:9c:e6:a8:79:60:5f:61:5b:da:f2:a4:3f:1e:5a:a0:99: 94:c8:a5:a6:15:54:1d:02:0c:b1:69:6c:03:b9:b4:1a:6f:59: 77:fa:f2:19:02:69:6b:f9:85:ea:ee:9b:46:b8:d6:9c:bb:b3: 35:6c:d5:c0:59:fd:fb:be:1e:68:6e:c8:49:14:82:b0:1c:b8: fb:2b:63:89:1e:68:f2:f1:f9:b5:cf:0b:9d:59:29:44:bd:2d: a6:8a:1e:4d:a9:4f:c2:53:c2:7c:be:25:16:32:a8:1a:28:52: b5:9b:07:0b:8d:c5:c4:e6:2f:b2:64:6b:58:69:30:bf:3f:d7: 8c:27:8d:58:32:98:19:e0:79:7f:65:0e:2d:57:57:9c:52:28: 04:8d:6b:b6:2e:ec:74:35:19:38:f9:c7:ea:c9:c7:2d:3c:fe: d6:af:42:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjQwNTE5MDEzODA1WhcNMjQwNTI2MDEzODA1WjAYMRYwFAYD VQQDEw02NjQ5NTdmZC1mZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s/fkRLy9W5NmEczI6DQR+w57Bx6LhVZFmzd6CKiIVJkBTqgJHSSf2UKwkSi LzhSLL5dKtjE9L68NagfuofV7O/h2itWT5F6tiuQEXI/+Bm863RAjl91m+IznZQ2 ZF3P2ICGUADPgi0am/HhdFITalWk236OwS2wFa3xTjIUOQ/+rL7+LpuAbkVUUw/m 2sRdXDbsr9QxoX2MOUgCPfgF+6INlTP3kFsJzLxMYA99bJRxMR48hplPogXwv2rS To5x4a8PKtO8r8sfHCqgQk9UhiQWZtJNuHAs3/X4IwgXH9u9dfctXSeWC8ucPfzI miEAZJVJUK2a3pihNBDBV9pTaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOL3CbU JF3yA5gfxAOvOqtdmzOOMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNzKfjLRRxcLLIehXp23j+4OIR91Bsv5vY7qXVnhXrn2YqRAmjyP3v hs3GWsfE4IeQqEt9ZpLpsUUVgdi5JLp+7OFc+bOqZakenHNV9ht1QRGoZ1BIkWF2 QEozfpzmqHlgX2Fb2vKkPx5aoJmUyKWmFVQdAgyxaWwDubQab1l3+vIZAmlr+YXq 7ptGuNacu7M1bNXAWf37vh5obshJFIKwHLj7K2OJHmjy8fm1zwudWSlEvS2mih5N qU/CU8J8viUWMqgaKFK1mwcLjcXE5i+yZGtYaTC/P9eMJ41YMpgZ4Hl/ZQ4tV1ec UigEjWu2Lux0NRk4+cfqycctPP7Wr0J3 -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org