$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: dXGqhHi6XpKZbl1ugiTTPc8LOqiBADbC1i/prGMjPMM= Subject key identifier: 3D:E2:94:D1:50:86:77:09:92:74:F7:B1:D8:F8:61:96:FA:EE:B5:E0 Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 0855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 084F Signing time: Sat 18 May 2024 21:40:14 +0000 Manifest this update: Sat 18 May 2024 21:40:14 +0000 Manifest next update: Sat 25 May 2024 21:40:14 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: cOF9DLeK5ZxZyxW1DdjIAlTWe+sqEu+1knVQcPrb1/A=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: XjI//uz3MIHrje/lHeiBp2v7ZWt9cLzLUWC9pX6gjb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Validity Not Before: May 18 21:40:14 2024 GMT Not After : May 25 21:40:14 2024 GMT Subject: CN=6649203e-a329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:94:17:d3:d7:59:c4:8d:f8:b8:40:95:26: 71:fa:2d:93:ae:81:07:97:ee:0b:08:e7:48:0d:82: 1b:54:aa:82:53:d4:e4:51:af:38:10:76:96:05:b2: 0b:e1:26:c5:e9:1f:4e:71:13:69:f9:8b:fd:de:20: 20:05:61:d8:0a:87:37:02:78:ad:8c:8e:5c:71:07: 55:d5:1d:41:dd:0a:ec:fc:5d:f6:0a:27:52:14:02: 48:9f:7f:6e:9d:9d:e2:94:53:93:c7:c2:0a:32:46: 51:ae:26:c5:90:c2:02:4e:13:e5:4d:41:20:86:53: c7:64:27:c8:f0:0d:ef:bb:2b:89:e9:40:c0:a4:e4: 83:5c:cd:fc:92:7a:6d:ce:72:83:32:f3:63:1a:59: 27:bf:ef:60:40:00:45:6f:66:d2:2a:14:46:0e:92: 06:05:4c:1c:b2:85:43:84:c2:59:16:ce:18:c8:88: 32:89:3c:ee:8c:b8:03:52:7e:ee:2f:41:29:0e:15: 80:f1:b5:6f:56:b8:c7:bc:c6:3f:11:d3:bb:59:ab: ea:94:2a:cf:35:37:06:34:7b:99:b7:72:08:24:34: f8:5d:42:a7:78:94:97:99:15:96:b1:3d:ee:dd:23: 1b:8b:14:6e:af:92:43:d9:23:8c:f5:9e:0f:ac:e7: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:94:D1:50:86:77:09:92:74:F7:B1:D8:F8:61:96:FA:EE:B5:E0 X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:22:d7:9e:e4:20:ec:ab:6f:7a:eb:43:94:67:c0:b9:48:51: fc:e4:b9:bd:fe:a3:e9:07:d0:6a:a4:9f:23:26:d7:6e:8b:fd: 8f:43:1e:a1:14:9f:ab:60:63:39:9d:1d:3b:dc:2d:64:df:fb: 62:8f:eb:cb:d6:d8:4d:40:b8:06:77:3a:41:1d:af:10:20:c2: ba:c8:35:40:46:af:d6:5c:2c:11:66:2c:d6:48:6e:da:75:34: c3:50:97:5d:e4:1c:1d:07:f5:39:5c:dc:5f:18:fa:99:73:1d: 91:66:d9:8d:74:ea:ae:8a:19:59:08:53:51:59:6b:fb:9f:5a: b4:ab:7f:28:3a:61:bd:14:47:2f:92:76:16:6d:50:9e:16:1b: 27:e8:bb:29:bc:74:7f:13:c5:16:40:cb:9c:11:3e:c6:54:02: 7d:3b:22:8d:0f:e6:25:a8:99:78:72:de:2a:2d:95:10:aa:27: 32:51:d8:db:a9:bd:fa:3d:07:c4:95:3d:75:bb:8e:9d:a5:5c: 35:4e:d5:be:be:04:1f:07:6c:a1:39:7f:32:21:3c:b9:e6:cf: ab:42:3a:47:d1:a4:12:b6:5d:f5:e3:6f:e8:b2:82:31:89:20: 2c:6f:2f:52:03:9b:6b:f7:f2:81:09:7f:d6:cb:ee:69:cc:73: e5:21:40:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjQwNTE4MjE0MDE0WhcNMjQwNTI1MjE0MDE0WjAYMRYwFAYD VQQDEw02NjQ5MjAzZS1hMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WeUF9PXWcSN+LhAlSZx+i2TroEHl+4LCOdIDYIbVKqCU9TkUa84EHaWBbIL 4SbF6R9OcRNp+Yv93iAgBWHYCoc3AnitjI5ccQdV1R1B3Qrs/F32CidSFAJIn39u nZ3ilFOTx8IKMkZRribFkMICThPlTUEghlPHZCfI8A3vuyuJ6UDApOSDXM38knpt znKDMvNjGlknv+9gQABFb2bSKhRGDpIGBUwcsoVDhMJZFs4YyIgyiTzujLgDUn7u L0EpDhWA8bVvVrjHvMY/EdO7WavqlCrPNTcGNHuZt3IIJDT4XUKneJSXmRWWsT3u 3SMbixRur5JD2SOM9Z4PrOcxTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3ilNFQ hncJknT3sdj4YZb67rXgMB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyItee5CDsq29660OUZ8C5SFH85Lm9/qPpB9BqpJ8jJtdui/2PQx6h FJ+rYGM5nR073C1k3/tij+vL1thNQLgGdzpBHa8QIMK6yDVARq/WXCwRZizWSG7a dTTDUJdd5BwdB/U5XNxfGPqZcx2RZtmNdOquihlZCFNRWWv7n1q0q38oOmG9FEcv knYWbVCeFhsn6LspvHR/E8UWQMucET7GVAJ9OyKND+YlqJl4ct4qLZUQqicyUdjb qb36PQfElT11u46dpVw1TtW+vgQfB2yhOX8yITy55s+rQjpH0aQStl3142/osoIx iSAsby9SA5tr9/KBCX/Wy+5pzHPlIUBC -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org