$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json) Hash identifier: jdDayMXKuykGhweQxyAAZ/m2UjHfWI+8oYXyB1Lcaw4= Subject key identifier: A3:8E:37:19:86:7E:6A:37:D8:DA:B6:9B:D9:09:3B:DD:9B:24:9C:B7 Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft Manifest number: 0682 Signing time: Sat 18 May 2024 23:30:46 +0000 Manifest this update: Sat 18 May 2024 23:30:45 +0000 Manifest next update: Sat 25 May 2024 23:30:45 +0000 Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: CBq0y5psYCJds9V/cUzTbVcxG50ybmL9+Hsgp4ODWho=) 2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 7TiOJsMX/wgaeKFEpKrzPspRYI7TQpEjsx5oLZcM6fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Validity Not Before: May 18 23:30:45 2024 GMT Not After : May 25 23:30:45 2024 GMT Subject: CN=66493a25-f8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:a5:9d:34:f0:3d:17:14:b2:62:f8:9c:9e: 4f:c1:8b:69:e8:d3:25:9d:0b:29:55:04:31:e0:73: 89:7d:38:b1:30:17:e6:25:f7:11:cc:28:57:88:b4: 74:bc:89:e4:e6:75:cb:24:e2:2d:ad:87:3b:ef:3e: 09:c9:29:23:f4:9f:a0:f8:50:4c:8c:7c:6b:af:1d: fd:1b:59:b6:37:44:90:af:86:d3:98:f2:b9:cf:57: 0a:9e:a5:84:98:42:27:39:a0:f6:34:71:cf:b6:dc: 7d:d1:6e:af:0b:f7:2b:eb:9c:f1:32:0b:b8:34:11: 04:2e:f1:d2:ad:cf:73:48:af:38:48:00:7f:c4:a1: 5e:9c:f2:26:33:a2:92:9b:94:12:69:d2:3d:10:44: f4:9c:f8:19:a6:89:cb:15:53:ec:57:c9:97:00:df: 91:4d:a6:04:31:f9:aa:91:f3:a6:aa:9b:f4:94:4d: 67:7a:21:4b:cf:c3:e8:bc:de:09:8f:fa:1c:53:e9: ff:2f:ac:7d:a8:3d:68:21:d5:d1:17:21:c1:db:eb: 54:f0:f5:63:80:94:b1:48:05:c4:cb:70:b7:c7:8f: 76:02:6e:46:27:2a:20:e8:e4:8a:1c:96:1f:3b:20: 8f:49:da:18:92:5a:95:9f:52:83:07:8a:56:f6:a3: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:37:19:86:7E:6A:37:D8:DA:B6:9B:D9:09:3B:DD:9B:24:9C:B7 X509v3 Authority Key Identifier: keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ce:4a:5b:2f:8d:cf:d7:da:ce:b9:4b:9a:4c:75:5a:9c:84: 2a:a1:26:e4:5b:02:be:40:6c:85:4d:cb:17:f8:0b:ad:90:3d: 19:a7:95:77:9a:e4:a3:be:c2:f6:31:f2:e3:b8:e4:12:d0:06: 6a:13:5f:5c:0f:ce:9a:5d:ae:a8:e1:46:e9:e2:e0:af:11:04: 1e:45:20:31:0c:df:f9:29:20:48:3e:d3:56:0d:a0:c0:ef:1e: 75:2e:8e:e3:4b:b8:5a:a5:e1:71:4e:08:a6:96:16:f6:c3:0f: 9b:a4:09:fd:f9:73:b6:a8:1e:81:dc:1e:76:32:b5:7a:40:a5: df:0f:55:7b:ab:a2:de:85:ad:e5:c1:d8:5d:ff:76:27:2e:b0: 6a:de:64:04:03:49:7b:0a:45:d0:a9:39:e2:09:3a:61:4c:46: 4a:44:16:08:36:01:a5:9b:30:80:14:11:81:71:9f:bd:e3:95: 71:01:1a:d2:4b:d0:d5:04:a2:14:3a:d7:89:e9:24:e2:60:e2: d0:37:80:ca:ad:49:15:32:d4:24:47:b8:de:59:ef:5f:14:b3: 38:66:cd:f9:9d:6b:da:d8:ff:48:cc:9f:1e:04:8f:bc:46:6b: 8c:9e:00:36:0e:b6:58:c3:3b:ad:02:a8:9e:ee:d4:d0:06:f1: 77:8e:e8:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx OUZFMUI4RkIwHhcNMjQwNTE4MjMzMDQ1WhcNMjQwNTI1MjMzMDQ1WjAYMRYwFAYD VQQDEw02NjQ5M2EyNS1mOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR6lnTTwPRcUsmL4nJ5PwYtp6NMlnQspVQQx4HOJfTixMBfmJfcRzChXiLR0 vInk5nXLJOItrYc77z4JySkj9J+g+FBMjHxrrx39G1m2N0SQr4bTmPK5z1cKnqWE mEInOaD2NHHPttx90W6vC/cr65zxMgu4NBEELvHSrc9zSK84SAB/xKFenPImM6KS m5QSadI9EET0nPgZponLFVPsV8mXAN+RTaYEMfmqkfOmqpv0lE1neiFLz8PovN4J j/ocU+n/L6x9qD1oIdXRFyHB2+tU8PVjgJSxSAXEy3C3x492Am5GJyog6OSKHJYf OyCPSdoYklqVn1KDB4pW9qPaqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOONxmG fmo32Nq2m9kJO92bJJy3MB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM QWdPNWppRDlaLUFaX2h1UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuzkpbL43P19rOuUuaTHVanIQqoSbkWwK+QGyFTcsX+AutkD0Zp5V3 muSjvsL2MfLjuOQS0AZqE19cD86aXa6o4Ubp4uCvEQQeRSAxDN/5KSBIPtNWDaDA 7x51Lo7jS7hapeFxTgimlhb2ww+bpAn9+XO2qB6B3B52MrV6QKXfD1V7q6Leha3l wdhd/3YnLrBq3mQEA0l7CkXQqTniCTphTEZKRBYINgGlmzCAFBGBcZ+945VxARrS S9DVBKIUOteJ6STiYOLQN4DKrUkVMtQkR7jeWe9fFLM4Zs35nWva2P9IzJ8eBI+8 RmuMngA2DrZYwzutAqie7tTQBvF3jugc -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org