$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: PdEUFhLQHZnqNvgepe4ndPbO4FfByxsPpy3frnbiU38= Subject key identifier: 40:AE:E3:32:C3:FD:71:F8:05:C5:82:5D:6C:21:1A:54:60:47:B0:F2 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 0163 Signing time: Sun 19 May 2024 04:51:27 +0000 Manifest this update: Sun 19 May 2024 04:51:27 +0000 Manifest next update: Sun 26 May 2024 04:51:27 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: XyJ2wLFBo+cxEp+v+L0AfL7vYoCYIvlfYzWAkwxB+Cc=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: pnsTfa/fBh+ut4z6WJwG9DuwzdbUbJpdmAmyIyR8oG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: May 19 04:51:27 2024 GMT Not After : May 26 04:51:27 2024 GMT Subject: CN=6649854f-bfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:72:e4:26:46:ff:3d:8d:af:18:9f:d0:63: 07:41:7b:5c:4e:7c:28:14:eb:87:5f:9a:b2:94:4a: 6c:56:ba:96:6f:5c:dd:d9:2f:7c:35:c4:43:c6:56: d5:f4:70:e3:8b:19:5a:bf:05:85:50:fe:bf:05:af: a0:a0:e6:65:95:95:e9:4e:77:d5:84:6c:62:a8:2f: b8:ab:17:ef:93:0d:53:1a:3a:99:76:34:10:a4:1c: 75:fb:23:50:d5:69:86:ab:40:aa:18:da:9f:94:7c: 60:55:f4:15:f4:e6:b9:58:e1:8d:ce:53:c2:c0:99: 80:90:70:40:67:89:ff:0e:4a:d3:35:43:4e:97:61: 33:36:41:05:08:bb:0c:c3:71:7a:dd:19:53:ec:09: 45:01:cc:d1:5d:d0:54:31:43:6b:97:84:ef:d7:f3: cf:15:47:c3:3b:49:e5:39:55:90:92:1f:36:4d:3d: 94:19:b8:90:b4:41:42:09:77:65:f7:c5:3b:c8:b5: 63:c7:39:27:55:c2:a9:86:11:70:65:4d:a0:b2:e1: 72:d6:19:c0:9b:be:ac:d3:38:0a:8a:9f:9f:c0:e1: cb:3a:cb:d4:ea:8c:1f:ce:ca:41:ae:19:66:5b:61: 75:7a:ee:94:67:9e:a1:70:a9:a1:f0:6a:26:16:0e: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:E3:32:C3:FD:71:F8:05:C5:82:5D:6C:21:1A:54:60:47:B0:F2 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:70:7a:60:58:20:31:5c:48:8d:a1:0d:b1:f6:17:7d:a9:35: 67:35:68:47:6b:ee:6d:7d:51:24:78:82:32:7d:fb:67:12:64: 94:9f:f2:ad:60:ad:79:52:04:12:1a:a6:c3:db:20:ba:e5:4d: f7:bf:81:a3:e8:05:5b:42:5a:3c:1b:51:22:96:5a:72:3b:3d: 61:59:c5:17:03:7f:8f:f1:43:2d:bd:c2:eb:9c:f4:a7:f5:d1: 78:ee:5a:2c:4d:cd:d7:c0:82:b5:24:00:c3:b7:7c:d5:a6:b0: 82:47:88:c7:bb:5d:4a:f7:04:7d:5a:ea:a0:ea:2b:e8:46:18: d3:69:ef:0d:52:2c:9d:5a:11:21:2d:2e:85:a2:e4:b6:07:47: 03:01:1b:43:04:41:da:7d:9a:40:4e:59:f7:98:ee:af:fe:e3: a0:e8:ec:f1:23:fc:15:44:cd:c6:c4:5c:b8:89:df:91:16:2c: 3f:01:83:80:f4:16:25:af:5a:83:2c:19:d5:fd:f8:3f:a5:39: 01:cb:82:52:cb:25:ed:12:61:9c:77:28:66:3a:01:22:94:fb: 99:fb:62:cf:c8:74:35:95:4f:20:74:13:8e:af:1e:8a:da:32: 0f:3c:a2:cd:80:1b:f7:a1:37:2d:96:99:66:bf:ad:d5:6c:2e: 3c:34:0e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjQwNTE5MDQ1MTI3WhcNMjQwNTI2MDQ1MTI3WjAYMRYwFAYD VQQDEw02NjQ5ODU0Zi1iZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7Ny5CZG/z2Nrxif0GMHQXtcTnwoFOuHX5qylEpsVrqWb1zd2S98NcRDxlbV 9HDjixlavwWFUP6/Ba+goOZllZXpTnfVhGxiqC+4qxfvkw1TGjqZdjQQpBx1+yNQ 1WmGq0CqGNqflHxgVfQV9Oa5WOGNzlPCwJmAkHBAZ4n/DkrTNUNOl2EzNkEFCLsM w3F63RlT7AlFAczRXdBUMUNrl4Tv1/PPFUfDO0nlOVWQkh82TT2UGbiQtEFCCXdl 98U7yLVjxzknVcKphhFwZU2gsuFy1hnAm76s0zgKip+fwOHLOsvU6owfzspBrhlm W2F1eu6UZ56hcKmh8GomFg6bmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECu4zLD /XH4BcWCXWwhGlRgR7DyMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdcHpgWCAxXEiNoQ2x9hd9qTVnNWhHa+5tfVEkeIIyfftnEmSUn/Kt YK15UgQSGqbD2yC65U33v4Gj6AVbQlo8G1EillpyOz1hWcUXA3+P8UMtvcLrnPSn 9dF47losTc3XwIK1JADDt3zVprCCR4jHu11K9wR9Wuqg6ivoRhjTae8NUiydWhEh LS6FouS2B0cDARtDBEHafZpATln3mO6v/uOg6OzxI/wVRM3GxFy4id+RFiw/AYOA 9BYlr1qDLBnV/fg/pTkBy4JSyyXtEmGcdyhmOgEilPuZ+2LPyHQ1lU8gdBOOrx6K 2jIPPKLNgBv3oTctlplmv63VbC48NA4d -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org