$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft File: q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json) Hash identifier: JnEZWsDQjI24bPBx3FW9dy2fFVPAr0579Hhi41qOa0c= Subject key identifier: 3E:FB:D2:4D:3F:36:CC:3B:87:D2:7C:30:77:8A:7C:79:74:E7:0E:EE Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 Certificate issuer: /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft Manifest number: 0571 Signing time: Sun 19 May 2024 00:39:58 +0000 Manifest this update: Sun 19 May 2024 00:39:58 +0000 Manifest next update: Sun 26 May 2024 00:39:58 +0000 Files and hashes: 1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: X/7WRckp1DaHc0tXJmEffNYjLw60utLTb4GajJainUA=) 2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: q2FDbtIov7GHvVA7KWT11iYYtdfxfh8S29PJIQQ+SGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Validity Not Before: May 19 00:39:58 2024 GMT Not After : May 26 00:39:58 2024 GMT Subject: CN=66494a5e-4001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:e9:66:a2:16:fe:d8:14:1c:8a:b6:49:43: 30:2b:d0:4c:8c:91:94:c4:ff:a1:3c:e9:51:88:53: 81:50:63:8c:42:81:d6:b1:28:6d:04:06:30:d9:18: 05:31:5e:fe:33:94:84:4b:fb:b5:75:fb:31:fd:2d: 8c:ac:bf:da:e3:be:92:32:2b:90:b3:e2:91:9a:23: 12:04:b8:da:f9:bd:60:cf:1e:fa:28:5b:f7:e1:15: 6a:39:24:89:54:ef:2a:10:26:e5:7e:f2:6d:24:fb: 58:ef:1c:c1:f9:bf:f3:17:91:86:18:b0:d4:40:76: 40:e2:fb:b9:14:1c:39:73:ee:b6:30:6d:fe:55:ca: 48:33:92:bc:0d:81:ef:cb:c3:e6:c4:4b:97:8f:b2: 8f:3e:f9:f4:15:5c:bc:ad:5b:71:43:91:79:40:b1: 04:51:5a:60:01:d3:57:e1:9d:2c:b7:df:f3:7f:fa: ca:ec:30:74:7a:ed:f6:04:9f:66:a6:55:1c:8e:f6: d7:9a:19:13:ed:93:e6:37:25:91:d4:07:8b:c1:8e: 8f:af:a1:6a:ad:58:85:b8:2c:4b:17:06:41:fd:74: 70:89:8a:e9:49:a3:9e:c9:85:69:d5:3a:b8:30:02: cb:d7:cb:97:7f:7d:38:f9:0f:d6:c4:6e:f6:d6:7a: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:D2:4D:3F:36:CC:3B:87:D2:7C:30:77:8A:7C:79:74:E7:0E:EE X509v3 Authority Key Identifier: keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:20:df:c4:fb:e4:f1:3f:40:1e:00:84:0f:8e:89:c0:31:e2: e4:af:5c:7e:03:23:a3:b8:81:e7:f1:af:a3:90:d1:43:2c:93: 49:5e:8e:35:af:d2:94:72:76:a7:57:74:32:51:7f:66:8c:60: 32:60:91:fd:50:f9:e4:13:ae:ee:a8:a4:69:a7:e8:17:f4:9c: 83:63:43:ae:b6:9a:0f:c9:79:60:5f:b3:77:2c:2f:8f:3d:33: 5e:8a:e4:a1:87:30:07:22:7e:33:c6:58:9a:07:0b:92:27:da: 45:06:c8:76:07:a7:21:76:86:50:5a:01:62:12:e1:c1:f3:f5: ad:73:f5:34:7c:e6:23:4e:00:e7:f0:02:c6:8c:f6:a4:fe:e0: 74:18:c8:8d:27:33:59:be:9f:76:97:b9:82:bc:ff:82:97:06: 0b:68:09:19:e5:45:1d:43:6f:1d:a1:09:b0:9b:00:5a:b3:73: b2:a5:25:9f:cd:be:80:21:95:a8:49:46:f4:63:6c:e2:36:6a: 8b:c8:a8:00:09:70:15:02:42:d5:fb:40:02:cd:d7:10:19:e1: 5d:e0:5f:e6:4a:e4:9e:f3:4d:12:8c:22:26:53:fc:5b:2b:4a: 67:25:ee:5e:ec:56:83:ea:a6:43:34:fb:96:7d:6b:83:1b:04: ab:34:2d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NUQxMTAvBgNVBAUTKEFCQTZDMEM0NkNFODg3QTYzOUQwREUwNzEzM0FFMUZG Q0MwRDJEOTEwHhcNMjQwNTE5MDAzOTU4WhcNMjQwNTI2MDAzOTU4WjAYMRYwFAYD VQQDEw02NjQ5NGE1ZS00MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dzpZqIW/tgUHIq2SUMwK9BMjJGUxP+hPOlRiFOBUGOMQoHWsShtBAYw2RgF MV7+M5SES/u1dfsx/S2MrL/a476SMiuQs+KRmiMSBLja+b1gzx76KFv34RVqOSSJ VO8qECblfvJtJPtY7xzB+b/zF5GGGLDUQHZA4vu5FBw5c+62MG3+VcpIM5K8DYHv y8PmxEuXj7KPPvn0FVy8rVtxQ5F5QLEEUVpgAdNX4Z0st9/zf/rK7DB0eu32BJ9m plUcjvbXmhkT7ZPmNyWR1AeLwY6Pr6FqrViFuCxLFwZB/XRwiYrpSaOeyYVp1Tq4 MALL18uXf304+Q/WxG721nrV+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD770k0/ Nsw7h9J8MHeKfHl05w7uMB8GA1UdIwQYMBaAFKumwMRs6IemOdDeBxM64f/MDS2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1RC81NDc1MTVDNjk0 OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2WTUwTjRIRXpyaF84d05M WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2YkF4R3pvaDZZNTBONEhFenJoXzh3TkxaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1RC81NDc1MTVDNjk0OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2 WTUwTjRIRXpyaF84d05MWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByIN/E++TxP0AeAIQPjonAMeLkr1x+AyOjuIHn8a+jkNFDLJNJXo41 r9KUcnanV3QyUX9mjGAyYJH9UPnkE67uqKRpp+gX9JyDY0OutpoPyXlgX7N3LC+P PTNeiuShhzAHIn4zxliaBwuSJ9pFBsh2B6chdoZQWgFiEuHB8/Wtc/U0fOYjTgDn 8ALGjPak/uB0GMiNJzNZvp92l7mCvP+ClwYLaAkZ5UUdQ28doQmwmwBas3OypSWf zb6AIZWoSUb0Y2ziNmqLyKgACXAVAkLV+0ACzdcQGeFd4F/mSuSe800SjCImU/xb K0pnJe5e7FaD6qZDNPuWfWuDGwSrNC2H -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org