$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft File: QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json) Hash identifier: 6/9qjTU5hBsNAMDj3u6g0BMsvhSnViFusYF+Zd0w9GM= Subject key identifier: 02:C3:70:50:20:01:BA:AE:FD:06:1B:DC:08:39:2C:20:02:C0:F1:25 Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 Certificate issuer: /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft Manifest number: 0172 Signing time: Sun 19 May 2024 04:48:14 +0000 Manifest this update: Sun 19 May 2024 04:48:13 +0000 Manifest next update: Sun 26 May 2024 04:48:13 +0000 Files and hashes: 1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: O55iwbkKQSzo3lEfV2Qq0ruPE9eGltlqGDVodinSNP8=) 2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: yRAPnTe/VZO2b05uWY4SgOt//CLBO/66/YgOza0zWD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Validity Not Before: May 19 04:48:13 2024 GMT Not After : May 26 04:48:13 2024 GMT Subject: CN=6649848d-0b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:d3:2c:3a:bc:50:d9:0b:29:86:e6:ab:3b: b4:5f:91:e3:33:07:f6:92:d8:29:d9:45:bb:ac:87: 03:ea:bf:86:63:9b:85:ad:69:69:02:e3:55:f4:c3: 5c:98:a5:9f:f5:96:a5:ce:41:2e:54:a2:45:87:69: 3b:b6:fa:d6:dd:da:9d:4c:b9:7a:40:67:f3:92:76: e4:58:10:92:ba:1f:52:ab:59:3f:3c:fd:f0:a2:c2: df:a4:4f:63:c1:b8:91:bb:b2:bc:ee:f4:7c:b6:67: 69:17:7d:98:54:01:bb:9d:62:92:b5:0d:ba:f9:f2: 3f:3f:bd:b2:c0:5a:31:9f:f6:29:52:04:4b:93:51: d0:ce:e9:08:91:4a:57:48:f1:6d:80:77:c2:84:07: 3c:05:c4:d4:96:20:9d:11:36:3d:01:d0:81:70:f1: de:65:a9:fd:6c:47:5d:4d:10:de:fc:27:36:01:89: fa:c6:bf:bc:4b:24:87:e4:ac:2f:5d:da:b0:fb:83: cf:26:b5:a2:1f:1e:c4:c1:1a:76:67:a1:ad:5d:2b: 60:ad:3f:a2:67:b4:46:ad:9a:76:36:6c:2c:53:51: 26:3b:f3:42:8a:2e:d7:8e:52:a0:c4:e8:a2:91:9e: 04:1a:4f:1f:01:cd:ac:54:d7:12:ad:f4:cc:9a:57: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C3:70:50:20:01:BA:AE:FD:06:1B:DC:08:39:2C:20:02:C0:F1:25 X509v3 Authority Key Identifier: keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0a:9f:71:b4:82:3a:9f:8c:3e:2a:72:3a:69:2c:1c:58:17: d2:65:28:36:ae:89:32:c9:f2:ba:c4:5e:2d:96:21:cb:c4:74: 90:c2:49:9f:e3:5a:31:f1:64:ff:e0:45:be:18:03:f4:0c:99: 55:4e:42:5b:57:46:72:ad:84:be:6f:38:16:52:3d:b8:c2:5f: b7:cc:45:8b:8e:af:df:ef:7a:64:fe:87:c7:04:8f:a0:ee:2a: 92:95:91:fa:11:c3:92:19:a3:d7:ae:b6:30:ce:b2:97:4e:b0: 00:a2:93:67:66:db:a3:67:78:11:b6:20:9d:a0:6b:39:b3:54: bb:46:82:c4:34:b4:33:9e:36:a1:17:ab:ee:b0:af:b9:5f:b9: 30:a5:0d:13:61:ff:af:dc:93:25:b3:d9:d5:c7:a0:4c:76:43: f2:c4:e3:e7:fa:a8:de:18:a1:9e:18:9b:19:a3:f6:69:0c:5a: c4:56:6f:e5:e8:d1:a7:48:b9:21:6f:d0:fd:36:f2:39:57:c4: 49:28:cc:5c:11:3b:1a:4c:ce:37:9d:e2:96:5e:a5:3e:48:4a: 29:53:8b:8f:61:64:64:09:82:c1:ea:a6:fc:b3:65:3e:ae:4c: a9:5d:d5:c2:d7:05:8a:f7:e4:d6:ed:33:d8:84:b5:7a:29:5f: 3a:37:58:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NjUxMTAvBgNVBAUTKDQwNDJENkU2Mzc5RUQ4MDQyNDhCMzYwREVEOTg1RUY3 RjU2NTIwMTEwHhcNMjQwNTE5MDQ0ODEzWhcNMjQwNTI2MDQ0ODEzWjAYMRYwFAYD VQQDEw02NjQ5ODQ4ZC0wYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiTTLDq8UNkLKYbmqzu0X5HjMwf2ktgp2UW7rIcD6r+GY5uFrWlpAuNV9MNc mKWf9ZalzkEuVKJFh2k7tvrW3dqdTLl6QGfzknbkWBCSuh9Sq1k/PP3wosLfpE9j wbiRu7K87vR8tmdpF32YVAG7nWKStQ26+fI/P72ywFoxn/YpUgRLk1HQzukIkUpX SPFtgHfChAc8BcTUliCdETY9AdCBcPHeZan9bEddTRDe/Cc2AYn6xr+8SySH5Kwv Xdqw+4PPJrWiHx7EwRp2Z6GtXStgrT+iZ7RGrZp2NmwsU1EmO/NCii7XjlKgxOii kZ4EGk8fAc2sVNcSrfTMmleOZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALDcFAg Abqu/QYb3Ag5LCACwPElMB8GA1UdIwQYMBaAFEBC1uY3ntgEJIs2De2YXvf1ZSAR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ2NS9ENjBGMDI3MjI4 QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJBUWtpellON1poZTlfVmxJ QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FFTFc1amVlMkFRa2l6WU43WmhlOV9WbElCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ2NS9ENjBGMDI3MjI4QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJB UWtpellON1poZTlfVmxJQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZCp9xtII6n4w+KnI6aSwcWBfSZSg2rokyyfK6xF4tliHLxHSQwkmf 41ox8WT/4EW+GAP0DJlVTkJbV0ZyrYS+bzgWUj24wl+3zEWLjq/f73pk/ofHBI+g 7iqSlZH6EcOSGaPXrrYwzrKXTrAAopNnZtujZ3gRtiCdoGs5s1S7RoLENLQznjah F6vusK+5X7kwpQ0TYf+v3JMls9nVx6BMdkPyxOPn+qjeGKGeGJsZo/ZpDFrEVm/l 6NGnSLkhb9D9NvI5V8RJKMxcETsaTM43neKWXqU+SEopU4uPYWRkCYLB6qb8s2U+ rkypXdXC1wWK9+TW7TPYhLV6KV86N1iy -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org