$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: Jwb1MBugxYcOC2xDWPYfU5ku2cJ2gbE7UtecS1trpA0= Subject key identifier: 91:77:7A:B3:C6:70:A0:1A:4A:B8:71:C4:05:AA:90:65:E6:F6:FC:A7 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 26F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 26E4 Signing time: Sat 18 May 2024 15:55:39 +0000 Manifest this update: Sat 18 May 2024 15:55:38 +0000 Manifest next update: Sat 25 May 2024 15:55:38 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: 2c41z3pi/kmaIxcIqwtQXGFRN9DxUsGSQkVFjeIeBws=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: 8sGGt+SGiHPQcIk4RPk18gyGscIwkxemOo4LxPmvMKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9971 (0x26f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: May 18 15:55:38 2024 GMT Not After : May 25 15:55:38 2024 GMT Subject: CN=6648cf7a-d93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:a4:f8:31:7f:a5:1a:08:49:0f:a6:e7:d7: 8b:c7:41:4f:e0:52:ab:d4:b3:3f:29:4e:03:1d:2c: ed:20:3f:93:25:95:35:7f:20:76:c6:bc:57:20:b7: fb:23:7b:15:aa:9e:c2:3a:cd:f7:e4:28:da:2e:d0: e9:c5:c1:59:de:44:41:11:ac:60:64:22:df:c7:92: 31:b7:17:fc:0e:68:93:ca:88:84:89:6f:2e:2c:7c: c9:49:3e:14:b2:c8:8e:2b:78:fa:d0:2e:6c:2d:35: 69:d3:85:42:9f:0b:12:de:70:31:c0:ab:fb:09:bc: a0:55:29:35:16:94:45:c2:ce:f8:aa:07:e0:64:a1: 94:67:5f:f5:b1:98:e8:9f:8a:0d:b0:3a:65:a7:ab: b4:99:7a:e6:fa:05:58:09:2a:a4:e7:18:94:ba:67: e6:2a:b4:ef:96:4a:2a:4b:89:60:a1:99:6b:88:60: 95:c4:3d:c2:a3:3c:1e:93:f9:23:be:fa:58:19:5e: 70:9b:8e:21:7b:20:33:cb:5d:39:35:c5:36:9a:64: 24:d5:f2:a0:fb:ab:86:2d:ef:cb:e2:e6:28:6e:52: ae:50:6b:88:40:c7:c6:70:76:37:61:b4:2f:5e:0e: ee:de:f6:9a:50:81:ad:ef:40:47:97:7b:43:fe:f1: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:7A:B3:C6:70:A0:1A:4A:B8:71:C4:05:AA:90:65:E6:F6:FC:A7 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:19:03:24:0d:2a:5a:89:dd:a9:b0:c1:f8:3b:95:6b:a2:0e: 32:2f:77:c2:18:2b:8c:99:89:ef:0c:fc:42:5c:99:6b:09:48: 07:c5:c7:42:f7:ea:ba:3b:02:9b:4a:e0:6b:9f:d4:1f:43:43: 00:e9:3e:94:1a:64:c8:63:ac:2d:53:4e:4d:f9:9a:16:cd:18: 2a:46:4e:d7:31:3b:25:47:a3:43:94:c2:bd:68:a1:d1:1e:c1: 53:ca:2d:e9:57:0d:7e:f8:bf:24:23:cd:11:4e:d3:f4:52:63: 1e:29:05:04:7e:1c:1f:3c:de:fe:ef:0a:03:c7:94:fe:e9:02: 39:f6:c5:03:f4:77:f1:b1:07:39:99:c0:12:9c:71:20:ba:4f: ea:81:55:1f:1c:76:b3:c7:77:4d:e3:4e:f4:8a:0a:3d:22:d0: bf:7f:4e:d0:f5:84:d3:c2:0b:b8:9b:46:27:b6:ea:99:30:39: 0e:26:d0:23:15:2f:95:d5:f0:b3:bf:b7:f4:ce:16:31:43:70: 10:59:86:79:31:79:bb:8a:92:c9:c9:93:3e:c8:4e:86:e3:b1: 48:01:95:30:16:93:cb:fd:66:e7:17:88:ed:98:27:48:58:cb: 18:00:a0:29:b5:bb:bf:cf:33:4b:d3:74:3a:79:85:d3:60:ff: 01:da:02:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjQwNTE4MTU1NTM4WhcNMjQwNTI1MTU1NTM4WjAYMRYwFAYD VQQDEw02NjQ4Y2Y3YS1kOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Iuk+DF/pRoISQ+m59eLx0FP4FKr1LM/KU4DHSztID+TJZU1fyB2xrxXILf7 I3sVqp7COs335CjaLtDpxcFZ3kRBEaxgZCLfx5Ixtxf8DmiTyoiEiW8uLHzJST4U ssiOK3j60C5sLTVp04VCnwsS3nAxwKv7CbygVSk1FpRFws74qgfgZKGUZ1/1sZjo n4oNsDplp6u0mXrm+gVYCSqk5xiUumfmKrTvlkoqS4lgoZlriGCVxD3Cozwek/kj vvpYGV5wm44heyAzy105NcU2mmQk1fKg+6uGLe/L4uYoblKuUGuIQMfGcHY3YbQv Xg7u3vaaUIGt70BHl3tD/vFrhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF3erPG cKAaSrhxxAWqkGXm9vynMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQGQMkDSpaid2psMH4O5Vrog4yL3fCGCuMmYnvDPxCXJlrCUgHxcdC 9+q6OwKbSuBrn9QfQ0MA6T6UGmTIY6wtU05N+ZoWzRgqRk7XMTslR6NDlMK9aKHR HsFTyi3pVw1++L8kI80RTtP0UmMeKQUEfhwfPN7+7woDx5T+6QI59sUD9HfxsQc5 mcASnHEguk/qgVUfHHazx3dN4070igo9ItC/f07Q9YTTwgu4m0YntuqZMDkOJtAj FS+V1fCzv7f0zhYxQ3AQWYZ5MXm7ipLJyZM+yE6G47FIAZUwFpPL/WbnF4jtmCdI WMsYAKAptbu/zzNL03Q6eYXTYP8B2gJQ -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org