$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: XTqQMn9f8owukiGsvszfLfU55Sik7Z15VCxC1DJcOXI= Subject key identifier: 53:45:DD:42:EE:E2:AF:F3:93:71:3C:56:E5:1E:79:F5:90:99:EE:3D Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 013B Signing time: Sat 01 Jun 2024 06:12:29 +0000 Manifest this update: Sat 01 Jun 2024 06:12:28 +0000 Manifest next update: Sat 08 Jun 2024 06:12:28 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: l6YcMENuSJKoY9YrNfGuzQ7uLLpLwaZaZjUzai/ZaWw=) 2: 6864FC4A433211EDB64D3261C4F9AE02.roa (hash: bnDE6OPWu+v9xdDCD/WjTkNUrfmkzuhsasZ5iZXq4Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Jun 1 06:12:28 2024 GMT Not After : Jun 8 06:12:28 2024 GMT Subject: CN=665abbcc-f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:4a:a2:78:4f:96:24:31:07:80:de:d3:47: d5:e6:76:19:d8:ad:c3:96:c1:9f:cb:5d:63:78:b0: dc:9e:2c:f0:e3:06:85:59:4a:55:90:6a:4c:9a:41: d5:e5:95:bc:65:c1:0f:5a:75:6b:d1:89:6f:71:24: cc:88:0f:23:6e:68:33:a3:08:df:a9:ff:7b:81:62: 6e:2c:ed:b6:f3:5d:d9:8f:91:73:ac:b3:c6:15:e5: 59:5d:17:1b:27:56:fb:35:da:03:04:ab:d6:f7:c6: 3a:b0:03:da:c2:9a:91:a0:0e:b0:04:bc:6a:94:86: 47:00:a9:9a:aa:e7:75:5e:e9:0a:ed:9e:2d:36:9d: c4:11:06:28:2d:e5:8e:a1:44:1c:2f:1c:34:82:1c: 1c:06:16:78:3e:18:4b:35:2c:03:4b:a4:d4:48:83: 43:8f:ef:dd:02:cd:24:22:4f:e3:e2:b1:6c:45:0a: e0:ff:82:79:2d:27:8d:bc:7d:05:35:12:b8:03:54: 8c:08:00:16:78:ea:c5:75:ac:35:83:b0:ac:56:f2: 4c:a9:84:ff:5c:68:1e:81:b1:40:77:34:1c:12:51: cc:c6:fb:d1:05:75:dd:5a:84:9c:34:b2:ec:5a:54: eb:41:81:cb:4b:8e:b8:bc:d3:c2:2b:2d:b6:c8:5d: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:45:DD:42:EE:E2:AF:F3:93:71:3C:56:E5:1E:79:F5:90:99:EE:3D X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:10:2e:06:ae:2d:7e:03:f6:e0:77:49:90:05:d1:91:98:26: 98:d3:72:c3:f6:8e:03:00:fc:af:fe:3a:b6:57:8e:c3:d6:84: 36:09:09:1e:f4:27:ea:fd:8b:64:fc:ba:62:f0:c3:6d:70:df: 41:66:c3:96:56:a3:94:c6:00:71:86:3b:94:55:c6:5b:25:39: 4b:e4:aa:b3:4c:33:6a:10:af:12:cf:87:be:0d:06:07:95:e8: ad:67:d9:ff:21:87:14:41:0a:9e:6f:8a:f9:40:fc:b1:a9:56: 4f:69:14:9f:b5:03:46:dd:32:dd:30:03:b7:bb:56:6f:4c:5a: 78:bd:11:51:3b:b8:cc:6d:cd:a5:40:aa:7f:88:b2:64:13:10: 3c:23:ba:a9:66:73:14:2c:63:1e:81:a0:65:83:f0:4f:8f:de: 94:14:79:4b:3e:9d:f4:e1:20:ef:b9:f2:3a:7e:41:6c:5f:5a: 16:83:76:62:d6:ba:26:86:7b:3c:ee:10:46:45:8f:c8:6b:9a: 1c:75:bb:e0:e8:d5:2e:06:cf:85:c6:1a:ed:59:09:08:cf:8d: 19:eb:09:17:a5:2d:e6:41:f3:ed:46:c5:47:b3:48:b2:76:d6: 46:77:8a:9b:8e:c1:3a:00:f9:24:f2:fc:ce:b7:de:9d:be:38: dd:ce:a5:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjQwNjAxMDYxMjI4WhcNMjQwNjA4MDYxMjI4WjAYMRYwFAYD VQQDEw02NjVhYmJjYy1mMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ZKonhPliQxB4De00fV5nYZ2K3DlsGfy11jeLDcnizw4waFWUpVkGpMmkHV 5ZW8ZcEPWnVr0YlvcSTMiA8jbmgzowjfqf97gWJuLO22813Zj5FzrLPGFeVZXRcb J1b7NdoDBKvW98Y6sAPawpqRoA6wBLxqlIZHAKmaqud1XukK7Z4tNp3EEQYoLeWO oUQcLxw0ghwcBhZ4PhhLNSwDS6TUSINDj+/dAs0kIk/j4rFsRQrg/4J5LSeNvH0F NRK4A1SMCAAWeOrFdaw1g7CsVvJMqYT/XGgegbFAdzQcElHMxvvRBXXdWoScNLLs WlTrQYHLS464vNPCKy22yF0FOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNF3ULu 4q/zk3E8VuUeefWQme49MB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClEC4Gri1+A/bgd0mQBdGRmCaY03LD9o4DAPyv/jq2V47D1oQ2CQke 9Cfq/Ytk/Lpi8MNtcN9BZsOWVqOUxgBxhjuUVcZbJTlL5KqzTDNqEK8Sz4e+DQYH leitZ9n/IYcUQQqeb4r5QPyxqVZPaRSftQNG3TLdMAO3u1ZvTFp4vRFRO7jMbc2l QKp/iLJkExA8I7qpZnMULGMegaBlg/BPj96UFHlLPp304SDvufI6fkFsX1oWg3Zi 1romhns87hBGRY/Ia5ocdbvg6NUuBs+FxhrtWQkIz40Z6wkXpS3mQfPtRsVHs0iy dtZGd4qbjsE6APkk8vzOt96dvjjdzqUh -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:19 2024 by rpki-client on console-fra.rpki-client.org