$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: 4ezzQTaTZKxScr2XoJBw1RPuD/xvWDxXJxVaAw0sKdQ= Subject key identifier: 20:06:A8:30:24:78:D3:89:4E:9E:51:6A:10:32:F8:33:94:A3:B7:4D Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 13C8 Signing time: Sat 04 May 2024 19:41:00 +0000 Manifest this update: Sat 04 May 2024 19:40:59 +0000 Manifest next update: Sat 11 May 2024 19:40:59 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: sLmiP0HG5a6BNCvlv1kxz88qP+CRFMKtZ27xTGvJih4=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: lb8koNH0tsfODiSJbApq4LMiIBQ5IJ6YLtZVYxbBVPw=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: /FiMeyuHKDA20o81mtGUnwRCfVtIbG4x2iNcPMP17TA=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: XQ2zy7WOFMaRHWKqhzFGGsg6ca5aKYi9EoOBQsldads=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: May 4 19:40:59 2024 GMT Not After : May 11 19:40:59 2024 GMT Subject: CN=66368f4c-f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:4e:e8:3e:67:47:9d:2b:4a:fa:fa:33:0d: db:60:7a:c8:bb:5b:56:49:69:2b:cc:b9:c7:84:75: 00:73:f7:53:32:1a:06:9a:fc:5e:13:7e:2c:29:20: da:4d:98:c6:1f:e7:2f:ce:cd:22:ae:bb:b4:d4:2e: 87:95:76:2b:80:1b:0c:64:6e:98:59:fc:4a:f8:ee: ba:03:9d:9f:f0:34:bb:ab:af:58:a9:43:a1:10:3f: 51:5f:4c:b6:0c:2f:69:ff:51:8b:8d:af:f6:0f:01: 91:c8:e5:c4:f0:05:e7:ad:e4:4f:99:d6:93:23:2e: c4:e4:a4:fd:07:65:5b:5a:93:eb:12:3e:1a:db:fa: f2:65:00:b8:77:4e:1f:22:5a:9c:27:eb:df:df:45: 11:68:28:01:67:27:d4:66:7a:aa:2d:e9:3b:0f:51: 0d:e5:9e:6b:28:50:e7:bd:b3:e1:10:48:2a:9d:e2: 34:98:88:88:6c:f0:28:40:c3:1f:ef:86:8b:76:65: 14:b3:78:f7:d8:84:d3:76:46:29:4f:57:b9:1f:ef: 5f:8d:a4:f6:08:e9:39:0f:15:7c:ab:44:12:36:e7: 25:4f:9a:0e:f2:90:51:dd:47:e9:b9:c2:b2:a0:fc: 64:94:26:1c:b8:12:db:bf:ad:0f:3d:e4:19:a2:3a: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:06:A8:30:24:78:D3:89:4E:9E:51:6A:10:32:F8:33:94:A3:B7:4D X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b3:92:7a:0f:58:bb:bb:61:75:60:aa:99:af:d8:3b:81:36: 6f:e1:46:cd:d9:e9:bc:b1:8e:87:24:4e:76:aa:86:7f:dd:9a: 3f:78:0f:f2:12:f8:25:45:1f:28:e2:d8:a6:b4:22:68:85:10: 91:1f:8c:47:82:15:0b:58:28:51:34:34:60:6e:e0:86:f6:bf: 93:97:ae:17:18:a2:ca:0d:3f:4c:41:20:8d:68:15:42:3b:ec: 52:18:06:ab:91:de:81:b5:7f:da:5a:3b:fb:e3:f7:84:f8:df: d1:00:b5:ff:a9:fb:c4:bf:b9:bf:a1:b8:fb:6e:84:f9:13:f7: c6:31:26:28:0c:80:46:fe:c3:f6:21:a4:f7:21:d4:c3:ba:1c: 32:47:e0:b0:92:b7:2f:52:ec:9d:2d:93:c4:f8:64:78:42:d8: 59:a0:32:5d:96:61:0f:2a:de:50:0d:b6:67:16:1c:1e:4c:9b: 6e:8d:07:91:4a:15:a3:17:89:e5:7a:5c:6c:10:5f:ec:50:8b: d7:94:6f:23:57:5f:76:e8:d8:55:f2:30:42:fb:3f:8b:2d:05: 36:7f:61:5f:81:b6:e6:a2:d2:06:e3:84:de:52:fb:4f:3a:10: 45:9d:11:41:91:a6:3e:e7:68:c5:3c:81:29:56:e2:59:35:ce: 92:d2:c4:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjQwNTA0MTk0MDU5WhcNMjQwNTExMTk0MDU5WjAYMRYwFAYD VQQDEw02NjM2OGY0Yy1mMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3shO6D5nR50rSvr6Mw3bYHrIu1tWSWkrzLnHhHUAc/dTMhoGmvxeE34sKSDa TZjGH+cvzs0irru01C6HlXYrgBsMZG6YWfxK+O66A52f8DS7q69YqUOhED9RX0y2 DC9p/1GLja/2DwGRyOXE8AXnreRPmdaTIy7E5KT9B2VbWpPrEj4a2/ryZQC4d04f IlqcJ+vf30URaCgBZyfUZnqqLek7D1EN5Z5rKFDnvbPhEEgqneI0mIiIbPAoQMMf 74aLdmUUs3j32ITTdkYpT1e5H+9fjaT2COk5DxV8q0QSNuclT5oO8pBR3UfpucKy oPxklCYcuBLbv60PPeQZojrQPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAGqDAk eNOJTp5RahAy+DOUo7dNMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjs5J6D1i7u2F1YKqZr9g7gTZv4UbN2em8sY6HJE52qoZ/3Zo/eA/y EvglRR8o4timtCJohRCRH4xHghULWChRNDRgbuCG9r+Tl64XGKLKDT9MQSCNaBVC O+xSGAarkd6BtX/aWjv74/eE+N/RALX/qfvEv7m/obj7boT5E/fGMSYoDIBG/sP2 IaT3IdTDuhwyR+CwkrcvUuydLZPE+GR4QthZoDJdlmEPKt5QDbZnFhweTJtujQeR ShWjF4nlelxsEF/sUIvXlG8jV1926NhV8jBC+z+LLQU2f2FfgbbmotIG44TeUvtP OhBFnRFBkaY+52jFPIEpVuJZNc6S0sQH -----END CERTIFICATE-----Generated at Sat May 4 21:19:28 2024 by rpki-client on console-ams.rpki-client.org