$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: cIxjbgsJ/3cxUKKwDno6nDslGHwcnwz6//X33iUHiVg= Subject key identifier: E8:DA:35:A0:FB:9D:30:E5:29:DF:92:6F:0B:CA:71:1B:F8:0A:6C:93 Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1B7D Signing time: Fri 31 May 2024 16:49:28 +0000 Manifest this update: Fri 31 May 2024 16:49:28 +0000 Manifest next update: Fri 07 Jun 2024 16:49:28 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: SGHlEUzS7NDLDovCcxUjipztZJ/Rz7Li0ibwhSX50d4=) 2: 8D5941BA0F9F11EFBB79444CC4F9AE02.roa (hash: B5oi6VW+0YqdTM9n4prZkcNzTIyeb9fREez5jojrmhQ=) 3: 2F341A72E93C11EDA61CF335C4F9AE02.roa (hash: M5RGvAdHd9jNB7xOnNh53+PVgXgdcc+v9pWLo+rFyQY=) 4: 798AEACC0F9E11EF859BFC43C4F9AE02.roa (hash: MI05qsSu00SGjIgrMfgPxa7bZm8gm0PX8FZn33slDCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7068 (0x1b9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: May 31 16:49:28 2024 GMT Not After : Jun 7 16:49:28 2024 GMT Subject: CN=6659ff98-381b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:61:b5:b0:c1:30:7e:4b:92:67:78:68:fc: fe:85:af:79:6b:16:d7:9f:1a:5b:58:ee:24:d4:98: 6e:70:75:49:67:c3:ed:d7:9d:9c:37:5a:32:ed:b9: 17:45:45:ec:f4:9d:ab:ab:f9:3c:1d:bc:1a:ad:7d: ee:9c:65:1d:54:ee:92:95:42:99:75:c6:94:6b:b6: 7c:18:2a:6f:4e:68:26:5c:04:fa:25:9c:ad:80:03: 82:5b:e1:86:c0:09:22:b9:08:a2:bb:7f:a4:d4:de: 3b:2b:fb:8b:f3:66:96:66:c1:4a:88:cf:f9:c1:d7: 57:72:7d:18:37:25:cd:19:af:80:cf:3d:fc:bc:1e: 40:3b:9e:f5:46:bd:6e:82:31:34:f9:e0:0d:13:5a: ca:03:41:92:8b:1f:61:a5:28:c2:74:76:ff:62:f1: 56:b3:a3:02:d7:cc:88:18:e3:5f:1a:95:c9:3b:8e: 84:74:9a:7b:94:e0:09:18:7d:f7:53:3f:3f:68:b1: 79:4c:d8:c0:37:6a:1d:c8:6c:f7:5f:2c:e0:61:fe: 90:b3:45:25:ef:de:e9:8c:df:63:3a:3c:c0:ca:29: 0b:f7:2c:28:6a:a7:75:9a:54:36:dc:c6:18:31:d2: 09:a0:d3:28:08:84:ff:0a:b7:42:c7:ec:78:bb:af: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:35:A0:FB:9D:30:E5:29:DF:92:6F:0B:CA:71:1B:F8:0A:6C:93 X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:8d:10:2e:c3:ed:44:37:3a:97:74:3c:9d:da:fc:40:ec:f3: f7:19:0b:ee:7e:65:ab:45:02:03:54:38:bd:07:68:d7:c4:e3: ba:d8:e7:62:aa:48:b3:02:c5:0b:d0:33:a7:e8:9a:00:96:03: 7a:58:6c:aa:2b:2a:1d:4f:a5:e1:83:57:97:e6:3f:93:0a:b2: 40:86:bd:2f:e6:44:c2:dd:a4:e3:0c:71:33:65:ba:aa:fc:32: 08:c5:7d:0d:d1:b4:0c:7c:6f:cf:6b:39:a5:38:46:c1:da:a8: fd:2a:4b:34:b8:f8:52:18:d8:40:51:02:21:83:cb:2a:c1:70: 57:0b:86:98:2e:d8:83:c6:ed:7f:35:af:14:6a:93:8b:06:06: 5b:43:8a:7b:94:d4:07:1e:c9:b4:49:ad:68:6f:6c:af:af:c8: 70:7f:61:c7:fe:7b:ef:67:0e:01:a3:46:a0:14:1d:ad:fa:51: 4c:c0:1b:a1:8f:55:aa:f6:ed:be:c3:29:10:23:2f:e4:03:fb: b2:dd:25:fd:86:18:5e:e9:ae:5f:9b:a9:ff:8f:4c:a0:3b:c6: fb:5a:ae:99:fb:68:57:1e:de:54:99:54:dc:e3:b9:d5:ae:f7: 38:de:de:0f:09:d8:4a:8d:54:93:12:6b:7b:32:52:d9:b4:04: 01:0b:a5:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjQwNTMxMTY0OTI4WhcNMjQwNjA3MTY0OTI4WjAYMRYwFAYD VQQDEw02NjU5ZmY5OC0zODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo5htbDBMH5Lkmd4aPz+ha95axbXnxpbWO4k1JhucHVJZ8Pt152cN1oy7bkX RUXs9J2rq/k8HbwarX3unGUdVO6SlUKZdcaUa7Z8GCpvTmgmXAT6JZytgAOCW+GG wAkiuQiiu3+k1N47K/uL82aWZsFKiM/5wddXcn0YNyXNGa+Azz38vB5AO571Rr1u gjE0+eANE1rKA0GSix9hpSjCdHb/YvFWs6MC18yIGONfGpXJO46EdJp7lOAJGH33 Uz8/aLF5TNjAN2odyGz3XyzgYf6Qs0Ul797pjN9jOjzAyikL9ywoaqd1mlQ23MYY MdIJoNMoCIT/CrdCx+x4u6/qeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjaNaD7 nTDlKd+SbwvKcRv4CmyTMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDljRAuw+1ENzqXdDyd2vxA7PP3GQvufmWrRQIDVDi9B2jXxOO62Odi qkizAsUL0DOn6JoAlgN6WGyqKyodT6Xhg1eX5j+TCrJAhr0v5kTC3aTjDHEzZbqq /DIIxX0N0bQMfG/PazmlOEbB2qj9Kks0uPhSGNhAUQIhg8sqwXBXC4aYLtiDxu1/ Na8UapOLBgZbQ4p7lNQHHsm0Sa1ob2yvr8hwf2HH/nvvZw4Bo0agFB2t+lFMwBuh j1Wq9u2+wykQIy/kA/uy3SX9hhhe6a5fm6n/j0ygO8b7Wq6Z+2hXHt5UmVTc47nV rvc43t4PCdhKjVSTEmt7MlLZtAQBC6VM -----END CERTIFICATE-----Generated at Fri May 31 17:44:24 2024 by rpki-client on console-fra.rpki-client.org