$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: w/HCYFGa5p4wR0BFj/yIvskI2iT7m4/RpVDoQRGaeto= Subject key identifier: 55:85:08:81:76:3F:04:7A:5C:58:5C:06:AB:54:DE:71:48:0C:FD:91 Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0136 Signing time: Sun 19 May 2024 00:21:28 +0000 Manifest this update: Sun 19 May 2024 00:21:28 +0000 Manifest next update: Sun 26 May 2024 00:21:28 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: 1Gw5eRdPs52YzEhE2SfcdeCDsRdokxLc/HAEMjmke0k=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: Ocok0YaJANXTvMflX7rHaTlDxzxA5eYlN+U42YstUOc=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: NlZGw5kxdJBiCylDN3iP3l9B8OoHi1F1b4+2lDwSRDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: May 19 00:21:28 2024 GMT Not After : May 26 00:21:28 2024 GMT Subject: CN=66494608-9b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:bb:f6:93:61:63:c9:2b:f6:d4:5a:66:08: 61:76:1f:2f:b5:2e:b2:98:4b:a7:f3:3f:bc:8d:54: c4:d7:5d:1a:35:2c:53:07:01:43:f6:d9:d0:95:eb: 12:05:48:5a:17:b2:c6:17:be:c2:1d:66:8c:34:b2: 09:98:29:46:93:7a:0c:5f:a5:26:bc:0c:c2:8f:b3: c4:67:0f:05:19:3c:01:00:80:08:45:69:ac:e4:a5: 13:49:a5:ea:8b:91:2c:57:2b:94:cc:11:2c:ff:49: 25:da:91:d8:c1:14:dd:31:00:c1:a6:c6:78:79:32: 55:17:d8:48:5e:e9:ec:01:b2:cc:47:38:60:a2:02: 69:4e:31:f1:43:c0:cd:56:18:44:f0:09:bc:6a:1d: 22:9f:ff:c0:db:73:aa:7e:84:11:97:67:4a:f1:24: 27:c0:52:56:b2:03:75:70:6c:ba:bf:f7:7e:35:9c: 5c:fe:4e:04:af:58:04:c6:cb:23:e3:d9:01:2c:97: ad:6f:30:d0:54:66:1c:17:c1:ec:ca:75:10:7d:be: 63:5d:20:64:f5:0a:c6:98:7d:03:b0:d5:90:26:3d: d6:d4:22:cf:c3:a8:e5:bd:d4:06:80:ce:ea:2a:36: 38:0f:2c:ae:f0:59:ac:37:f5:12:15:97:88:33:3d: 8c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:85:08:81:76:3F:04:7A:5C:58:5C:06:AB:54:DE:71:48:0C:FD:91 X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:0a:da:5f:0f:d3:3b:56:9f:e3:b6:6c:61:5e:00:5b:2d: e0:f1:85:7f:b2:78:6f:dc:68:4d:f5:c8:7f:b4:eb:18:c4:88: 8b:51:b4:ab:88:15:b8:e6:21:fa:f6:a8:7d:c2:e8:d8:97:4f: db:35:55:78:05:20:55:a7:5c:98:d1:ad:4a:d4:e7:1c:13:db: 5e:c6:ce:8f:11:8b:b8:0c:50:41:a8:e1:82:8c:16:e1:4c:f0: 77:3b:84:d1:08:ca:d9:7d:b8:c4:12:53:15:b5:87:1e:ec:60: 81:f3:1e:a9:f7:c8:4d:92:be:44:58:fd:34:09:0d:ab:ad:1e: 42:08:2d:71:51:b1:7b:87:78:75:46:d7:a9:71:4d:f0:69:1c: 27:6b:2c:ba:cf:45:45:6b:33:f8:b7:d1:da:ec:a4:ed:89:5f: 4b:4b:5c:0e:52:9a:65:71:a2:84:9a:8f:fa:69:3e:9f:d9:4f: 7a:68:e5:fb:fb:fc:ec:98:53:ce:4b:39:71:44:29:03:e2:11: 94:fb:3c:1d:a0:81:a3:e1:e7:b1:00:9a:49:89:38:4b:ec:63: 1a:ef:f7:4c:a1:3d:ca:76:84:93:6c:b6:b5:cb:4d:ac:f3:63: 26:a0:18:e0:2c:fb:90:65:69:c8:a6:9d:3c:c8:32:bc:ee:08: d0:2b:bf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjQwNTE5MDAyMTI4WhcNMjQwNTI2MDAyMTI4WjAYMRYwFAYD VQQDEw02NjQ5NDYwOC05Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40q79pNhY8kr9tRaZghhdh8vtS6ymEun8z+8jVTE110aNSxTBwFD9tnQlesS BUhaF7LGF77CHWaMNLIJmClGk3oMX6UmvAzCj7PEZw8FGTwBAIAIRWms5KUTSaXq i5EsVyuUzBEs/0kl2pHYwRTdMQDBpsZ4eTJVF9hIXunsAbLMRzhgogJpTjHxQ8DN VhhE8Am8ah0in//A23OqfoQRl2dK8SQnwFJWsgN1cGy6v/d+NZxc/k4Er1gExssj 49kBLJetbzDQVGYcF8HsynUQfb5jXSBk9QrGmH0DsNWQJj3W1CLPw6jlvdQGgM7q KjY4Dyyu8FmsN/USFZeIMz2MxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWFCIF2 PwR6XFhcBqtU3nFIDP2RMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACGgraXw/TO1af47ZsYV4AWy3g8YV/snhv3GhN9ch/tOsYxIiLUbSr iBW45iH69qh9wujYl0/bNVV4BSBVp1yY0a1K1OccE9texs6PEYu4DFBBqOGCjBbh TPB3O4TRCMrZfbjEElMVtYce7GCB8x6p98hNkr5EWP00CQ2rrR5CCC1xUbF7h3h1 RtepcU3waRwnayy6z0VFazP4t9Ha7KTtiV9LS1wOUpplcaKEmo/6aT6f2U96aOX7 +/zsmFPOSzlxRCkD4hGU+zwdoIGj4eexAJpJiThL7GMa7/dMoT3KdoSTbLa1y02s 82MmoBjgLPuQZWnIpp08yDK87gjQK79L -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org