$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: PEtPxVKFnUSdUQKy0DTSmDTtzkXDEldHFIU44hkGVEA= Subject key identifier: 8B:52:0C:D7:0E:51:4C:81:1F:1C:91:D5:33:B5:D3:3B:52:DD:2B:B8 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 0632 Signing time: Sat 18 May 2024 23:44:00 +0000 Manifest this update: Sat 18 May 2024 23:43:59 +0000 Manifest next update: Sat 25 May 2024 23:43:59 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: 4NKes1H6UEZaIw4X5qJ+Y45W/vN8wApHVi52VkuK5To=) 2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: May 18 23:43:59 2024 GMT Not After : May 25 23:43:59 2024 GMT Subject: CN=66493d3f-bcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:9f:00:27:e9:af:94:96:14:14:97:3c:ee: 68:ad:01:5f:60:9d:aa:0b:a3:4f:b3:2b:96:67:c2: b8:2d:3b:e5:1b:52:cf:c3:03:47:47:78:1c:b3:07: ff:dc:36:f6:09:a7:78:28:22:a3:4e:4b:b9:09:60: 1b:92:0f:c8:9b:74:cc:5b:ba:50:3e:41:fe:3b:71: 60:04:51:ab:1b:80:70:9e:28:dd:84:7e:50:45:6d: 3f:f6:10:3d:33:35:af:ab:4c:cd:c9:1b:17:ce:a7: 85:87:67:9c:22:26:71:3a:bc:d2:fe:6d:41:14:e6: 49:07:84:75:ee:34:af:8b:e3:30:69:02:bb:8f:be: 96:0b:e2:84:6e:09:34:f7:68:6d:75:c8:67:38:ce: b0:8c:44:63:45:74:a0:e2:fd:27:3f:e7:46:2f:7a: 63:76:28:81:c6:bf:76:e1:f7:60:e7:b1:08:cf:f1: d2:83:bb:fb:68:ca:e5:7f:e0:38:40:47:3f:51:e9: 06:0b:98:60:12:2c:e6:fb:17:48:70:ad:91:1c:40: 2c:2c:50:8d:50:15:8c:ea:77:80:a4:a9:f6:cd:de: 70:a2:67:57:3d:9b:21:39:96:be:d5:83:24:0c:40: b6:fa:59:85:29:8b:fd:46:95:41:2d:6b:a7:b3:21: 73:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:0C:D7:0E:51:4C:81:1F:1C:91:D5:33:B5:D3:3B:52:DD:2B:B8 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0b:c1:6a:1a:cb:db:f0:3a:e9:94:6c:fd:85:96:61:ec:37: b0:4e:d8:f1:fd:fd:86:b6:1c:18:5c:4a:04:63:6e:52:f4:97: 22:a3:47:db:e8:9b:9a:89:04:64:71:37:6e:d3:db:80:7d:ed: 92:6b:4b:ac:7f:41:c8:b9:ef:08:e8:b9:ab:00:79:75:f3:aa: 8b:ae:07:42:58:16:3d:03:b7:bb:3d:53:cc:3e:ef:3b:e7:26: 00:70:95:a2:59:cd:bf:6c:bc:f2:48:93:eb:d1:70:38:54:36: 17:dc:fa:55:1e:2e:c1:8c:62:af:12:e2:30:6d:66:0c:a1:7a: b7:db:b4:4d:b1:65:c5:0a:e2:9a:d3:5c:4a:75:55:b7:32:99: 6c:ed:a6:53:1c:76:8a:31:b5:9b:83:62:6b:eb:2a:1d:58:3c: 5c:b2:32:c4:d0:12:fc:48:3e:79:14:cf:16:4e:ba:85:a1:39: 31:e5:c2:74:06:82:29:2a:ce:f4:5c:9a:cb:15:61:ac:25:77: 62:a0:b5:16:eb:0d:7f:33:f7:39:54:e5:da:1e:9a:73:e8:7f: d8:82:33:be:dd:05:29:34:5d:1b:a1:70:1b:18:a3:0c:e8:ab: 8a:5a:50:25:67:46:8c:30:35:c6:2a:35:f2:7f:66:fe:53:55: 2e:cf:a7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjQwNTE4MjM0MzU5WhcNMjQwNTI1MjM0MzU5WjAYMRYwFAYD VQQDEw02NjQ5M2QzZi1iY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hGfACfpr5SWFBSXPO5orQFfYJ2qC6NPsyuWZ8K4LTvlG1LPwwNHR3gcswf/ 3Db2Cad4KCKjTku5CWAbkg/Im3TMW7pQPkH+O3FgBFGrG4BwnijdhH5QRW0/9hA9 MzWvq0zNyRsXzqeFh2ecIiZxOrzS/m1BFOZJB4R17jSvi+MwaQK7j76WC+KEbgk0 92htdchnOM6wjERjRXSg4v0nP+dGL3pjdiiBxr924fdg57EIz/HSg7v7aMrlf+A4 QEc/UekGC5hgEizm+xdIcK2RHEAsLFCNUBWM6neApKn2zd5womdXPZshOZa+1YMk DEC2+lmFKYv9RpVBLWunsyFzdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItSDNcO UUyBHxyR1TO10ztS3Su4MB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADC8FqGsvb8DrplGz9hZZh7DewTtjx/f2GthwYXEoEY25S9Jcio0fb 6JuaiQRkcTdu09uAfe2Sa0usf0HIue8I6LmrAHl186qLrgdCWBY9A7e7PVPMPu87 5yYAcJWiWc2/bLzySJPr0XA4VDYX3PpVHi7BjGKvEuIwbWYMoXq327RNsWXFCuKa 01xKdVW3Mpls7aZTHHaKMbWbg2Jr6yodWDxcsjLE0BL8SD55FM8WTrqFoTkx5cJ0 BoIpKs70XJrLFWGsJXdioLUW6w1/M/c5VOXaHppz6H/YgjO+3QUpNF0boXAbGKMM 6KuKWlAlZ0aMMDXGKjXyf2b+U1Uuz6dw -----END CERTIFICATE-----Generated at Sun May 19 00:30:16 2024 by rpki-client on console-ams.rpki-client.org