$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json) Hash identifier: UXehcNeEB7dl6NPWi0fXMvFyjnHG59GQMSJhGHsMTM4= Subject key identifier: 59:4C:04:3B:3E:14:51:25:40:AA:D3:6C:90:7D:47:F9:C6:B6:72:EF Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft Manifest number: 0DA4 Signing time: Wed 24 Apr 2024 18:34:53 +0000 Manifest this update: Wed 24 Apr 2024 18:34:52 +0000 Manifest next update: Wed 01 May 2024 18:34:52 +0000 Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: F8RNC0BKeDVSrD5Sb4FYZ8GEtcaef8Vnnq6RlE1FUD4=) 2: 67D0867AC52911EA8F7F413EC4F9AE02.roa (hash: 5k6MdXYACWJz5oZ1Zg2aN8d6cK6nVQy4TzZpe2bK+rc=) 3: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: gTXDeyD6WxMMvLrCShbBbePPjjGE4+CbJQX3xYtiEjY=) 4: 42629FDADD9511EEAA0F2324C4F9AE02.roa (hash: eUWdABCIns549X4YdeBDAgWMmySMlFZRLYhiB89o9Ew=) 5: 34DCFB18C94E11E9A4F6FE21C4F9AE02.roa (hash: yNAuXC3bxbVW2q6g5cnbaShlQ1khFFz4/vuRmWJpqQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Validity Not Before: Apr 24 18:34:52 2024 GMT Not After : May 1 18:34:52 2024 GMT Subject: CN=662950cc-fca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:31:b9:9b:5e:8b:06:b2:f5:92:14:df:42: 67:31:88:f7:0b:b6:02:b5:02:7a:cb:41:58:16:dc: 2a:70:77:c1:ba:93:b1:a3:89:64:6d:f1:a3:f2:89: f0:e7:44:f5:8c:8f:39:88:d5:99:b0:41:a0:23:1a: 47:35:5c:91:38:b9:e1:12:5b:0e:57:2c:5d:ef:85: 56:9a:b8:95:ea:3a:61:3e:b8:4c:4c:cb:16:39:9a: a2:32:d0:63:65:48:53:cf:0f:2f:74:e1:de:9b:ab: 70:0e:75:e5:f3:1f:b9:d6:55:be:11:d1:45:03:b7: c9:9a:25:6a:92:04:31:cf:d8:a0:8c:1f:61:b9:e1: 88:46:27:3e:16:69:4d:cf:fe:16:71:39:26:47:f4: a5:49:54:8f:62:70:0b:e9:00:82:10:d4:79:48:78: 0c:9a:17:c0:f3:f9:e6:29:c2:98:a8:e6:f4:e9:5f: bb:1a:95:c8:fd:46:d6:70:ce:8a:a8:d8:70:59:0d: 23:b5:7a:84:93:72:10:91:77:6d:db:81:1c:d8:86: fc:26:73:d0:0a:24:ea:30:50:c7:b0:aa:53:d0:07: c9:61:f7:3f:a1:fa:dc:c2:b0:f1:fb:71:be:d0:91: 98:b7:ef:ca:5a:39:87:0c:3a:af:82:5e:cf:8a:29: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:04:3B:3E:14:51:25:40:AA:D3:6C:90:7D:47:F9:C6:B6:72:EF X509v3 Authority Key Identifier: keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:49:66:da:8c:51:0d:49:d4:b4:e4:6d:22:73:9a:eb:96:bc: 4a:56:e0:f9:30:1d:0a:07:66:01:7d:a6:5e:c8:70:8c:96:3e: 02:be:3f:fc:24:1d:38:79:3b:01:54:6e:3d:dc:2b:f2:85:84: ea:af:9a:82:7d:e0:b0:10:0b:4e:16:71:58:dd:13:75:4d:4e: ea:96:b2:c6:2b:bf:19:57:b0:ea:a8:d2:b7:5a:f1:25:c6:90: 92:28:0d:a2:0a:0f:00:fe:bb:0e:1d:0c:da:77:cc:f3:ca:f6: 46:76:2f:f6:b9:a0:65:a1:46:bb:e6:24:e9:64:d6:1e:4f:b2: 91:92:5e:f8:4a:2c:c0:79:72:de:57:f8:68:60:7a:2b:e7:c3: 0a:36:bb:f1:c4:50:8e:2f:18:7b:45:91:af:4c:8b:4d:8d:0a: 06:66:23:62:44:5d:bd:c5:2e:9c:a7:82:ee:6c:60:86:0e:bf: 20:03:d2:2e:5c:38:ea:b7:87:29:87:22:6c:56:ad:1a:ed:5a: 1e:ff:9b:f6:73:c9:55:33:3c:93:b8:3e:66:82:dc:e1:ce:2f: 2d:03:c0:d8:2e:9b:5b:2f:ce:49:d3:b8:f6:9b:ef:75:f2:2f: 3b:26:47:92:87:53:45:8e:04:7f:5b:b2:bb:62:96:a1:5c:18: f1:71:8b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyOUYxMTAvBgNVBAUTKEFBODVDQ0QyREQzRTFDMDAzQkY3MkZGNTNFNThDNzIw MEU3Q0YwQTgwHhcNMjQwNDI0MTgzNDUyWhcNMjQwNTAxMTgzNDUyWjAYMRYwFAYD VQQDEw02NjI5NTBjYy1mY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR8xuZteiway9ZIU30JnMYj3C7YCtQJ6y0FYFtwqcHfBupOxo4lkbfGj8onw 50T1jI85iNWZsEGgIxpHNVyROLnhElsOVyxd74VWmriV6jphPrhMTMsWOZqiMtBj ZUhTzw8vdOHem6twDnXl8x+51lW+EdFFA7fJmiVqkgQxz9igjB9hueGIRic+FmlN z/4WcTkmR/SlSVSPYnAL6QCCENR5SHgMmhfA8/nmKcKYqOb06V+7GpXI/UbWcM6K qNhwWQ0jtXqEk3IQkXdt24Ec2Ib8JnPQCiTqMFDHsKpT0AfJYfc/ofrcwrDx+3G+ 0JGYt+/KWjmHDDqvgl7PiikXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlMBDs+ FFElQKrTbJB9R/nGtnLvMB8GA1UdIwQYMBaAFKqFzNLdPhwAO/cv9T5YxyAOfPCo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDI5Ri82OTFGNzRDNDk4 ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhBQTc5eV8xUGxqSElBNTg4 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvWE0wdDAtSEFBNzl5XzFQbGpISUE1ODhLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDI5Ri82OTFGNzRDNDk4ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhB QTc5eV8xUGxqSElBNTg4S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPSWbajFENSdS05G0ic5rrlrxKVuD5MB0KB2YBfaZeyHCMlj4Cvj/8 JB04eTsBVG493CvyhYTqr5qCfeCwEAtOFnFY3RN1TU7qlrLGK78ZV7DqqNK3WvEl xpCSKA2iCg8A/rsOHQzad8zzyvZGdi/2uaBloUa75iTpZNYeT7KRkl74SizAeXLe V/hoYHor58MKNrvxxFCOLxh7RZGvTItNjQoGZiNiRF29xS6cp4LubGCGDr8gA9Iu XDjqt4cphyJsVq0a7Voe/5v2c8lVMzyTuD5mgtzhzi8tA8DYLptbL85J07j2m+91 8i87JkeSh1NFjgR/W7K7YpahXBjxcYtn -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:49 2024 by rpki-client on console-fra.rpki-client.org