$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json) Hash identifier: l0iUUDenTejwYAfMcQk47yxkGxVPOi0SmIwer9zFkJE= Subject key identifier: 99:1F:5B:1A:31:0A:39:2B:E5:41:BA:A3:9A:F7:F5:3C:9C:4A:59:9D Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 0F01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft Manifest number: 245E Signing time: Sat 18 May 2024 17:16:31 +0000 Manifest this update: Sat 18 May 2024 17:16:30 +0000 Manifest next update: Sat 25 May 2024 17:16:30 +0000 Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: 9y8i8mQMpaq2GDTm8ivJ7nEKDyryEsKWDUhA1+cKFyk=) 2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 3d0yhTisV6gk7gaFUK1Mlf4a3VLR1uTy7ao2iXqrA3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3841 (0xf01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Validity Not Before: May 18 17:16:30 2024 GMT Not After : May 25 17:16:30 2024 GMT Subject: CN=6648e26e-36f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:7c:b4:d3:54:14:9c:58:b6:3b:ec:ee:1f: bc:35:92:c0:d0:be:cb:2f:2c:a9:4f:2b:e3:aa:33: 97:5f:54:4e:ae:78:5d:17:29:bd:85:6e:e3:5b:86: 38:8d:f2:36:c6:db:b4:5a:94:c8:c1:85:dd:92:65: 32:37:88:c8:9c:0a:6a:a4:39:4e:7b:1c:28:ca:27: 53:21:7d:84:c1:04:5d:b1:e1:ad:8a:b0:d0:c5:fc: d1:3b:3d:31:20:fe:d3:86:42:8d:40:30:3b:9c:f0: f7:df:5b:d9:32:f6:29:81:20:6f:7a:a9:b9:5f:0a: 5b:af:e3:06:f2:33:a6:55:a8:70:74:67:0f:fc:17: f2:80:72:7d:70:87:8b:d7:83:20:62:e1:1d:0f:8a: d5:85:e5:fb:4f:60:f4:a2:d2:44:57:7d:d4:fc:61: 4e:be:8e:5b:56:fc:51:37:b4:7f:ae:f2:8e:f0:0f: 0a:a3:64:99:cd:86:4c:84:d9:17:26:78:3c:eb:75: 9a:f1:af:5d:78:73:f2:8e:ff:98:84:a7:f6:18:d2: 54:60:fa:7a:2e:dc:4e:29:7a:19:89:a5:69:de:94: 73:6b:b6:b8:a6:1e:87:ee:96:a7:ac:af:f4:92:5d: 36:43:1a:d6:5a:8c:3a:5d:07:b3:d7:c1:15:fd:bb: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:5B:1A:31:0A:39:2B:E5:41:BA:A3:9A:F7:F5:3C:9C:4A:59:9D X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ed:8a:51:41:a1:e2:e3:61:12:ee:68:a1:e2:36:fe:e0:ef: c0:f3:12:dc:cd:32:de:c1:86:b5:c0:56:32:af:01:a6:03:be: 4b:44:f1:5a:3d:c1:88:0b:91:3b:d5:f1:38:d4:5d:df:6a:1c: 11:ce:68:c1:bf:8b:15:ca:c8:b7:5a:58:ef:ca:50:28:43:b3: 64:22:fd:16:a1:60:02:86:0d:b1:81:19:fe:75:02:1f:d6:a1: 49:62:a4:c7:c5:88:0f:d7:6c:ae:fd:da:58:7e:9d:a9:6d:63: fd:b4:14:97:38:95:8e:b5:4b:0b:a6:40:2f:dd:95:19:12:e9: 2b:0d:be:13:0f:e9:d1:80:cc:f0:93:e7:79:10:b1:5b:d4:c7: ae:ff:44:a0:de:29:87:ef:d7:92:97:d2:83:67:33:99:d0:6a: 3d:62:d7:3b:be:85:52:f6:9e:77:b2:71:37:93:75:f5:ad:34: 01:37:7c:c7:f1:ae:3b:04:cf:d3:bf:91:da:79:89:86:61:66: 05:86:dc:27:bb:3a:18:d9:0f:c4:93:07:09:74:28:dc:8a:ba: 9f:d8:ec:e5:f5:df:d8:78:22:f5:6b:cf:77:82:56:88:2f:01: 98:84:a7:89:a8:af:f5:d8:e7:a1:2b:76:6c:fb:8f:ae:c6:fd: d6:ee:62:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjQwNTE4MTcxNjMwWhcNMjQwNTI1MTcxNjMwWjAYMRYwFAYD VQQDEw02NjQ4ZTI2ZS0zNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZp8tNNUFJxYtjvs7h+8NZLA0L7LLyypTyvjqjOXX1ROrnhdFym9hW7jW4Y4 jfI2xtu0WpTIwYXdkmUyN4jInApqpDlOexwoyidTIX2EwQRdseGtirDQxfzROz0x IP7ThkKNQDA7nPD331vZMvYpgSBveqm5Xwpbr+MG8jOmVahwdGcP/BfygHJ9cIeL 14MgYuEdD4rVheX7T2D0otJEV33U/GFOvo5bVvxRN7R/rvKO8A8Ko2SZzYZMhNkX Jng863Wa8a9deHPyjv+YhKf2GNJUYPp6LtxOKXoZiaVp3pRza7a4ph6H7panrK/0 kl02QxrWWow6XQez18EV/btv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkfWxox Cjkr5UG6o5r39TycSlmdMB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZ VE9pRm11WUtUS3luUC1nMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa7YpRQaHi42ES7mih4jb+4O/A8xLczTLewYa1wFYyrwGmA75LRPFa PcGIC5E71fE41F3fahwRzmjBv4sVysi3WljvylAoQ7NkIv0WoWAChg2xgRn+dQIf 1qFJYqTHxYgP12yu/dpYfp2pbWP9tBSXOJWOtUsLpkAv3ZUZEukrDb4TD+nRgMzw k+d5ELFb1Meu/0Sg3imH79eSl9KDZzOZ0Go9Ytc7voVS9p53snE3k3X1rTQBN3zH 8a47BM/Tv5HaeYmGYWYFhtwnuzoY2Q/EkwcJdCjcirqf2Ozl9d/YeCL1a893glaI LwGYhKeJqK/12OehK3Zs+4+uxv3W7mKT -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org