$ rpki-client -vvf rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft File: qBmAo25inKAR7UPCjOWw-9Jl3mM.mft (raw, json) Hash identifier: Hq+aRVLEvtaSV83Qo3qXZHFhBXAMpkrjTH7Zf08eSgE= Subject key identifier: CE:FB:92:ED:90:9F:3A:AF:76:4C:FC:5A:67:C1:50:64:FF:92:7F:C2 Authority key identifier: A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63 Certificate issuer: /CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft Manifest number: 071F Signing time: Sat 18 May 2024 22:33:13 +0000 Manifest this update: Sat 18 May 2024 22:33:12 +0000 Manifest next update: Sat 25 May 2024 22:33:12 +0000 Files and hashes: 1: qBmAo25inKAR7UPCjOWw-9Jl3mM.crl (hash: sDtW1IiP0nJmTg8E0BPMkuUXECgYEU1K516tRSjktL8=) 2: 92170988783711EB9F29BA6BC4F9AE02.roa (hash: ZGe2waqRa8kP17rB0AzLJLr+zD3mWcgT0rpgWNTtxhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.crl rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63 Validity Not Before: May 18 22:33:12 2024 GMT Not After : May 25 22:33:12 2024 GMT Subject: CN=66492ca8-c18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:6c:db:0e:20:a8:46:9d:dc:d3:24:d5:95: 79:20:09:3f:ce:45:bd:6f:37:95:16:bd:7c:4f:db: 1d:16:32:07:f5:85:20:12:8f:a9:64:a5:aa:3e:07: b6:a6:69:43:11:4d:d4:fb:95:39:8b:cd:8c:db:40: 86:49:89:1c:e7:34:5d:10:a2:b3:91:1d:df:ed:8e: 4e:b0:26:5c:70:95:c3:79:1c:fe:64:36:ee:9a:27: 7f:b2:b1:49:1e:6e:cd:13:08:79:88:48:52:f0:e3: 17:d8:c4:8b:b3:e9:fa:f4:3b:46:7a:63:19:9c:39: 18:38:40:ee:41:f7:91:6f:6f:16:61:02:cf:20:5f: bb:8f:08:f7:6a:eb:bc:c4:03:bf:ed:e8:cb:59:25: c8:35:a4:50:08:d3:ad:3c:93:9a:a0:5d:78:c7:25: 56:67:69:15:64:9c:26:1b:ab:a0:9d:5a:59:0f:59: d5:e5:c4:95:62:68:25:50:34:04:3f:d0:e1:5f:93: 98:62:27:d2:9b:1a:d7:00:86:3e:60:cf:59:db:ea: ff:6c:f9:1a:d1:8f:f3:f6:f9:08:a2:6b:68:7f:7e: 06:c3:8d:e1:12:4f:fc:1f:ba:00:68:4f:92:a8:e3: 25:eb:f4:a3:85:09:d1:db:6e:27:be:4b:43:7f:f1: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FB:92:ED:90:9F:3A:AF:76:4C:FC:5A:67:C1:50:64:FF:92:7F:C2 X509v3 Authority Key Identifier: keyid:A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:12:82:4c:fc:97:ea:98:c8:94:d7:06:e9:e7:3d:43:95:37: dd:6e:11:94:41:af:73:25:3f:f2:e2:e2:8b:55:ac:6e:ba:7e: a1:fd:25:34:74:65:62:d4:08:7a:2b:d4:c7:34:0c:3b:6b:04: af:23:56:a8:7b:3d:7f:f7:8f:55:82:31:67:61:f4:d8:83:39: ae:89:e6:5d:0a:e6:55:bd:2d:2f:d9:86:fc:c9:c1:02:31:30: 98:2a:ac:b9:e0:49:63:b1:92:0c:14:11:4b:8c:b5:1b:95:c8: 20:a4:be:59:22:a2:cf:03:55:9b:97:0c:d6:06:3c:3c:15:5e: b0:84:55:c2:a0:ff:21:08:4f:65:15:9c:e4:d1:6d:2d:fe:ab: 38:4d:34:89:75:b9:3b:12:47:39:65:04:20:d9:42:f6:69:0f: 9c:42:d6:67:c9:e6:30:fd:e6:de:d6:79:b5:44:61:3e:6d:97: 76:66:71:47:11:86:c1:5d:cb:1c:a9:44:3a:4d:6f:b7:e7:64: 7e:6d:f8:36:f1:1b:87:33:62:f4:4d:46:bf:52:25:22:58:da: 7a:d9:bc:70:4d:d9:8c:69:4f:51:de:8a:11:b2:1f:4b:8e:d3: 51:36:d9:75:d1:8c:bf:08:03:2b:28:bf:13:22:57:16:38:e8: 4e:03:91:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4QjQxMTAvBgNVBAUTKEE4MTk4MEEzNkU2MjlDQTAxMUVENDNDMjhDRTVCMEZC RDI2NURFNjMwHhcNMjQwNTE4MjIzMzEyWhcNMjQwNTI1MjIzMzEyWjAYMRYwFAYD VQQDEw02NjQ5MmNhOC1jMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1ls2w4gqEad3NMk1ZV5IAk/zkW9bzeVFr18T9sdFjIH9YUgEo+pZKWqPge2 pmlDEU3U+5U5i82M20CGSYkc5zRdEKKzkR3f7Y5OsCZccJXDeRz+ZDbumid/srFJ Hm7NEwh5iEhS8OMX2MSLs+n69DtGemMZnDkYOEDuQfeRb28WYQLPIF+7jwj3auu8 xAO/7ejLWSXINaRQCNOtPJOaoF14xyVWZ2kVZJwmG6ugnVpZD1nV5cSVYmglUDQE P9DhX5OYYifSmxrXAIY+YM9Z2+r/bPka0Y/z9vkIomtof34Gw43hEk/8H7oAaE+S qOMl6/SjhQnR224nvktDf/EuSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM77ku2Q nzqvdkz8WmfBUGT/kn/CMB8GA1UdIwQYMBaAFKgZgKNuYpygEe1DwozlsPvSZd5j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhCNC83QzhBRjgzOEVG NTUxMUVBOUM2RkRCN0VDNEY5QUUwMi9xQm1BbzI1aW5LQVI3VVBDak9Xdy05Smwz bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCbUFvMjVpbktBUjdVUENqT1d3LTlKbDNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjhCNC83QzhBRjgzOEVGNTUxMUVBOUM2RkRCN0VDNEY5QUUwMi9xQm1BbzI1aW5L QVI3VVBDak9Xdy05SmwzbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBREoJM/JfqmMiU1wbp5z1DlTfdbhGUQa9zJT/y4uKLVaxuun6h/SU0 dGVi1Ah6K9THNAw7awSvI1aoez1/949VgjFnYfTYgzmuieZdCuZVvS0v2Yb8ycEC MTCYKqy54EljsZIMFBFLjLUblcggpL5ZIqLPA1WblwzWBjw8FV6whFXCoP8hCE9l FZzk0W0t/qs4TTSJdbk7Ekc5ZQQg2UL2aQ+cQtZnyeYw/ebe1nm1RGE+bZd2ZnFH EYbBXcscqUQ6TW+352R+bfg28RuHM2L0TUa/UiUiWNp62bxwTdmMaU9R3ooRsh9L jtNRNtl10Yy/CAMrKL8TIlcWOOhOA5GK -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org