$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: /5JTHW1Izz2nog0raTqVnYY/W0Tq8DkwkMHQ/50ue78= Subject key identifier: 7E:F1:35:31:C1:58:C5:C1:42:2D:1E:82:D8:F4:D7:E3:25:D0:DB:5D Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 02D3 Signing time: Sun 19 May 2024 03:24:06 +0000 Manifest this update: Sun 19 May 2024 03:24:05 +0000 Manifest next update: Sun 26 May 2024 03:24:05 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: qoJpq/Z5sbYeOgt7wHUVx99g1A6Se95LuU/ciHgMbEU=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: lcnwa99qC1/CfBKm/j9U4Xa9EJ5wsMYeaygJQi9rO/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: May 19 03:24:05 2024 GMT Not After : May 26 03:24:05 2024 GMT Subject: CN=664970d5-6208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:23:18:72:5b:a7:e8:6f:b9:a7:2a:18:f3: 0a:ce:50:86:82:28:85:e2:08:1d:8a:cc:03:a8:c0: 3f:52:42:da:26:b8:2b:a1:5f:4e:46:b9:11:f1:75: e1:0b:76:34:c3:fe:63:17:77:c5:3c:a2:c8:f7:35: c8:35:2c:1b:19:e1:a3:a6:c0:52:8f:dd:56:a8:2b: 59:4e:c2:6a:2f:f3:dc:10:60:0f:18:87:d4:29:55: c6:ca:1d:f2:34:0a:32:17:76:ec:fe:da:95:07:b7: 85:77:08:ae:ae:fc:b2:59:b3:bb:fc:e7:60:fe:d1: 2d:94:ad:34:12:49:66:39:88:3b:9c:75:ad:87:45: 5e:22:39:e9:d0:bb:12:f6:aa:9e:bd:94:26:70:ef: c2:cb:03:81:ba:da:0b:99:4b:e9:a9:7d:ff:ef:49: 17:e6:34:bb:0c:41:3e:08:f7:1d:0f:a8:eb:95:75: 69:5e:39:8e:84:30:15:d4:7c:dc:95:d4:bc:ca:b8: 0f:79:5d:52:cf:f2:49:6b:66:c2:54:96:98:23:0e: 95:6f:f3:e0:2b:0f:98:6f:8f:3e:8e:fa:33:db:04: 74:66:de:6c:d0:68:f6:55:e0:e2:dd:33:83:e8:68: c2:7e:2a:c7:e1:d4:9f:85:7a:08:f4:fc:f5:66:96: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:35:31:C1:58:C5:C1:42:2D:1E:82:D8:F4:D7:E3:25:D0:DB:5D X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:28:6f:9d:52:d9:60:54:a1:72:0f:48:e4:02:47:d7:39:db: 58:2b:ae:94:87:4e:fd:4f:01:61:0f:06:0a:c7:66:9c:d4:d1: ee:de:18:e3:38:5f:ce:48:a2:51:c6:0e:61:db:cd:7c:35:b7: 34:3b:5f:8e:1b:24:a9:8f:9d:3d:63:81:6a:9e:54:a4:00:d1: ae:00:2d:cf:3d:c0:5e:6d:e3:41:01:2b:4b:a7:48:c1:96:7f: 9a:b6:94:38:f2:15:fc:54:af:24:68:29:af:51:59:19:14:83: 66:29:a2:18:1c:04:19:36:9b:7d:73:f1:c6:c6:f5:83:e6:0c: 63:ca:f2:dd:06:b9:4f:bf:46:13:40:e6:80:87:a5:f1:5c:b5: e7:1e:42:d7:be:7a:46:ec:ce:e4:b2:04:06:73:fe:36:19:be: ca:92:94:90:9b:81:08:bd:25:a8:35:60:f3:d3:98:33:07:52: b9:92:aa:8c:ec:81:fd:a3:81:c3:e4:72:bb:b6:ec:0b:31:84: a3:74:c8:26:a4:be:27:57:a7:46:a0:e3:8e:37:a3:87:53:e4: 02:7e:a7:20:49:4c:d1:eb:42:25:cb:80:f7:ce:1f:db:a3:61: 87:49:70:8b:04:e1:0a:d2:fd:01:b3:87:0c:c7:ef:ae:f5:a3: 0b:ea:04:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjQwNTE5MDMyNDA1WhcNMjQwNTI2MDMyNDA1WjAYMRYwFAYD VQQDEw02NjQ5NzBkNS02MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKQjGHJbp+hvuacqGPMKzlCGgiiF4ggdiswDqMA/UkLaJrgroV9ORrkR8XXh C3Y0w/5jF3fFPKLI9zXINSwbGeGjpsBSj91WqCtZTsJqL/PcEGAPGIfUKVXGyh3y NAoyF3bs/tqVB7eFdwiurvyyWbO7/Odg/tEtlK00EklmOYg7nHWth0VeIjnp0LsS 9qqevZQmcO/CywOButoLmUvpqX3/70kX5jS7DEE+CPcdD6jrlXVpXjmOhDAV1Hzc ldS8yrgPeV1Sz/JJa2bCVJaYIw6Vb/PgKw+Yb48+jvoz2wR0Zt5s0Gj2VeDi3TOD 6GjCfirH4dSfhXoI9Pz1ZpaBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7xNTHB WMXBQi0egtj01+Ml0NtdMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPKG+dUtlgVKFyD0jkAkfXOdtYK66Uh079TwFhDwYKx2ac1NHu3hjj OF/OSKJRxg5h2818Nbc0O1+OGySpj509Y4FqnlSkANGuAC3PPcBebeNBAStLp0jB ln+atpQ48hX8VK8kaCmvUVkZFINmKaIYHAQZNpt9c/HGxvWD5gxjyvLdBrlPv0YT QOaAh6XxXLXnHkLXvnpG7M7ksgQGc/42Gb7KkpSQm4EIvSWoNWDz05gzB1K5kqqM 7IH9o4HD5HK7tuwLMYSjdMgmpL4nV6dGoOOON6OHU+QCfqcgSUzR60Ily4D3zh/b o2GHSXCLBOEK0v0Bs4cMx++u9aML6gSS -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org