$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: 4MCozpLJeLevUPSZQpg9ykGqQCGorzjU/cmHC8EEM3k= Subject key identifier: E9:FA:A0:DE:D7:A5:C2:C7:C7:54:4E:22:35:73:D0:9E:27:77:A3:BA Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0551 Signing time: Sun 19 May 2024 00:51:55 +0000 Manifest this update: Sun 19 May 2024 00:51:54 +0000 Manifest next update: Sun 26 May 2024 00:51:54 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: PEw4dQ+LuxwYS5RwGRr57snHv5MV4fxOgv61xGfXLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: May 19 00:51:54 2024 GMT Not After : May 26 00:51:54 2024 GMT Subject: CN=66494d2a-3547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:a4:14:8d:12:04:e9:63:af:8f:50:1a:c7: c5:36:bd:17:ee:87:bf:8c:06:92:8b:f6:8d:58:91: 4e:ec:7e:96:15:dc:0e:6c:5d:ca:9e:22:a1:7e:44: 14:6c:96:af:49:69:a7:29:53:54:7e:90:b1:ea:33: 03:42:a9:5d:96:4b:67:3a:3a:10:77:49:10:bf:6e: 8f:6e:ab:3c:e7:0e:f7:02:20:10:ef:6f:ea:58:7e: c8:e8:e2:8e:e6:13:02:49:13:03:a6:b1:44:f3:60: d7:9f:58:52:ff:28:40:49:01:2a:e7:d4:4e:f9:8e: 0b:6c:e2:a5:47:82:28:51:ed:9e:ec:27:35:8c:48: 4a:84:d8:5e:56:3a:cb:ac:d8:6c:91:ca:0f:22:30: 50:55:2a:ce:ba:68:b7:13:c1:87:00:01:61:97:26: ee:e6:24:bb:e2:e4:c8:a9:11:94:3e:f9:30:af:06: f1:7f:d9:00:c3:5f:b1:85:a6:05:3f:c8:c9:79:dd: 79:5d:68:26:01:5a:cf:c5:3c:69:52:40:24:9a:81: 39:2e:8c:f7:cb:e4:ce:94:32:d6:dd:d9:50:99:95: 44:13:b1:6e:64:92:17:ae:1d:0f:46:66:7b:f5:f4: d9:57:1d:a7:83:3f:d2:4c:77:61:d1:4c:23:27:25: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:A0:DE:D7:A5:C2:C7:C7:54:4E:22:35:73:D0:9E:27:77:A3:BA X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8b:fe:86:6b:df:a5:21:f1:c6:c1:aa:26:64:2d:c7:f4:79: 77:c3:71:74:2f:84:f8:94:49:5d:4c:35:53:9b:c5:26:6c:38: d8:b9:6c:27:78:c0:22:f7:1c:8f:cd:92:cb:eb:f6:62:2f:e7: eb:7f:4a:9d:03:95:07:70:c2:a4:3d:e1:44:26:01:28:02:6b: 97:c0:b3:47:4d:01:c0:f5:15:c1:31:65:b4:e4:f7:ec:25:29: 80:b4:be:0b:08:03:f5:26:5e:82:be:cd:ae:ff:af:b7:36:af: c0:a9:f1:a2:5d:8f:55:3a:51:2a:cc:38:97:b5:57:42:9f:d2: 4f:ba:f5:31:68:0b:8c:23:54:7f:41:e9:2a:56:92:99:3c:77: 56:60:08:c9:04:6f:0c:fe:74:de:66:05:0c:bc:73:39:86:3d: 9e:9b:92:42:48:49:a9:82:00:39:59:e0:0e:50:71:2d:cb:43: cc:7b:92:eb:0d:7e:9d:0f:cd:37:6b:d0:88:cb:28:68:1a:29: 06:17:5e:e3:03:3b:9a:e7:47:75:41:86:4e:a1:cf:9e:82:d0: 00:c1:57:f7:86:e4:dd:78:7a:e4:e8:18:b5:e1:9c:b3:d7:4d: 63:c3:b7:61:95:2e:91:cd:03:4d:ae:c9:9e:05:f2:c4:38:82: e0:d5:3d:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjQwNTE5MDA1MTU0WhcNMjQwNTI2MDA1MTU0WjAYMRYwFAYD VQQDEw02NjQ5NGQyYS0zNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNykFI0SBOljr49QGsfFNr0X7oe/jAaSi/aNWJFO7H6WFdwObF3KniKhfkQU bJavSWmnKVNUfpCx6jMDQqldlktnOjoQd0kQv26Pbqs85w73AiAQ72/qWH7I6OKO 5hMCSRMDprFE82DXn1hS/yhASQEq59RO+Y4LbOKlR4IoUe2e7Cc1jEhKhNheVjrL rNhskcoPIjBQVSrOumi3E8GHAAFhlybu5iS74uTIqRGUPvkwrwbxf9kAw1+xhaYF P8jJed15XWgmAVrPxTxpUkAkmoE5Loz3y+TOlDLW3dlQmZVEE7FuZJIXrh0PRmZ7 9fTZVx2ngz/STHdh0UwjJyXmrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn6oN7X pcLHx1ROIjVz0J4nd6O6MB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAci/6Ga9+lIfHGwaomZC3H9Hl3w3F0L4T4lEldTDVTm8UmbDjYuWwn eMAi9xyPzZLL6/ZiL+frf0qdA5UHcMKkPeFEJgEoAmuXwLNHTQHA9RXBMWW05Pfs JSmAtL4LCAP1Jl6Cvs2u/6+3Nq/AqfGiXY9VOlEqzDiXtVdCn9JPuvUxaAuMI1R/ QekqVpKZPHdWYAjJBG8M/nTeZgUMvHM5hj2em5JCSEmpggA5WeAOUHEty0PMe5Lr DX6dD803a9CIyyhoGikGF17jAzua50d1QYZOoc+egtAAwVf3huTdeHrk6Bi14Zyz 101jw7dhlS6RzQNNrsmeBfLEOILg1T0Z -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org