$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: qEn2m8kz31b68RYBc0vW2W23MEPN8FJ1XvMXRg85yj8= Subject key identifier: 85:3E:F5:31:BE:C5:CB:9E:5F:C4:4D:9F:5D:0E:66:11:BD:96:E7:71 Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 0440 Signing time: Sat 01 Jun 2024 02:59:21 +0000 Manifest this update: Sat 01 Jun 2024 02:59:21 +0000 Manifest next update: Sat 08 Jun 2024 02:59:21 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: uMr5ZzIKpkh183IVAg00W8W4x3+AlsZXVjL3cWOVflE=) 2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: 1jP6i/gsW4Ign+tinc9Mjc3nf9zy4YX6dc8pTLkyDlc=) 3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: i4LNQJdXVnQGG0Fh4VUlSUudPn6+NsNVOnFcO5PJHmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Jun 1 02:59:21 2024 GMT Not After : Jun 8 02:59:21 2024 GMT Subject: CN=665a8e89-8842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:10:58:f5:78:87:15:58:76:39:33:96:ec: 5a:8f:89:17:a2:1d:4b:25:95:3c:46:a4:3f:74:1b: 68:32:03:7b:b3:fc:81:d3:c0:56:cd:95:14:6f:b3: af:96:ad:c4:cd:3f:e6:d7:fc:7f:45:a2:25:c0:81: ab:67:6e:9b:a8:cf:38:e4:94:17:d3:1d:b8:7c:73: e4:04:62:e1:35:e0:25:f7:ea:65:38:c9:fd:4b:e6: d2:bc:2b:82:50:6c:f1:59:0a:e1:7f:4e:0e:d0:c9: be:07:db:86:e7:78:de:72:5f:9b:17:ab:e3:9d:e7: 94:a7:63:17:6d:aa:f9:eb:2f:93:99:d8:71:8f:1e: 7a:b5:af:8e:18:97:41:f7:58:7a:3a:cf:53:62:89: eb:9c:45:01:62:97:80:f7:5f:00:3d:63:ca:a0:11: fc:8e:b6:6c:44:90:06:12:ca:30:c9:4e:71:7a:67: a1:c6:18:4a:f0:a8:80:58:57:b8:f4:37:97:2e:3c: 9e:35:dd:8e:74:21:49:7c:68:d7:74:cd:40:05:17: 72:bf:b1:c6:4e:46:8c:1a:39:89:2c:da:95:55:ad: c6:d1:0f:86:a4:4f:a7:4e:87:9a:b1:8d:aa:de:59: bb:ef:de:7f:90:3e:63:c6:78:10:9d:9e:43:c8:4f: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:F5:31:BE:C5:CB:9E:5F:C4:4D:9F:5D:0E:66:11:BD:96:E7:71 X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f2:56:03:b0:38:7e:66:3c:5d:f6:72:37:84:a4:82:e0:aa: 24:6b:d2:b5:ee:17:ff:31:c4:ba:59:b6:c0:97:ea:56:07:1f: 48:33:aa:4a:a3:94:d6:5d:d6:fe:2b:80:cd:1e:c5:2a:34:58: 7e:ec:c3:33:37:66:74:18:2a:09:4c:af:13:bb:ed:b4:99:72: 62:31:03:74:1e:8c:81:f6:30:f2:ee:18:c3:ed:00:a9:45:1d: d8:ef:c4:ec:41:d4:ea:ed:ba:85:6f:7e:a1:63:69:7b:7d:e3: 62:4b:4e:68:ba:e8:94:e3:e1:73:ea:a4:ff:7b:44:fd:02:de: aa:5f:a6:03:27:b3:0a:d8:49:cc:b0:2f:d4:6b:b0:3a:dc:72: 36:ad:4d:61:5d:ef:30:25:fd:3f:a2:d1:56:1b:2d:09:1d:f2: 9b:08:81:5b:00:9a:fe:b0:64:5a:33:8d:4e:b1:a6:4f:97:9d: 32:37:23:73:5c:b5:68:68:da:5f:0a:ae:b4:bd:17:07:8a:8c: 69:f9:15:1d:39:c1:89:88:33:48:7b:77:21:7a:f8:84:54:98: 1d:4c:7c:41:af:da:e3:19:96:e8:d8:fa:35:f8:60:16:61:ac: 61:46:4f:58:a2:a9:15:f7:21:37:ad:90:25:a8:12:d8:78:38: 17:8e:4d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjQwNjAxMDI1OTIxWhcNMjQwNjA4MDI1OTIxWjAYMRYwFAYD VQQDEw02NjVhOGU4OS04ODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykgQWPV4hxVYdjkzluxaj4kXoh1LJZU8RqQ/dBtoMgN7s/yB08BWzZUUb7Ov lq3EzT/m1/x/RaIlwIGrZ26bqM845JQX0x24fHPkBGLhNeAl9+plOMn9S+bSvCuC UGzxWQrhf04O0Mm+B9uG53jecl+bF6vjneeUp2MXbar56y+Tmdhxjx56ta+OGJdB 91h6Os9TYonrnEUBYpeA918APWPKoBH8jrZsRJAGEsowyU5xemehxhhK8KiAWFe4 9DeXLjyeNd2OdCFJfGjXdM1ABRdyv7HGTkaMGjmJLNqVVa3G0Q+GpE+nToeasY2q 3lm7795/kD5jxngQnZ5DyE8BIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU+9TG+ xcueX8RNn10OZhG9ludxMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO8lYDsDh+Zjxd9nI3hKSC4Koka9K17hf/McS6WbbAl+pWBx9IM6pK o5TWXdb+K4DNHsUqNFh+7MMzN2Z0GCoJTK8Tu+20mXJiMQN0HoyB9jDy7hjD7QCp RR3Y78TsQdTq7bqFb36hY2l7feNiS05ouuiU4+Fz6qT/e0T9At6qX6YDJ7MK2EnM sC/Ua7A63HI2rU1hXe8wJf0/otFWGy0JHfKbCIFbAJr+sGRaM41OsaZPl50yNyNz XLVoaNpfCq60vRcHioxp+RUdOcGJiDNIe3cheviEVJgdTHxBr9rjGZbo2Po1+GAW YaxhRk9YoqkV9yE3rZAlqBLYeDgXjk3C -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org