$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: 5tWp+oW6maXjJ965eDFxoa8XkKHV0GK2PEqjT2bFNi0= Subject key identifier: BE:13:B3:07:DB:2B:E0:DC:9C:04:F7:BF:ED:02:D3:02:14:12:3E:22 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0654 Signing time: Sat 18 May 2024 23:51:37 +0000 Manifest this update: Sat 18 May 2024 23:51:36 +0000 Manifest next update: Sat 25 May 2024 23:51:36 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: ToWmhRnps2V9nHiv4IT19L3CtY4uaYBSAy4j8u61NOk=) 2: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (hash: lM4dia6jyQDke+2hF0njFbgDGCkUb1QCZL3s1YprBco=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4voOAOg+GGStYX0SDRYiy8PZ/u1+zqoHP+mr6zE4WdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: May 18 23:51:36 2024 GMT Not After : May 25 23:51:36 2024 GMT Subject: CN=66493f08-52cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:a7:45:1c:ae:fa:b2:38:9c:5f:92:38:7f: 1d:e7:44:46:34:e6:d5:67:5a:71:be:67:fc:86:c8: f9:a2:8e:8b:1c:6e:c0:69:df:79:37:e1:39:fe:f0: 03:f6:ac:df:d2:b7:8a:66:46:16:04:a1:b5:fb:f3: 2b:0f:d6:95:db:d7:bd:96:4a:c1:13:3d:e0:d8:8a: 97:12:fe:48:a4:c1:7f:c2:41:68:0b:1e:c1:ab:6f: 23:8c:f5:8f:4f:db:bd:de:a7:8f:dc:55:3e:6f:c0: 90:af:ce:1f:dc:58:a3:35:20:5a:c4:e3:44:94:03: f0:79:61:62:96:ae:a1:1e:4b:8f:59:fe:39:10:c3: 8d:eb:f4:9f:99:3c:78:43:e6:42:26:34:c8:a3:e4: c3:40:09:a4:2a:81:45:20:d1:dc:2a:e4:6b:17:c0: 9f:5a:f4:57:3b:34:c3:23:2d:d0:4b:f7:16:68:bb: 4a:ac:82:f1:e7:1e:d2:6f:6e:c1:63:a3:59:0c:49: e4:08:73:f8:9a:01:76:38:63:94:39:cf:63:93:0f: c2:0b:22:3e:d5:fa:e9:b8:a6:10:3c:5c:21:e6:28: 09:83:72:6e:71:80:05:77:81:6f:44:74:63:53:c9: 6a:b5:ec:ef:18:8f:de:96:48:d1:82:56:9f:e9:ce: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:13:B3:07:DB:2B:E0:DC:9C:04:F7:BF:ED:02:D3:02:14:12:3E:22 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:8e:78:82:52:bc:4e:ef:bb:ec:ec:8c:9f:dc:25:c8:8d:1c: 65:f4:b5:d8:b8:cc:81:3f:ff:f8:10:7d:af:41:94:12:1d:7d: 84:74:80:fc:2e:37:74:21:c3:06:8e:f9:ff:ca:85:7e:7f:c9: fd:a0:e3:1f:d2:b5:3d:30:bf:a8:0b:f6:12:00:0e:3d:84:b6: c2:56:bb:80:49:be:ab:84:97:71:89:18:7f:2e:82:0a:ea:ab: d5:9b:5a:a5:e3:e2:ab:7e:c9:2f:e6:ac:7c:f4:14:8e:4e:77: ae:2d:2c:66:40:2d:75:fc:22:20:b1:cb:66:63:c9:9f:37:94: a6:72:e3:cf:52:cb:81:3e:a9:e0:e2:e2:50:36:ea:d1:66:8d: 5d:d6:fc:87:d2:08:2b:6e:51:80:b8:d9:4f:04:09:35:64:91: 7b:20:46:e9:5c:14:fa:a2:e0:7e:00:68:72:f4:d1:94:b4:b8: 69:ec:c4:64:1c:38:76:8e:60:0a:5c:bc:bf:fa:cf:7f:0a:fd: 33:5c:56:1e:ad:b5:97:f3:3c:b2:68:19:bd:7d:75:f5:87:d9: 99:6d:aa:6a:e4:01:70:88:23:f0:40:f6:e7:cf:3f:f8:96:d7: 3c:05:5b:81:e1:58:d2:62:c2:bc:bc:8e:52:03:bb:57:27:ff: 4f:73:d0:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjQwNTE4MjM1MTM2WhcNMjQwNTI1MjM1MTM2WjAYMRYwFAYD VQQDEw02NjQ5M2YwOC01MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyOnRRyu+rI4nF+SOH8d50RGNObVZ1pxvmf8hsj5oo6LHG7Aad95N+E5/vAD 9qzf0reKZkYWBKG1+/MrD9aV29e9lkrBEz3g2IqXEv5IpMF/wkFoCx7Bq28jjPWP T9u93qeP3FU+b8CQr84f3FijNSBaxONElAPweWFilq6hHkuPWf45EMON6/SfmTx4 Q+ZCJjTIo+TDQAmkKoFFINHcKuRrF8CfWvRXOzTDIy3QS/cWaLtKrILx5x7Sb27B Y6NZDEnkCHP4mgF2OGOUOc9jkw/CCyI+1frpuKYQPFwh5igJg3JucYAFd4FvRHRj U8lqtezvGI/elkjRglaf6c4fewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4Tswfb K+DcnAT3v+0C0wIUEj4iMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcjniCUrxO77vs7Iyf3CXIjRxl9LXYuMyBP//4EH2vQZQSHX2EdID8 Ljd0IcMGjvn/yoV+f8n9oOMf0rU9ML+oC/YSAA49hLbCVruASb6rhJdxiRh/LoIK 6qvVm1ql4+Krfskv5qx89BSOTneuLSxmQC11/CIgsctmY8mfN5SmcuPPUsuBPqng 4uJQNurRZo1d1vyH0ggrblGAuNlPBAk1ZJF7IEbpXBT6ouB+AGhy9NGUtLhp7MRk HDh2jmAKXLy/+s9/Cv0zXFYerbWX8zyyaBm9fXX1h9mZbapq5AFwiCPwQPbnzz/4 ltc8BVuB4VjSYsK8vI5SA7tXJ/9Pc9BM -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org