$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: oJKF1HwJbYXcLfuaFMjYDunXxRmC67/F0yKVc9zsugc= Subject key identifier: F5:EF:C3:D6:57:07:43:64:89:5D:FE:2D:E8:42:BF:2E:E9:F1:AD:D0 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 01A7 Signing time: Sun 19 May 2024 04:35:54 +0000 Manifest this update: Sun 19 May 2024 04:35:54 +0000 Manifest next update: Sun 26 May 2024 04:35:54 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: pnsNl0vEB56WFKHo1rCFhujSEbws+LqCFyxMX8XQ/m8=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: GxmjANpeukqxLs4FANE89YTMwPmxm5bH8pM5jU/l8kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: May 19 04:35:54 2024 GMT Not After : May 26 04:35:54 2024 GMT Subject: CN=664981aa-f014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:6e:86:8c:a4:cf:cd:2d:85:32:7f:da:d6: 3d:bd:3c:0f:db:53:16:01:2d:dc:34:d9:e4:3c:9d: 35:3c:3e:3a:41:46:c8:04:af:b9:11:40:d3:59:96: ce:79:32:ca:17:97:ed:f6:3c:db:0e:3a:7c:a7:d0: 26:bc:1d:b7:b3:99:82:eb:8b:75:60:b6:cb:f4:44: 58:6c:8b:ce:1e:97:eb:d9:27:5f:76:2f:1d:2f:b5: 07:4d:6c:1b:1c:34:6b:7e:6c:ac:c4:7c:88:fc:29: 25:08:77:ac:19:37:71:96:cf:14:6a:84:91:2a:51: 79:50:1d:23:f4:7f:9a:6f:02:3e:e2:2f:ac:5e:7d: fd:60:73:f1:21:45:c1:39:3c:dc:05:98:73:b7:98: f7:81:b8:39:02:b1:f4:6c:21:95:54:20:8b:c6:62: d2:eb:03:aa:6c:36:c7:5b:f8:21:ca:33:a3:4b:2b: a1:69:15:35:c7:80:2c:75:cf:e7:24:82:6f:5d:d3: 70:ce:f0:cd:e4:2a:b0:37:2a:b2:28:15:f2:e5:33: 8e:73:0b:2c:ed:b9:06:01:b0:27:5f:c3:26:ff:1c: b9:ee:00:50:cf:67:07:e3:c1:9f:ae:8c:4d:c9:32: 92:fc:84:81:0a:69:cc:d3:b6:c9:07:90:14:86:d4: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EF:C3:D6:57:07:43:64:89:5D:FE:2D:E8:42:BF:2E:E9:F1:AD:D0 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f5:4d:1e:6e:33:cd:e9:a3:db:17:d9:d3:55:e0:0e:1d:a9: d6:f6:ad:79:16:15:8b:9d:68:e5:4d:ca:a4:e4:a8:71:50:50: 98:5d:52:94:2b:b1:15:7d:97:eb:47:25:dc:0a:7c:e2:c4:78: dc:73:7b:30:c6:43:78:05:c8:54:65:c6:02:50:df:91:cd:e6: c1:bb:e5:48:d0:10:1e:81:55:79:4c:ac:f6:f1:6f:e6:98:01: b1:6a:6d:0d:04:c2:6a:65:54:5e:01:64:ba:ac:b0:7c:41:dd: 99:c6:7c:d0:68:c5:bb:b6:a4:83:13:17:f1:ef:e7:f5:1d:d0: 21:78:79:52:42:26:43:e7:75:9b:d0:e8:1a:ee:91:69:c3:ba: cb:5e:9a:66:74:a0:c2:72:81:a4:d6:24:87:ea:65:76:96:d0: 09:59:ec:f8:fb:d7:92:ff:bd:5e:d2:0b:98:7b:bf:83:47:6f: 79:19:53:c1:f8:65:a5:b9:28:05:35:8a:49:7c:41:22:f3:0e: d4:eb:72:a4:ff:b2:d4:13:6e:e7:9f:7d:12:80:22:1c:7c:98: b0:6a:09:61:cd:79:c3:83:c1:13:74:e6:56:1b:4f:b8:43:78: 5d:08:69:fd:29:90:bb:59:a9:71:2a:a1:a9:ec:3e:a8:39:46: 96:4b:9d:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjQwNTE5MDQzNTU0WhcNMjQwNTI2MDQzNTU0WjAYMRYwFAYD VQQDEw02NjQ5ODFhYS1mMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ghuhoykz80thTJ/2tY9vTwP21MWAS3cNNnkPJ01PD46QUbIBK+5EUDTWZbO eTLKF5ft9jzbDjp8p9AmvB23s5mC64t1YLbL9ERYbIvOHpfr2Sdfdi8dL7UHTWwb HDRrfmysxHyI/CklCHesGTdxls8UaoSRKlF5UB0j9H+abwI+4i+sXn39YHPxIUXB OTzcBZhzt5j3gbg5ArH0bCGVVCCLxmLS6wOqbDbHW/ghyjOjSyuhaRU1x4Asdc/n JIJvXdNwzvDN5CqwNyqyKBXy5TOOcwss7bkGAbAnX8Mm/xy57gBQz2cH48GfroxN yTKS/ISBCmnM07bJB5AUhtSadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXvw9ZX B0NkiV3+LehCvy7p8a3QMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9U0ebjPN6aPbF9nTVeAOHanW9q15FhWLnWjlTcqk5KhxUFCYXVKU K7EVfZfrRyXcCnzixHjcc3swxkN4BchUZcYCUN+RzebBu+VI0BAegVV5TKz28W/m mAGxam0NBMJqZVReAWS6rLB8Qd2ZxnzQaMW7tqSDExfx7+f1HdAheHlSQiZD53Wb 0Oga7pFpw7rLXppmdKDCcoGk1iSH6mV2ltAJWez4+9eS/71e0guYe7+DR295GVPB +GWluSgFNYpJfEEi8w7U63Kk/7LUE27nn30SgCIcfJiwaglhzXnDg8ETdOZWG0+4 Q3hdCGn9KZC7WalxKqGp7D6oOUaWS52m -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org