$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: 1nJJhUsxsH5fwClRmg02IhjiyeZ+zwLf9izllyMPmlU= Subject key identifier: 21:E5:54:3E:3B:A0:A9:D4:D4:A0:D6:6F:36:8E:0A:CE:46:E3:68:DF Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3441 Signing time: Sat 18 May 2024 14:30:33 +0000 Manifest this update: Sat 18 May 2024 14:30:32 +0000 Manifest next update: Sat 25 May 2024 14:30:32 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: RbWyetcVukV0MHxpO7UEMWDh5Y+HhQnI7gJ4nXHuEv4=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: qBQZRIGJAp4KeSJFDy0uzWJBoTzS2pCrUTNDxRDaasc=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: lXhXYqP3YCYqbCzUXFx0HIgOh74Hog3CKrdukwf8E9w=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: iHv/72Hdx52PMD6APwzSwm3o1hUKZ9bXV2iR85t1fLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: May 18 14:30:32 2024 GMT Not After : May 25 14:30:32 2024 GMT Subject: CN=6648bb88-f2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:23:0f:5b:47:2b:bc:76:38:04:95:1d:3e: 59:51:2b:22:8b:0c:2e:67:8a:d3:5a:1c:ff:49:1a: 72:66:6b:4d:2d:ea:ee:c7:06:cf:2a:82:bc:71:bd: 48:d1:ad:c4:a0:aa:cd:cb:52:5c:97:0b:28:d4:e7: df:93:79:0e:7c:30:88:57:48:82:0f:2e:0b:30:86: 9e:6c:4a:7f:45:40:89:06:a4:21:5a:5e:84:21:27: 0c:fe:f2:7e:9d:43:bc:54:62:fe:66:d7:00:00:61: 1a:20:75:c2:9e:f0:36:20:eb:f5:15:98:ac:5e:3a: 69:ff:c9:ff:8f:d8:a4:51:dc:0a:03:ca:02:f2:af: a6:90:cd:c1:db:15:aa:67:20:63:8d:0d:de:ae:29: 7a:23:54:3c:16:be:2d:0b:44:24:8b:0f:0f:66:d5: c9:b8:b0:e9:a7:09:0b:08:6a:9e:86:e8:6f:7d:e3: a4:61:66:1a:41:d9:b5:70:70:50:8f:52:07:86:b0: db:db:79:10:36:d1:43:7f:a7:8e:3c:de:2b:8d:30: df:a5:83:c2:a3:84:fc:e5:93:a6:44:2d:46:86:00: b7:98:be:6e:a7:aa:34:6e:49:a3:ef:b4:cf:92:29: 09:a5:be:06:6c:02:5e:17:34:0f:80:ff:e6:2e:35: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E5:54:3E:3B:A0:A9:D4:D4:A0:D6:6F:36:8E:0A:CE:46:E3:68:DF X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:c4:9e:49:5d:44:ee:75:24:5e:fa:72:51:ba:d4:c9:d0:10: 88:4c:a7:ed:2c:fc:10:fa:b6:16:12:b8:94:d5:1a:59:df:8b: f9:c2:37:52:bd:87:14:f3:2a:52:db:0b:e6:1a:8a:c3:06:e3: 81:b2:e8:66:67:83:b2:02:85:e6:50:7a:cb:a8:53:bd:6d:dc: 96:67:b9:49:de:88:3b:6a:92:3b:22:93:dd:fa:97:ac:58:44: 8e:2c:f0:94:52:a4:27:2d:78:81:00:64:ae:8e:eb:6f:70:9d: 36:c0:13:31:41:8e:8e:83:b8:d9:eb:a1:9b:fe:f6:cf:37:2b: 0d:9e:3f:86:e8:71:19:fb:b4:d4:3f:e5:00:ca:c2:54:db:c7: 1c:7b:4b:39:1e:0c:a7:bf:fc:33:56:6a:20:3b:aa:a8:30:e9: 65:21:83:74:22:72:66:56:98:1f:1e:7b:dd:5f:04:1a:f8:d7: 2a:37:27:c7:e4:67:62:50:5a:c2:c5:eb:e1:17:ec:3c:9d:d4: 3d:cd:2f:10:a4:91:32:4f:07:10:2e:a0:c6:06:ef:6a:a4:7a: 14:33:06:05:70:17:d3:d4:a6:49:c8:b9:c6:f5:24:e6:77:5d: da:c8:9a:2c:51:f2:78:0a:b9:cf:43:9e:13:15:d9:1d:3c:2c: e8:28:7b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjQwNTE4MTQzMDMyWhcNMjQwNTI1MTQzMDMyWjAYMRYwFAYD VQQDEw02NjQ4YmI4OC1mMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszIjD1tHK7x2OASVHT5ZUSsiiwwuZ4rTWhz/SRpyZmtNLeruxwbPKoK8cb1I 0a3EoKrNy1Jclwso1Offk3kOfDCIV0iCDy4LMIaebEp/RUCJBqQhWl6EIScM/vJ+ nUO8VGL+ZtcAAGEaIHXCnvA2IOv1FZisXjpp/8n/j9ikUdwKA8oC8q+mkM3B2xWq ZyBjjQ3eril6I1Q8Fr4tC0Qkiw8PZtXJuLDppwkLCGqehuhvfeOkYWYaQdm1cHBQ j1IHhrDb23kQNtFDf6eOPN4rjTDfpYPCo4T85ZOmRC1GhgC3mL5up6o0bkmj77TP kikJpb4GbAJeFzQPgP/mLjVz0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHlVD47 oKnU1KDWbzaOCs5G42jfMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDexJ5JXUTudSRe+nJRutTJ0BCITKftLPwQ+rYWEriU1RpZ34v5wjdS vYcU8ypS2wvmGorDBuOBsuhmZ4OyAoXmUHrLqFO9bdyWZ7lJ3og7apI7IpPd+pes WESOLPCUUqQnLXiBAGSujutvcJ02wBMxQY6Og7jZ66Gb/vbPNysNnj+G6HEZ+7TU P+UAysJU28cce0s5Hgynv/wzVmogO6qoMOllIYN0InJmVpgfHnvdXwQa+NcqNyfH 5GdiUFrCxevhF+w8ndQ9zS8QpJEyTwcQLqDGBu9qpHoUMwYFcBfT1KZJyLnG9STm d13ayJosUfJ4CrnPQ54TFdkdPCzoKHtZ -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org