$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: wWdIuqLcQBy9UsUqj9CpqlBzUIHPz0E8gWmao3CrCT4= Subject key identifier: 09:BD:8A:87:3F:64:77:E4:AC:0A:BA:38:1C:FF:74:2F:BE:93:14:14 Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 0506 Signing time: Sun 19 May 2024 01:10:09 +0000 Manifest this update: Sun 19 May 2024 01:10:09 +0000 Manifest next update: Sun 26 May 2024 01:10:08 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: mf5BPUIGWEVNTO4er6XPootQwLyDwqWj1nCtlgx5/yA=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: fu0SOATxwuixy/lectg6bpQEPRkgWV5KVwQEZjGQYLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: May 19 01:10:09 2024 GMT Not After : May 26 01:10:08 2024 GMT Subject: CN=66495171-0559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:e8:47:49:d5:87:b3:a5:c1:fb:93:47:6c: 7d:75:95:21:a2:59:45:f2:b2:88:e8:99:be:f7:37: d0:8e:bf:12:a8:fb:ed:48:45:40:6e:e9:ff:52:9a: 09:3c:e6:8c:69:03:ea:9a:28:5f:f3:0b:4f:bf:7d: 1b:b5:fc:f8:e4:16:4e:e0:bf:77:2d:27:e7:cb:95: 06:e8:2a:98:96:37:95:58:b9:85:14:3a:13:97:dd: 6c:f0:c4:f3:ac:7c:2d:78:7a:5c:98:39:fb:1d:c4: 7d:24:80:66:fd:fc:19:e4:ac:e3:13:6c:2e:8d:15: 31:3e:1f:c2:5a:74:ac:c8:bd:cc:44:c9:19:a8:85: 92:7f:c1:22:ba:31:dd:5f:e3:f8:3a:24:7a:9c:6c: a9:a3:1f:bd:f4:d3:fe:c1:a4:58:5b:9f:7c:62:c0: 80:52:5a:b2:ca:0a:0f:6b:72:4a:30:a4:2c:6f:12: 3f:b1:c8:0f:9a:97:d9:5f:48:46:e3:ce:05:98:81: 05:c8:bd:cd:39:38:21:bd:7a:fa:94:f4:29:e3:41: f3:98:5e:93:82:85:00:1d:fd:a0:52:f1:1d:e4:3c: 07:08:90:b5:ee:01:58:55:27:95:43:82:53:33:09: a1:93:f3:96:97:d6:d8:4b:f8:6d:ea:fd:4e:1b:2c: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BD:8A:87:3F:64:77:E4:AC:0A:BA:38:1C:FF:74:2F:BE:93:14:14 X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8b:8d:bc:f0:34:70:4b:d0:e0:3f:d6:88:f6:f9:0a:48:59: 61:a0:5f:76:c7:a9:6b:b1:10:b1:35:7c:a7:b2:3c:1e:33:40: 3d:fa:6f:84:16:7e:fa:1c:d7:8e:cf:e1:85:50:d6:69:e9:87: bf:ca:a2:ef:e2:0e:22:9b:14:09:03:43:b8:94:f3:15:a0:1b: c9:1b:68:0c:b1:93:d2:e3:53:dc:57:1d:11:b7:eb:ae:97:7f: 40:e6:47:2a:c4:de:10:58:8f:a9:63:85:b4:28:64:bf:07:d2: 9e:86:33:cd:2b:84:d6:14:9e:0e:ed:e6:50:a2:19:39:88:f3: 52:dc:8e:d9:8f:b1:b2:c4:1f:cf:49:c3:b2:05:05:d5:b0:14: e4:31:80:09:aa:f9:62:25:39:d9:72:1a:70:31:88:66:65:8e: 58:e3:10:13:79:e6:74:2c:83:8b:85:7f:8b:01:7a:be:45:ab: 18:14:95:89:e5:07:0b:15:9b:e6:ab:c5:40:de:b8:a7:05:89: c2:44:3b:24:fd:d6:0c:b6:3f:bb:6c:cc:e1:c8:f2:c8:e8:47: 8d:69:ea:12:65:0b:59:55:23:04:62:ab:d7:8b:37:09:86:29: e3:4d:44:0a:7e:d5:d8:e6:5a:1c:21:1c:d6:02:6f:4d:87:86: e8:ef:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjQwNTE5MDExMDA5WhcNMjQwNTI2MDExMDA4WjAYMRYwFAYD VQQDEw02NjQ5NTE3MS0wNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvHoR0nVh7OlwfuTR2x9dZUhollF8rKI6Jm+9zfQjr8SqPvtSEVAbun/UpoJ POaMaQPqmihf8wtPv30btfz45BZO4L93LSfny5UG6CqYljeVWLmFFDoTl91s8MTz rHwteHpcmDn7HcR9JIBm/fwZ5KzjE2wujRUxPh/CWnSsyL3MRMkZqIWSf8EiujHd X+P4OiR6nGypox+99NP+waRYW598YsCAUlqyygoPa3JKMKQsbxI/scgPmpfZX0hG 484FmIEFyL3NOTghvXr6lPQp40HzmF6TgoUAHf2gUvEd5DwHCJC17gFYVSeVQ4JT Mwmhk/OWl9bYS/ht6v1OGyzQyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm9ioc/ ZHfkrAq6OBz/dC++kxQUMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSi4288DRwS9DgP9aI9vkKSFlhoF92x6lrsRCxNXynsjweM0A9+m+E Fn76HNeOz+GFUNZp6Ye/yqLv4g4imxQJA0O4lPMVoBvJG2gMsZPS41PcVx0Rt+uu l39A5kcqxN4QWI+pY4W0KGS/B9KehjPNK4TWFJ4O7eZQohk5iPNS3I7Zj7GyxB/P ScOyBQXVsBTkMYAJqvliJTnZchpwMYhmZY5Y4xATeeZ0LIOLhX+LAXq+RasYFJWJ 5QcLFZvmq8VA3rinBYnCRDsk/dYMtj+7bMzhyPLI6EeNaeoSZQtZVSMEYqvXizcJ hinjTUQKftXY5locIRzWAm9Nh4bo72L3 -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org