$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json) Hash identifier: /nUml/Q+LSLHsu3XwhKjGT2R1YWz8tViNquSRrDwlko= Subject key identifier: 9C:D9:EA:36:94:30:D7:77:92:7B:E5:7A:74:E8:FF:C6:03:BB:F0:7F Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft Manifest number: 0175 Signing time: Sun 19 May 2024 04:47:27 +0000 Manifest this update: Sun 19 May 2024 04:47:26 +0000 Manifest next update: Sun 26 May 2024 04:47:26 +0000 Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: EyxNd+thxrAupvR5moEcRH+aT2BYbV09xuOzpnL6a70=) 2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: BhHsuDvF2f7620isXUel0aXspowaKrXhDpQE+ZQofDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Validity Not Before: May 19 04:47:26 2024 GMT Not After : May 26 04:47:26 2024 GMT Subject: CN=6649845f-29df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:1e:f0:a6:84:09:53:56:fe:59:68:2c:88: 40:58:b4:b5:8a:df:6e:53:ee:9a:c8:88:0c:25:54: c4:1e:a7:49:57:83:02:e6:1a:39:8a:30:8c:fa:ad: 5c:63:55:54:5b:a9:41:73:e2:28:73:85:dc:0c:62: 08:6d:e4:c0:27:1a:7b:32:e6:0f:8a:4d:50:af:09: 18:56:6a:10:d6:0b:c0:f2:4c:0f:87:15:6c:0f:89: 24:74:2e:33:df:ea:c4:3d:30:9a:23:c6:7d:ad:ef: d9:2a:c5:76:21:54:04:6b:65:f1:d3:da:1d:97:1d: 17:6e:5d:69:74:c3:b5:f5:11:71:2d:cb:ea:ab:4c: ee:57:3d:56:37:0f:0b:7f:b8:65:da:02:7b:03:7b: ad:2d:bd:a2:51:6a:d3:39:87:04:f7:63:dd:09:d3: 9d:f2:83:81:c9:82:73:c2:80:bb:af:be:ef:bd:2d: 23:3b:7a:d0:8c:c5:d1:f6:be:aa:b1:d5:1d:e7:ff: 16:db:55:3e:2a:68:a7:44:62:81:1f:48:71:d7:e4: cd:2e:f0:b9:e9:b8:10:9f:5a:e9:cd:ef:d2:d7:36: 91:82:8f:ae:80:4c:3b:56:b2:be:c3:8b:ce:1c:8b: f7:6b:62:82:f7:a1:4e:89:c9:ab:a2:78:b4:af:21: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D9:EA:36:94:30:D7:77:92:7B:E5:7A:74:E8:FF:C6:03:BB:F0:7F X509v3 Authority Key Identifier: keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:61:54:63:24:9f:a4:b7:27:54:11:4e:9b:c8:0e:db:a6: 9e:12:68:ab:ca:28:67:c3:bc:42:f8:eb:7c:dc:88:47:cc:47: af:51:f8:fd:2e:4f:ad:2c:10:ed:17:cd:5c:e5:77:76:47:96: b2:ed:93:d0:50:02:f9:7f:9a:49:15:89:39:1d:3f:d5:f2:35: 79:4f:f2:20:40:2e:36:91:1a:b6:50:71:8a:3d:b3:d5:57:0f: da:01:19:f2:b2:a4:4a:c3:6e:62:a0:80:59:77:52:e4:c2:44: 60:42:f5:48:09:be:15:09:90:2e:ac:ce:ab:9d:11:f9:b6:55: 2e:aa:67:8e:01:c4:02:c5:02:08:d5:c7:41:59:50:7d:0f:00: 1d:1b:69:c9:bc:a3:34:de:8d:aa:b2:0c:e2:5e:e8:42:1f:43: c1:ce:bc:9a:5b:53:c4:34:6f:68:c5:b3:cf:b7:dd:9c:b2:92: c9:2b:71:ff:7d:62:39:26:b6:b5:7b:3f:84:92:8d:8e:fe:7e: ff:43:e9:28:48:54:e0:96:41:be:c3:73:17:73:26:61:89:ef: dc:95:e6:61:97:81:be:5e:41:6b:c0:c8:87:a5:16:a9:63:0c: b7:21:e1:ec:c7:2f:39:d4:7a:bf:f7:32:76:88:06:02:a3:da: 0f:2a:3c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3RjkxMTAvBgNVBAUTKEFBNTc5MEIwRjdENzYyQkU5MzJCOURDNjExQjdENjlC OTA2ODVBNEUwHhcNMjQwNTE5MDQ0NzI2WhcNMjQwNTI2MDQ0NzI2WjAYMRYwFAYD VQQDEw02NjQ5ODQ1Zi0yOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+ke8KaECVNW/lloLIhAWLS1it9uU+6ayIgMJVTEHqdJV4MC5ho5ijCM+q1c Y1VUW6lBc+Ioc4XcDGIIbeTAJxp7MuYPik1QrwkYVmoQ1gvA8kwPhxVsD4kkdC4z 3+rEPTCaI8Z9re/ZKsV2IVQEa2Xx09odlx0Xbl1pdMO19RFxLcvqq0zuVz1WNw8L f7hl2gJ7A3utLb2iUWrTOYcE92PdCdOd8oOByYJzwoC7r77vvS0jO3rQjMXR9r6q sdUd5/8W21U+KminRGKBH0hx1+TNLvC56bgQn1rpze/S1zaRgo+ugEw7VrK+w4vO HIv3a2KC96FOicmroni0ryECwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzZ6jaU MNd3knvlenTo/8YDu/B/MB8GA1UdIwQYMBaAFKpXkLD312K+kyudxhG31puQaFpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdGOS8yQUVDRTY2QTI3 QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFlyNlRLNTNHRWJmV201Qm9X azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FsZVFzUGZYWXI2VEs1M0dFYmZXbTVCb1drNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdGOS8yQUVDRTY2QTI3QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFly NlRLNTNHRWJmV201Qm9XazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNtGFUYySfpLcnVBFOm8gO26aeEmiryihnw7xC+Ot83IhHzEevUfj9 Lk+tLBDtF81c5Xd2R5ay7ZPQUAL5f5pJFYk5HT/V8jV5T/IgQC42kRq2UHGKPbPV Vw/aARnysqRKw25ioIBZd1LkwkRgQvVICb4VCZAurM6rnRH5tlUuqmeOAcQCxQII 1cdBWVB9DwAdG2nJvKM03o2qsgziXuhCH0PBzryaW1PENG9oxbPPt92cspLJK3H/ fWI5Jra1ez+Eko2O/n7/Q+koSFTglkG+w3MXcyZhie/cleZhl4G+XkFrwMiHpRap Ywy3IeHsxy851Hq/9zJ2iAYCo9oPKjxF -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org