$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: AJ8yUggjmdGtFbTG7Y5YEGizkq7X+A8Owd3uJLcVwvo= Subject key identifier: 56:F4:9A:86:65:24:38:42:82:12:50:FA:3E:00:FF:49:12:0F:6E:3C Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 1FF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 53B0 Signing time: Thu 30 May 2024 15:04:38 +0000 Manifest this update: Thu 30 May 2024 15:04:38 +0000 Manifest next update: Thu 06 Jun 2024 15:04:38 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: JItaGDijeMxzRXo9KwNf2RbZFfXxIrhjo0zEtMuOTac=) 2: 40D6370E09EA11EA95045455C4F9AE02.roa (hash: wZRNUd2fCyBuoTSJ470WFsMEQypHqEO+4iPnq7zf5og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 15:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8179 (0x1ff3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: May 30 15:04:38 2024 GMT Not After : Jun 6 15:04:38 2024 GMT Subject: CN=66589586-74d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:59:8b:e5:df:f3:45:db:8d:b7:94:e8:ac: 6e:c1:17:16:96:1a:e6:2d:fd:4c:8f:ac:9d:34:10: 4d:9d:d0:48:95:f6:fd:fa:4a:81:1b:4a:61:90:03: 95:d9:6e:04:87:e8:32:92:73:3e:63:2f:c6:9d:eb: 65:aa:84:d1:e0:5c:be:4b:98:aa:bb:bb:83:ea:7d: 98:f8:46:13:f1:85:10:58:e6:42:f7:84:2c:86:af: f5:93:f1:2c:36:a8:c8:1d:19:dc:b8:7b:b6:49:bd: ef:2e:5b:8a:6f:76:9e:e6:b5:c7:12:c6:04:36:1f: 2d:5a:38:bf:9f:41:0c:79:d4:d5:3a:91:59:39:79: 06:24:fc:25:71:29:65:3e:c5:0f:92:ba:5c:a2:39: cf:a2:dd:a9:36:38:ea:b2:c9:52:90:64:44:de:8f: 40:1e:5d:66:1f:ec:50:f4:82:87:e9:e3:ba:00:56: 3c:06:33:e1:af:e0:2d:6f:c4:f7:74:f3:9c:88:43: 2e:c1:25:1b:f7:10:4f:47:61:8a:19:e9:14:d7:aa: 69:18:7e:39:02:39:52:4f:1c:96:b1:7c:2b:bc:92: fa:97:55:9b:2a:55:bb:24:3a:09:e7:3a:0a:47:11: 3f:f1:43:3a:ba:15:46:ee:3c:70:b2:e0:b0:2f:9f: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:9A:86:65:24:38:42:82:12:50:FA:3E:00:FF:49:12:0F:6E:3C X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:25:16:ae:9d:5e:da:63:d5:6d:94:7f:a0:44:31:9e:81:c3: 01:05:ef:6e:88:28:c3:fc:51:37:dc:2a:09:6e:f0:86:f2:a9: 24:80:9d:bf:cb:10:5f:f8:23:23:14:d4:85:00:1f:d1:9c:94: a8:a6:be:40:b8:e9:e8:03:5e:fb:f2:5a:03:94:7d:e2:74:81: 1c:57:d5:39:45:5e:e3:b0:e8:54:1b:f8:3f:56:fa:5a:66:d7: 3f:75:db:bf:94:ba:e4:a5:f6:a9:aa:fb:fd:07:8d:1d:18:6a: e1:50:ca:1c:68:de:ec:bf:9b:bf:55:04:f8:38:17:03:39:06: bd:8a:0f:26:07:10:c9:b1:b0:56:60:03:dd:92:08:af:8a:fb: 7d:2b:5e:8d:7d:da:0b:1d:21:a3:95:6a:8b:2d:01:9d:9b:9a: f0:f1:c2:3c:93:15:88:e8:2c:5f:6c:85:d0:9e:14:a6:c8:ec: d7:e5:e4:04:19:3e:fc:15:3a:88:ce:06:96:8e:d8:3e:8a:f2: 0c:f6:50:68:31:42:1e:e7:1b:6d:a5:2b:81:55:69:79:91:7e: 2b:87:55:b3:d6:8f:0b:52:fe:53:f6:60:73:32:2f:d4:cb:fa: 3e:70:f2:bc:a3:bb:45:82:da:59:ff:83:cc:f7:cf:b3:67:d0: 52:dd:63:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjQwNTMwMTUwNDM4WhcNMjQwNjA2MTUwNDM4WjAYMRYwFAYD VQQDEw02NjU4OTU4Ni03NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KxZi+Xf80XbjbeU6KxuwRcWlhrmLf1Mj6ydNBBNndBIlfb9+kqBG0phkAOV 2W4Eh+gyknM+Yy/GnetlqoTR4Fy+S5iqu7uD6n2Y+EYT8YUQWOZC94Qshq/1k/Es NqjIHRncuHu2Sb3vLluKb3ae5rXHEsYENh8tWji/n0EMedTVOpFZOXkGJPwlcSll PsUPkrpcojnPot2pNjjqsslSkGRE3o9AHl1mH+xQ9IKH6eO6AFY8BjPhr+Atb8T3 dPOciEMuwSUb9xBPR2GKGekU16ppGH45AjlSTxyWsXwrvJL6l1WbKlW7JDoJ5zoK RxE/8UM6uhVG7jxwsuCwL5/J0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFb0moZl JDhCghJQ+j4A/0kSD248MB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKJRaunV7aY9VtlH+gRDGegcMBBe9uiCjD/FE33CoJbvCG8qkkgJ2/ yxBf+CMjFNSFAB/RnJSopr5AuOnoA1778loDlH3idIEcV9U5RV7jsOhUG/g/Vvpa Ztc/ddu/lLrkpfapqvv9B40dGGrhUMocaN7sv5u/VQT4OBcDOQa9ig8mBxDJsbBW YAPdkgivivt9K16NfdoLHSGjlWqLLQGdm5rw8cI8kxWI6CxfbIXQnhSmyOzX5eQE GT78FTqIzgaWjtg+ivIM9lBoMUIe5xttpSuBVWl5kX4rh1Wz1o8LUv5T9mBzMi/U y/o+cPK8o7tFgtpZ/4PM98+zZ9BS3WOo -----END CERTIFICATE-----Generated at Thu May 30 18:46:41 2024 by rpki-client on console-ams.rpki-client.org