$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: tc9Ye/zmRp5RH473ZY31oiDrzAUDgus8+2CgNgQ+92c= Subject key identifier: DD:B9:12:6D:FB:DD:51:E3:F9:3B:60:C2:2A:45:93:51:50:AA:2D:19 Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0D16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0CF6 Signing time: Fri 31 May 2024 19:18:27 +0000 Manifest this update: Fri 31 May 2024 19:18:26 +0000 Manifest next update: Fri 07 Jun 2024 19:18:26 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: Gffcc4ufem/lzP4XcT34W5H5HEijpAA18tFL8x47xHw=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: CQft3yyWlVqgdkhk6LgKtfX2CG+KNS0t1dkDLmcZkgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3350 (0xd16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: May 31 19:18:26 2024 GMT Not After : Jun 7 19:18:26 2024 GMT Subject: CN=665a2283-88cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:91:1e:72:53:f8:24:3e:0b:7c:c1:23:d0: 52:45:7b:78:ba:fd:d8:b4:36:44:27:18:98:e5:9b: 4b:0a:20:26:17:d0:38:d5:89:f9:5f:26:66:b2:66: 64:03:fd:dc:12:f9:67:69:49:94:2d:a5:80:91:d2: f9:a2:35:f2:26:78:e6:7e:b5:ff:09:35:e5:05:42: ed:a8:9d:a1:af:c6:82:e4:29:c6:9c:43:8c:64:e4: 88:a7:20:a4:b0:75:76:5b:41:fc:ee:5a:e7:af:0b: 88:41:a7:f6:59:d6:6d:e9:49:01:f1:c2:4c:ab:35: 16:7c:3e:60:16:ff:f1:91:81:98:79:cb:87:6d:9e: c9:38:0d:7a:b1:4b:1b:67:d5:78:c7:06:e2:04:fc: 4c:17:b5:e3:ae:3b:25:5a:b1:ea:54:9c:7f:2f:09: b1:80:bd:18:74:b7:5b:27:1e:c9:42:19:2e:d8:f1: 49:60:fa:df:3e:d5:7a:07:40:13:b1:d3:ce:e3:c7: 44:1f:7e:57:f7:4f:ec:1f:e9:d7:cd:03:b5:7e:08: 33:2f:e8:69:f2:68:f7:e7:7d:6d:7b:a8:a5:de:01: b8:b0:06:a1:d0:b0:25:f3:cc:13:47:31:09:48:7f: cb:12:80:f4:9a:d9:01:d5:d7:d9:83:0e:72:eb:41: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:12:6D:FB:DD:51:E3:F9:3B:60:C2:2A:45:93:51:50:AA:2D:19 X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:72:0f:38:07:cf:f2:d1:6b:00:61:8f:76:22:0a:2b:87:80: 71:99:b5:bb:ee:ee:c5:9c:92:33:b3:53:2a:60:65:cf:0c:01: 07:8d:98:57:ba:9a:e8:a4:f0:0a:e3:11:a9:8a:2c:64:1d:35: cc:fe:2e:49:af:f5:82:35:99:a1:a5:e8:ba:54:3e:ce:ce:d2: 05:e0:8f:e6:aa:36:ca:60:7a:53:3b:18:e6:1d:8e:f2:f7:7b: 7f:0a:4e:e9:30:97:dc:f2:4c:be:87:18:39:88:53:bc:87:62: 88:88:72:5e:ac:8d:0a:6d:02:42:48:06:f1:90:68:43:2d:ed: 8d:ff:a3:77:fa:5d:b4:5f:8e:32:6d:b8:ed:75:a3:23:76:bf: 12:5a:c9:0c:f5:82:db:00:e3:52:f4:66:d0:21:b8:30:e5:1e: 5e:14:ca:8c:49:6e:4b:11:b7:8c:72:2a:fe:5c:9c:0d:59:21: d2:e7:4a:24:6a:1e:7e:7a:bd:4e:62:34:3c:a1:c2:bd:47:a2: 58:09:ab:33:6f:dc:6b:ee:5d:93:59:20:09:31:05:61:14:31: f1:10:5c:9f:8a:9d:f2:bc:9e:79:f8:7e:b3:55:5f:04:c5:d5: 12:d9:df:47:9f:d2:20:49:64:2f:89:12:46:ab:58:d3:46:59: 3f:3c:91:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjQwNTMxMTkxODI2WhcNMjQwNjA3MTkxODI2WjAYMRYwFAYD VQQDEw02NjVhMjI4My04OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtraRHnJT+CQ+C3zBI9BSRXt4uv3YtDZEJxiY5ZtLCiAmF9A41Yn5XyZmsmZk A/3cEvlnaUmULaWAkdL5ojXyJnjmfrX/CTXlBULtqJ2hr8aC5CnGnEOMZOSIpyCk sHV2W0H87lrnrwuIQaf2WdZt6UkB8cJMqzUWfD5gFv/xkYGYecuHbZ7JOA16sUsb Z9V4xwbiBPxMF7XjrjslWrHqVJx/LwmxgL0YdLdbJx7JQhku2PFJYPrfPtV6B0AT sdPO48dEH35X90/sH+nXzQO1fggzL+hp8mj3531te6il3gG4sAah0LAl88wTRzEJ SH/LEoD0mtkB1dfZgw5y60FuKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN25Em37 3VHj+TtgwipFk1FQqi0ZMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2cg84B8/y0WsAYY92Igorh4BxmbW77u7FnJIzs1MqYGXPDAEHjZhX upropPAK4xGpiixkHTXM/i5Jr/WCNZmhpei6VD7OztIF4I/mqjbKYHpTOxjmHY7y 93t/Ck7pMJfc8ky+hxg5iFO8h2KIiHJerI0KbQJCSAbxkGhDLe2N/6N3+l20X44y bbjtdaMjdr8SWskM9YLbAONS9GbQIbgw5R5eFMqMSW5LEbeMcir+XJwNWSHS50ok ah5+er1OYjQ8ocK9R6JYCaszb9xr7l2TWSAJMQVhFDHxEFyfip3yvJ55+H6zVV8E xdUS2d9Hn9IgSWQviRJGq1jTRlk/PJEb -----END CERTIFICATE-----Generated at Fri May 31 20:34:12 2024 by rpki-client on console-ams.rpki-client.org