$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json) Hash identifier: NkLWE3wyPXxRBIAh6tNzz8gnaXrAc53WkyShCoMkcdo= Subject key identifier: CD:70:80:93:45:10:97:4B:2C:0D:73:A5:28:FA:B0:52:D1:05:CE:9E Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft Manifest number: 9D Signing time: Sun 19 May 2024 06:48:01 +0000 Manifest this update: Sun 19 May 2024 06:48:01 +0000 Manifest next update: Sun 26 May 2024 06:48:01 +0000 Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: wjcQf75cULX4iQUwYXoujL/lqPhMqm7S5Oz67VYKyUY=) 2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: ci6hyF3t5tI7K8Pi8BH/1vF4QKnpok6GZyzzrAxuZzM=) 3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: RZMve5XRVWle+RvBpGaeHCN9mHTmP3f3OrPVKG2OavE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: May 19 06:48:01 2024 GMT Not After : May 26 06:48:01 2024 GMT Subject: CN=6649a0a1-b3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:98:f3:d7:d8:a9:2a:cb:3a:f8:d4:c6:2b: e2:c3:87:da:a2:da:df:ae:99:19:88:81:84:9f:31: e0:85:58:5d:00:d1:a0:75:ca:33:07:09:9a:84:34: 13:96:f4:8a:96:6c:92:0e:d2:cb:f2:cb:0e:01:f4: 18:11:af:b8:ce:5c:69:09:dc:e8:4b:af:48:bc:1a: 5b:ca:7c:59:df:5d:5b:f2:43:e3:0c:a0:91:8f:a3: 5f:ae:31:34:da:c5:e4:29:c3:4c:61:f4:23:ac:2d: 4b:1b:13:a0:58:2f:cb:1a:d8:ef:ef:e9:8b:9f:d4: 73:75:e6:23:18:41:00:d6:19:a8:34:7d:10:1b:3d: e0:62:12:05:43:f6:55:5b:31:95:5e:49:f8:ea:a4: ce:e8:80:6a:c5:d2:7e:9d:9d:16:eb:2e:87:a5:87: 1a:db:f1:ec:01:a6:95:fc:45:8e:c1:f8:d1:42:01: e5:5d:e8:c5:89:77:69:52:20:3c:5e:53:68:ba:2d: f3:55:3c:59:b3:8b:75:97:0d:f7:2e:ac:6e:f1:78: 79:db:9d:d2:d4:2a:3e:fd:83:19:c8:b1:98:23:21: 69:07:da:93:00:c7:9e:3e:0f:e6:cc:13:2c:6f:02: 55:59:96:44:51:79:b7:f1:45:2a:f9:be:7b:17:17: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:80:93:45:10:97:4B:2C:0D:73:A5:28:FA:B0:52:D1:05:CE:9E X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:a2:63:2a:a4:03:cb:e4:9e:fa:86:86:b5:bf:29:49:71:1e: 52:16:53:79:0f:26:cd:18:c3:00:0e:28:1c:77:cf:73:95:a2: a4:8a:88:d1:e0:c8:e3:e0:2d:6a:34:3f:bf:99:b0:fd:27:6d: c8:b8:c0:d9:96:d0:f8:a9:e9:a2:b0:a9:19:28:f4:9b:9f:97: c9:65:ee:78:55:3f:57:18:c2:db:96:4b:61:d5:4d:dd:7b:31: 09:41:ca:a2:05:b2:a6:4f:0e:03:ec:b7:04:01:a4:10:f4:23: 45:a2:03:56:1a:bb:f1:39:74:bd:12:25:ac:eb:0d:6d:58:2f: e3:8e:bb:ec:63:f5:00:2b:cb:a9:e1:ea:ae:85:36:0c:1a:9b: e1:64:93:3c:bc:27:60:a3:cd:69:ac:1c:c8:e4:79:6a:3a:fc: 08:9c:80:99:34:9c:b1:a1:e8:da:36:14:5b:38:fe:8e:40:8e: 38:63:74:62:16:c0:92:ec:2b:27:da:dc:4a:08:64:b3:20:fd: a6:fc:62:34:cd:30:e3:52:c6:eb:fe:72:33:c8:cd:dc:14:39: 81:89:cf:b6:eb:09:f3:f5:f7:cf:66:49:23:fb:7b:85:45:b3: 5a:73:47:70:7c:34:4b:d2:e3:8f:75:61:c8:e0:5a:69:f8:fa: 43:fd:17:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx NzkwQjdENDEwHhcNMjQwNTE5MDY0ODAxWhcNMjQwNTI2MDY0ODAxWjAYMRYwFAYD VQQDEw02NjQ5YTBhMS1iM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDWY89fYqSrLOvjUxiviw4faotrfrpkZiIGEnzHghVhdANGgdcozBwmahDQT lvSKlmySDtLL8ssOAfQYEa+4zlxpCdzoS69IvBpbynxZ311b8kPjDKCRj6NfrjE0 2sXkKcNMYfQjrC1LGxOgWC/LGtjv7+mLn9RzdeYjGEEA1hmoNH0QGz3gYhIFQ/ZV WzGVXkn46qTO6IBqxdJ+nZ0W6y6HpYca2/HsAaaV/EWOwfjRQgHlXejFiXdpUiA8 XlNoui3zVTxZs4t1lw33Lqxu8Xh5253S1Co+/YMZyLGYIyFpB9qTAMeePg/mzBMs bwJVWZZEUXm38UUq+b57FxdSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1wgJNF EJdLLA1zpSj6sFLRBc6eMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2 MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBomMqpAPL5J76hoa1vylJcR5SFlN5DybNGMMADigcd89zlaKkiojR 4Mjj4C1qND+/mbD9J23IuMDZltD4qemisKkZKPSbn5fJZe54VT9XGMLblkth1U3d ezEJQcqiBbKmTw4D7LcEAaQQ9CNFogNWGrvxOXS9EiWs6w1tWC/jjrvsY/UAK8up 4equhTYMGpvhZJM8vCdgo81prBzI5HlqOvwInICZNJyxoejaNhRbOP6OQI44Y3Ri FsCS7Csn2txKCGSzIP2m/GI0zTDjUsbr/nIzyM3cFDmBic+26wnz9ffPZkkj+3uF RbNac0dwfDRL0uOPdWHI4Fpp+PpD/Rcq -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org