$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: CRNectK9C3oAwvb7j0E5LiLUdD83iKTLNJo9zIubgOI= Subject key identifier: 87:A6:28:B0:E9:90:B9:A0:92:CB:13:9F:BF:2F:45:93:A9:18:60:31 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 69 Signing time: Sun 19 May 2024 07:59:54 +0000 Manifest this update: Sun 19 May 2024 07:59:54 +0000 Manifest next update: Sun 26 May 2024 07:59:54 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: ELD6B1O4NPBe2LX7YRh6eBYthFYHs4tBrpPmjoscfl8=) 2: 206CBC5CF76811EEAF5CBE5FC4F9AE02.roa (hash: Zbfa5MMYIb5XjdO39IICaP2hG6ZT9IQx+CLPJhnO76o=) 3: 9CDA9126F76611EE99BA2B43C4F9AE02.roa (hash: OpyXnyA/Ad1XYEszmU5CKJ88pHcx3yghHfsVKBcNcyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: May 19 07:59:54 2024 GMT Not After : May 26 07:59:54 2024 GMT Subject: CN=6649b17a-b7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:9c:50:ad:39:b7:f4:1a:73:85:99:e5:36: 00:d9:4c:89:2e:9f:13:4e:98:04:18:b4:62:db:7d: 3e:95:15:fc:f0:91:02:ae:c7:05:be:fa:b3:8c:d7: e1:60:50:71:05:de:3f:cf:78:0f:be:c9:10:8d:98: 7e:9a:ae:74:73:82:6e:cc:08:0b:60:0e:e4:cc:c3: 2b:af:8e:a8:c8:17:0b:c8:96:0c:62:4f:4f:47:46: e4:51:1e:8c:51:ba:58:9b:58:1f:00:c4:b4:40:d1: 46:79:31:52:7a:d8:e1:b2:18:32:e5:ca:64:e9:ad: cf:9b:5c:e2:8e:77:99:ba:96:ca:ab:28:94:03:46: 09:3c:6a:08:69:30:d1:e2:88:64:c1:10:c9:45:ff: b1:ad:98:e2:54:f0:d6:50:43:0e:b0:6b:1d:f9:ca: f1:5f:f2:ec:36:8d:41:fd:ab:86:90:b3:15:1d:5e: 4c:b4:4f:26:6f:55:b3:f1:93:18:af:de:a6:97:cb: c0:4a:5f:ea:2e:b0:f5:6c:71:b0:41:c9:94:f1:5b: ab:29:2c:93:5d:4e:a4:91:6b:b5:f8:52:a6:e3:f6: 58:5b:1d:42:2f:77:67:29:b7:ed:24:8d:06:7f:28: f9:aa:5a:b3:90:4d:e4:29:d2:8c:78:2d:46:41:aa: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:28:B0:E9:90:B9:A0:92:CB:13:9F:BF:2F:45:93:A9:18:60:31 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:a2:1a:15:d4:00:9e:0f:63:28:d0:75:0b:f5:6c:c7:8a: de:39:9f:b6:51:4f:56:42:83:aa:5c:c2:09:47:92:24:ae:14: a9:bf:c8:bc:49:ff:42:6f:b8:ff:f9:d2:c2:7c:4f:cb:13:9d: 22:e3:df:34:7b:11:06:c9:2c:a4:ad:e8:67:fc:0f:d0:44:4c: 74:74:7d:50:dc:32:b4:e3:50:cd:ac:9b:50:59:98:fb:20:98: 7d:c4:b4:7b:a5:86:ee:e2:29:ad:eb:23:48:05:d2:37:37:97: ce:8f:7f:e2:fd:5f:3a:d1:93:09:0e:a5:93:52:54:bc:a7:b4: e7:5e:be:0a:85:f3:8d:0d:c1:db:84:b0:b3:c6:db:44:11:36: be:33:80:45:2e:e9:ce:5f:69:5a:35:42:5a:27:d8:24:67:0e: 78:fc:e4:11:0a:81:29:e5:ed:ff:3e:60:77:e0:8d:63:02:a4: 31:d2:b3:8c:f5:88:1a:f4:8b:d1:f3:d4:a2:53:76:f9:79:d5: 5e:58:9d:7f:f4:be:b4:96:c1:54:42:d9:01:e9:8d:8a:5f:4e: be:9c:53:ce:de:a8:73:00:c5:49:50:a8:15:15:cb:96:70:ba: cd:70:3a:a0:d8:08:46:27:d1:30:7b:e8:e4:95:d4:b9:9c:58: f7:28:a8:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTkyRDExMC8GA1UEBRMoQTgxRDBENjFGN0I3MzBEREI3NDJDQzQ4QUREODhBMDRE NDZGRDAyNDAeFw0yNDA1MTkwNzU5NTRaFw0yNDA1MjYwNzU5NTRaMBgxFjAUBgNV BAMTDTY2NDliMTdhLWI3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmdJxQrTm39BpzhZnlNgDZTIkunxNOmAQYtGLbfT6VFfzwkQKuxwW++rOM1+Fg UHEF3j/PeA++yRCNmH6arnRzgm7MCAtgDuTMwyuvjqjIFwvIlgxiT09HRuRRHoxR ulibWB8AxLRA0UZ5MVJ62OGyGDLlymTprc+bXOKOd5m6lsqrKJQDRgk8aghpMNHi iGTBEMlF/7GtmOJU8NZQQw6wax35yvFf8uw2jUH9q4aQsxUdXky0TyZvVbPxkxiv 3qaXy8BKX+ousPVscbBByZTxW6spLJNdTqSRa7X4Uqbj9lhbHUIvd2cpt+0kjQZ/ KPmqWrOQTeQp0ox4LUZBqs9XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh6YosOmQ uaCSyxOfvy9Fk6kYYDEwHwYDVR0jBBgwFoAUqB0NYfe3MN23QsxIrdiKBNRv0CQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExOTJEL0NDNjdEMjUyQTRC QzExRUU5RTVBNUQ3MkM0RjlBRTAyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUIwTllmZTNNTjIzUXN4SXJkaUtCTlJ2MENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx OTJEL0NDNjdEMjUyQTRCQzExRUU5RTVBNUQ3MkM0RjlBRTAyL3FCME5ZZmUzTU4y M1FzeElyZGlLQk5SdjBDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPsohoV1ACeD2Mo0HUL9WzHit45n7ZRT1ZCg6pcwglHkiSuFKm/yLxJ /0JvuP/50sJ8T8sTnSLj3zR7EQbJLKSt6Gf8D9BETHR0fVDcMrTjUM2sm1BZmPsg mH3EtHulhu7iKa3rI0gF0jc3l86Pf+L9XzrRkwkOpZNSVLyntOdevgqF840NwduE sLPG20QRNr4zgEUu6c5faVo1Qlon2CRnDnj85BEKgSnl7f8+YHfgjWMCpDHSs4z1 iBr0i9Hz1KJTdvl51V5YnX/0vrSWwVRC2QHpjYpfTr6cU87eqHMAxUlQqBUVy5Zw us1wOqDYCEYn0TB76OSV1LmcWPcoqNs= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org