$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: dUmtzgm5roWnnCVEa+PvLY0rFiujs/pppcJgfkPFyMM= Subject key identifier: 64:26:37:8C:00:B6:76:87:99:7F:50:1F:F0:AA:E8:3D:38:6C:AA:C2 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 192A Signing time: Sat 18 May 2024 16:51:27 +0000 Manifest this update: Sat 18 May 2024 16:51:26 +0000 Manifest next update: Sat 25 May 2024 16:51:26 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: V7OS1mimuWiEQucQ4VxnWBajN9sYBTLZ7z91TloKYKM=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: /r9L/quFrkZXr3YqN84IxLT9NVKKHI9054i3mJQRoRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6448 (0x1930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: May 18 16:51:26 2024 GMT Not After : May 25 16:51:26 2024 GMT Subject: CN=6648dc8f-27d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:17:23:f0:29:39:d8:04:b5:1e:7a:ea:9b: cb:42:32:20:d6:cf:5e:5e:f7:a0:5d:62:9f:bd:d0: 33:5d:dd:a1:d1:12:32:4f:d3:77:c8:84:ba:30:6e: 87:3e:b7:ee:99:7d:e6:dd:d8:e2:ec:de:ec:a2:8b: 09:82:e2:8d:34:3f:f6:2d:33:44:49:41:de:59:22: 67:f9:95:35:7a:ad:e6:83:d5:e2:bc:cc:eb:28:2b: 45:45:1f:e5:19:b3:86:21:20:c9:91:a9:df:dd:38: ae:1f:c8:00:cc:a5:25:d2:4f:c1:65:14:c3:8c:af: 4f:29:75:52:c7:6d:f1:2e:8f:71:2f:d5:0e:6a:7c: ba:01:e7:6d:8b:f7:d9:cc:d4:66:e6:b0:cf:6b:95: 37:df:54:28:7f:95:8f:3c:36:cd:59:6d:bc:a9:97: 1d:1b:42:1f:ba:bd:d2:35:12:fe:40:22:78:ae:7c: ec:8e:f0:dc:2e:2b:5c:88:4f:b2:dd:48:10:a4:af: bb:5b:b3:cd:6f:9d:f2:d9:63:8e:5b:dd:9d:81:bd: ae:bd:fc:88:03:21:fe:b3:4e:da:55:80:67:7d:75: d1:6a:e6:09:09:86:10:6c:5d:f9:9c:f0:aa:53:9e: dc:65:99:ab:0c:51:5f:bb:03:69:74:4c:31:40:f0: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:37:8C:00:B6:76:87:99:7F:50:1F:F0:AA:E8:3D:38:6C:AA:C2 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:7c:07:b4:4d:fd:fc:cd:f2:78:11:e1:e7:1c:73:23:ac: d2:92:7d:2f:01:f3:a1:38:82:b2:f2:44:e9:54:dc:2e:68:65: 75:0c:33:3d:d6:15:14:6a:f7:a4:1e:80:bc:79:d5:4c:be:c7: 47:6b:8b:18:64:50:b4:e5:2d:21:bc:ba:c5:d6:70:b1:30:59: f6:a3:17:72:f2:77:d0:91:ef:9d:d9:ca:0f:d2:c5:01:bd:5e: b3:11:5f:1e:9f:ce:e5:dc:69:4c:2d:e9:b7:49:1b:53:e1:8c: a5:bf:b7:b9:36:ba:f7:86:7f:a0:7e:9c:c2:53:08:c4:6b:6e: 28:c3:5e:5f:52:04:d7:91:57:fc:4f:1e:16:96:60:4f:b6:23: a7:b6:e6:de:c2:b9:df:be:70:32:a2:3a:7d:69:2f:af:d3:a8: 7e:0b:38:05:fd:01:36:7a:63:7d:dc:41:81:b4:28:eb:8a:3d: 68:42:a3:a9:9b:4b:3f:e7:cb:40:75:24:9d:97:bd:9a:4b:24: 77:1e:75:e6:29:3c:98:90:ab:86:32:1b:0e:ae:f4:7f:4f:15: c0:bd:df:eb:d6:6a:70:55:e9:83:9d:a1:dd:0b:20:a2:56:cf: 38:70:1d:c7:23:2b:55:12:b0:b2:4c:01:2e:d5:0f:2d:af:97: 67:8c:81:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjQwNTE4MTY1MTI2WhcNMjQwNTI1MTY1MTI2WjAYMRYwFAYD VQQDEw02NjQ4ZGM4Zi0yN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP8XI/ApOdgEtR566pvLQjIg1s9eXvegXWKfvdAzXd2h0RIyT9N3yIS6MG6H PrfumX3m3dji7N7soosJguKNND/2LTNESUHeWSJn+ZU1eq3mg9XivMzrKCtFRR/l GbOGISDJkanf3TiuH8gAzKUl0k/BZRTDjK9PKXVSx23xLo9xL9UOany6Aedti/fZ zNRm5rDPa5U331Qof5WPPDbNWW28qZcdG0Ifur3SNRL+QCJ4rnzsjvDcLitciE+y 3UgQpK+7W7PNb53y2WOOW92dgb2uvfyIAyH+s07aVYBnfXXRauYJCYYQbF35nPCq U57cZZmrDFFfuwNpdEwxQPB0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQmN4wA tnaHmX9QH/Cq6D04bKrCMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mnwHtE39/M3yeBHh5xxzI6zSkn0vAfOhOIKy8kTpVNwuaGV1DDM9 1hUUavekHoC8edVMvsdHa4sYZFC05S0hvLrF1nCxMFn2oxdy8nfQke+d2coP0sUB vV6zEV8en87l3GlMLem3SRtT4Yylv7e5Nrr3hn+gfpzCUwjEa24ow15fUgTXkVf8 Tx4WlmBPtiOntubewrnfvnAyojp9aS+v06h+CzgF/QE2emN93EGBtCjrij1oQqOp m0s/58tAdSSdl72aSyR3HnXmKTyYkKuGMhsOrvR/TxXAvd/r1mpwVemDnaHdCyCi Vs84cB3HIytVErCyTAEu1Q8tr5dnjIEO -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org