$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: NKBamcWnseHdErA/Lo4uYyctAWa9AjhG/7K95slxa44= Subject key identifier: 61:1B:4A:31:AB:2E:6E:65:1C:88:98:BE:3D:33:32:5B:13:E9:E0:22 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0365 Signing time: Sun 19 May 2024 02:53:32 +0000 Manifest this update: Sun 19 May 2024 02:53:31 +0000 Manifest next update: Sun 26 May 2024 02:53:31 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: dk7LVb4Hqm4m3huh+9L2el1mDSKhdfGfyrHM0N23m60=) 2: 550459C02ACC11EE9FF1653AC4F9AE02.roa (hash: Pp2wl6A3zSkq1VTKNVHUqApUF811bZXZ3Xx2fT+zh/o=) 3: 55CD1A722ACC11EE9FF1653AC4F9AE02.roa (hash: M66SkyK4TPOq2V8lBvnKKFj3UvFS815tccQ5yDnDLTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: May 19 02:53:31 2024 GMT Not After : May 26 02:53:31 2024 GMT Subject: CN=664969ab-bb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:77:fe:24:f6:65:43:d9:b8:5b:2f:97:eb: 43:38:a9:48:83:ac:eb:62:d7:ef:96:20:23:3b:d9: c0:20:3f:15:cb:13:9b:02:20:d1:62:7c:7d:3d:43: 0d:3f:3e:6c:4b:df:17:dd:42:86:2a:c7:0b:14:ce: fd:22:8f:92:35:43:92:23:f9:68:d6:6c:ad:39:95: 64:75:67:86:b9:d7:59:60:86:ac:ac:a2:f6:f8:75: 9a:ef:a7:8e:36:f5:ed:57:0c:5c:53:d6:74:8b:cc: 51:89:69:67:61:8a:bb:79:55:d2:25:24:e2:6a:44: 4a:b0:0b:fc:b0:51:be:2a:7c:90:f0:31:4f:22:26: a2:82:51:0c:92:e2:51:0e:28:17:3a:8e:1c:0d:f8: 0d:33:3d:71:36:49:a9:9c:08:61:5a:8e:c2:b8:4f: 55:7b:e6:e2:44:16:a0:69:f8:0b:70:d0:29:ff:fc: 4e:19:9e:db:99:fa:61:e6:08:08:2d:b4:41:e7:81: 57:dc:64:c5:48:6f:46:2b:42:3e:63:03:89:cc:8d: 68:f3:72:53:e9:7b:80:41:a0:62:22:46:4b:f7:d9: d5:19:4a:98:98:8c:b1:0e:69:88:3c:50:ad:28:d8: e4:ff:b1:1d:59:72:25:73:2d:06:55:f9:4d:20:fe: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1B:4A:31:AB:2E:6E:65:1C:88:98:BE:3D:33:32:5B:13:E9:E0:22 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:b4:96:a6:de:36:c1:40:ad:69:28:e5:96:a2:8f:98:c9: fa:f0:57:6e:4a:d8:a6:99:e2:fb:8d:07:65:59:90:c2:9a:19: d5:12:d2:38:69:0b:05:50:e1:ff:a9:bc:41:1b:6b:1d:cc:cf: 50:ce:96:94:d2:60:3e:b4:76:85:68:fc:09:0d:23:f6:ca:e9: 37:93:52:57:ab:32:e6:8c:44:9a:b8:45:ba:e1:61:a2:53:f6: 4e:22:eb:c0:b9:4a:26:40:76:39:36:9c:d3:3e:79:f6:28:b2: 43:27:98:b3:dd:e5:f7:23:77:6c:5a:c9:99:bc:0c:9b:8c:f8: cc:94:f3:1a:e0:80:58:9f:4e:e9:0f:4f:9a:15:b0:84:cb:98: 94:48:1a:a5:df:da:11:98:be:de:56:c9:be:ec:74:bc:65:4a: 84:82:3a:2f:31:c6:72:ff:70:00:b3:a6:aa:54:0a:b0:42:e2: 22:37:ab:ef:cd:85:58:d7:48:f5:4c:8d:3a:fb:85:cc:c6:53: 06:92:74:24:6b:88:19:89:5b:45:7e:83:57:e3:5d:e1:83:ad: 6a:0d:d5:1b:0b:81:bf:ea:9f:3c:a6:42:ab:10:8a:04:2b:cf: c1:49:ac:03:24:e8:59:98:bf:88:59:8a:db:d3:7a:94:f0:66: 12:85:db:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjQwNTE5MDI1MzMxWhcNMjQwNTI2MDI1MzMxWjAYMRYwFAYD VQQDEw02NjQ5NjlhYi1iYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVB3/iT2ZUPZuFsvl+tDOKlIg6zrYtfvliAjO9nAID8VyxObAiDRYnx9PUMN Pz5sS98X3UKGKscLFM79Io+SNUOSI/lo1mytOZVkdWeGuddZYIasrKL2+HWa76eO NvXtVwxcU9Z0i8xRiWlnYYq7eVXSJSTiakRKsAv8sFG+KnyQ8DFPIiaiglEMkuJR DigXOo4cDfgNMz1xNkmpnAhhWo7CuE9Ve+biRBagafgLcNAp//xOGZ7bmfph5ggI LbRB54FX3GTFSG9GK0I+YwOJzI1o83JT6XuAQaBiIkZL99nVGUqYmIyxDmmIPFCt KNjk/7EdWXIlcy0GVflNIP4Q3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEbSjGr Lm5lHIiYvj0zMlsT6eAiMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4tLSWpt42wUCtaSjllqKPmMn68FduStimmeL7jQdlWZDCmhnVEtI4 aQsFUOH/qbxBG2sdzM9QzpaU0mA+tHaFaPwJDSP2yuk3k1JXqzLmjESauEW64WGi U/ZOIuvAuUomQHY5NpzTPnn2KLJDJ5iz3eX3I3dsWsmZvAybjPjMlPMa4IBYn07p D0+aFbCEy5iUSBql39oRmL7eVsm+7HS8ZUqEgjovMcZy/3AAs6aqVAqwQuIiN6vv zYVY10j1TI06+4XMxlMGknQka4gZiVtFfoNX413hg61qDdUbC4G/6p88pkKrEIoE K8/BSawDJOhZmL+IWYrb03qU8GYShdtp -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org