$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: W6J2TDh5hrq69cNQYajD05sqLpdvSP0+xBVyKEkcIDY= Subject key identifier: DE:A7:9B:09:E6:B6:98:40:DE:AD:2B:F8:17:C9:B7:3C:79:11:59:61 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0B27 Signing time: Sat 18 May 2024 19:54:01 +0000 Manifest this update: Sat 18 May 2024 19:54:00 +0000 Manifest next update: Sat 25 May 2024 19:54:00 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: JeqbNJqVq+jitPnklOacu2Hua/gYSVSzwKbKbQjNQE4=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: S9FtoobeEXjBIMtrH5kmu9M+KuE/HN8Pt+tkB33Mzwo=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: D1neVkUYlxFZ0EMc3pDpN6WJMnlgVEuPxL9BgHGg7yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: May 18 19:54:00 2024 GMT Not After : May 25 19:54:00 2024 GMT Subject: CN=66490758-e2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:44:be:d3:d2:d3:b6:d3:92:fd:45:f4:a8: 9f:8c:4d:ac:a2:d2:4e:ee:59:6c:76:32:fa:ee:6c: 14:56:77:01:65:f1:c7:17:ec:f1:22:25:c4:d9:e2: 83:e6:a1:c7:3c:80:2c:b4:06:86:07:9d:f9:65:22: f1:e2:18:67:c8:86:ef:bd:ee:3f:c6:9b:30:09:72: b6:17:2c:9f:6d:bf:fa:79:e1:50:23:94:29:8a:27: 23:c4:30:58:da:54:30:bd:aa:a7:81:d8:37:90:3c: 87:96:4a:9a:e4:f4:c2:c4:06:82:c4:20:8f:32:fb: 48:68:6f:ae:68:9d:a9:f3:61:6a:c8:1d:44:11:aa: 6a:54:a3:64:3e:62:31:d2:54:4c:e3:7a:67:2b:ce: 62:aa:ad:8e:2f:f8:e3:c8:ac:3a:09:bd:7b:88:5b: 8d:64:5a:5a:42:0c:da:16:b2:ac:d2:98:53:12:39: f6:db:e1:05:32:bc:6b:33:c3:40:9a:a9:d7:e6:8c: 95:1a:cf:51:03:73:cb:4a:03:8f:56:7a:8f:c7:b3: bf:3a:e0:61:e4:70:c3:e2:7f:8e:50:17:ec:5d:1f: 9b:53:42:65:10:f7:26:e3:52:ac:68:e6:97:71:7f: ce:90:9d:58:b4:61:eb:52:6f:80:4b:f9:9e:7a:8e: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:9B:09:E6:B6:98:40:DE:AD:2B:F8:17:C9:B7:3C:79:11:59:61 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5d:aa:32:7c:6f:79:96:b0:c1:16:24:db:78:e7:a6:ac:21: 61:95:bb:14:d5:bd:36:14:1a:7a:54:82:8f:03:56:d1:9c:f9: 32:38:92:1d:1f:53:ba:aa:d2:fa:17:92:1f:23:46:06:3e:9c: cb:f9:7c:97:3c:ac:af:d3:fc:94:eb:e9:89:2e:25:c2:76:e5: 67:91:6a:af:cd:92:99:57:49:3b:bd:d3:c2:13:55:39:c7:71: 01:ff:dc:5c:06:d7:c2:12:ac:87:1e:98:31:97:2a:28:e7:93: 72:0a:a4:a3:97:fa:2e:d1:cd:a7:36:66:c2:0b:4f:16:0b:01: 23:0c:a4:be:55:07:94:10:46:bb:de:e9:38:cf:a7:05:65:71: b4:8d:67:04:2e:0d:ff:0e:b7:9c:62:27:c4:77:1f:44:59:8f: 83:74:bc:7c:dd:e2:c7:fc:f3:a9:6a:72:7a:81:c8:e3:87:8c: 7f:99:04:e7:61:0a:0a:8b:57:95:96:17:eb:2c:72:6a:ab:dc: 98:f0:35:3e:0d:27:49:9b:74:9b:a5:da:6b:8a:47:f6:e1:20: 1b:40:b0:e0:13:67:f3:2f:8d:43:88:5c:61:7f:d6:97:a4:18: 1d:72:bf:93:f2:6f:74:53:34:d4:6c:71:88:63:8c:53:b7:30: 60:4a:ac:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjQwNTE4MTk1NDAwWhcNMjQwNTI1MTk1NDAwWjAYMRYwFAYD VQQDEw02NjQ5MDc1OC1lMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFxEvtPS07bTkv1F9KifjE2sotJO7llsdjL67mwUVncBZfHHF+zxIiXE2eKD 5qHHPIAstAaGB535ZSLx4hhnyIbvve4/xpswCXK2Fyyfbb/6eeFQI5QpiicjxDBY 2lQwvaqngdg3kDyHlkqa5PTCxAaCxCCPMvtIaG+uaJ2p82FqyB1EEapqVKNkPmIx 0lRM43pnK85iqq2OL/jjyKw6Cb17iFuNZFpaQgzaFrKs0phTEjn22+EFMrxrM8NA mqnX5oyVGs9RA3PLSgOPVnqPx7O/OuBh5HDD4n+OUBfsXR+bU0JlEPcm41KsaOaX cX/OkJ1YtGHrUm+AS/meeo7OzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6nmwnm tphA3q0r+BfJtzx5EVlhMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfXaoyfG95lrDBFiTbeOemrCFhlbsU1b02FBp6VIKPA1bRnPkyOJId H1O6qtL6F5IfI0YGPpzL+XyXPKyv0/yU6+mJLiXCduVnkWqvzZKZV0k7vdPCE1U5 x3EB/9xcBtfCEqyHHpgxlyoo55NyCqSjl/ou0c2nNmbCC08WCwEjDKS+VQeUEEa7 3uk4z6cFZXG0jWcELg3/DrecYifEdx9EWY+DdLx83eLH/POpanJ6gcjjh4x/mQTn YQoKi1eVlhfrLHJqq9yY8DU+DSdJm3Sbpdprikf24SAbQLDgE2fzL41DiFxhf9aX pBgdcr+T8m90UzTUbHGIY4xTtzBgSqye -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org