$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft File: qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft (raw, json) Hash identifier: 5hRgOHNhgt5o5Aqi9nu21BNcXogWwKnfwPQy4Zq6u/w= Subject key identifier: E4:F7:BE:15:AA:DF:E8:51:A0:8F:BF:1A:68:30:89:CB:19:BD:FB:77 Authority key identifier: AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35 Certificate issuer: /CN=A91BF5C2/serialNumber=AB24AF5DBDC3AF0647853DAB199FA49FEB6D0735 Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft Manifest number: 074B Signing time: Thu 30 May 2024 22:56:44 +0000 Manifest this update: Thu 30 May 2024 22:56:44 +0000 Manifest next update: Thu 06 Jun 2024 22:56:44 +0000 Files and hashes: 1: qySvXb3DrwZHhT2rGZ-kn-ttBzU.crl (hash: u/2n5DEUE26fwExQX53E7xMcb1WP5uQKZuvWe9mJCA8=) 2: 90D368604AB811EC9FA7F33FC4F9AE02.roa (hash: yI5uYPc/JDrWARH2c+K7qRZTiLNzpj/RgVahynF5R6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.crl rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C2/serialNumber=AB24AF5DBDC3AF0647853DAB199FA49FEB6D0735 Validity Not Before: May 30 22:56:44 2024 GMT Not After : Jun 6 22:56:44 2024 GMT Subject: CN=6659042c-67b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:14:e6:98:52:5b:50:1a:4b:bb:dc:26:6a: b0:30:a4:74:3e:f2:9f:07:c2:e5:97:56:ef:f4:6a: de:bc:34:e3:23:70:94:96:a8:43:38:e1:e5:ac:6d: 75:ee:79:9c:d9:6d:90:b9:b2:65:b9:72:7b:a4:d8: 00:99:a5:30:5e:e9:d4:cb:49:e3:6d:69:d0:21:12: 82:9b:ba:c3:e0:e5:d2:ad:e6:3a:8f:18:f6:c3:c7: ac:7c:9b:cf:e0:d1:50:90:bd:48:9f:dc:9c:b2:f2: 8a:cc:c7:0b:81:6c:0b:64:74:8a:61:af:69:09:ae: a9:e4:58:52:95:51:3b:1a:da:e1:94:28:fb:15:47: a6:f4:34:9c:b8:9d:c3:9a:07:c6:35:ed:38:24:0a: cc:9c:70:33:6a:84:a8:95:6e:8e:29:b0:5e:76:a8: 12:b2:26:e1:7f:4b:27:c1:66:d2:d7:db:d2:bf:c4: 8e:28:ce:e9:65:ec:93:03:32:47:97:1b:fa:5b:43: 84:f6:d5:b5:80:d7:26:ec:44:10:85:5d:fd:e8:66: c5:fa:27:9d:e3:86:ce:33:21:01:04:34:3c:f8:4b: 10:12:34:70:ef:23:78:24:91:89:fc:32:8c:26:72: 55:40:0c:ac:9c:2b:08:5b:af:1e:2a:8f:8e:45:78: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:BE:15:AA:DF:E8:51:A0:8F:BF:1A:68:30:89:CB:19:BD:FB:77 X509v3 Authority Key Identifier: keyid:AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f1:1f:07:dd:90:8c:d5:1b:8a:62:71:d0:f5:66:12:07:e2: a3:d6:50:11:50:16:75:17:d2:2f:bf:d5:7a:85:f4:f7:64:d6: 98:9a:eb:2e:61:c0:7c:fb:f1:4a:3a:a3:6d:93:52:79:72:33: 42:70:c4:6c:75:47:df:9d:dd:87:0d:63:72:30:1b:c8:03:32: 7e:48:42:d7:cc:a5:13:b2:c5:20:88:4f:2d:4f:04:5d:fe:15: 31:d8:d2:13:89:aa:80:2e:b0:ed:30:80:b9:c7:92:5e:5d:54: 4f:d7:36:6e:92:01:c6:b0:69:71:58:3b:c4:09:84:11:7e:76: e2:e4:3f:f5:29:d0:96:71:79:64:dd:44:96:f7:f2:c6:6c:d8: 8f:d4:6b:e1:50:9a:4b:28:b3:16:7f:58:9c:30:b8:61:7b:17: 4b:04:a1:59:16:49:6f:fa:8d:a3:66:66:85:1b:96:43:9f:f6: 2e:55:8e:62:f2:41:04:59:17:d1:cb:0f:01:fb:ba:fe:9c:f4: e7:66:e3:3d:bd:ff:5d:51:e7:54:40:3c:0f:86:aa:3d:e5:bf: 49:00:1a:c7:6f:02:f3:4a:7b:90:43:b7:77:df:70:24:48:24: 04:67:10:07:c7:2b:fc:1b:51:eb:dc:2b:4a:cd:ee:c9:24:36: e5:05:2e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzIxMTAvBgNVBAUTKEFCMjRBRjVEQkRDM0FGMDY0Nzg1M0RBQjE5OUZBNDlG RUI2RDA3MzUwHhcNMjQwNTMwMjI1NjQ0WhcNMjQwNjA2MjI1NjQ0WjAYMRYwFAYD VQQDEw02NjU5MDQyYy02N2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynUU5phSW1AaS7vcJmqwMKR0PvKfB8Lll1bv9GrevDTjI3CUlqhDOOHlrG11 7nmc2W2QubJluXJ7pNgAmaUwXunUy0njbWnQIRKCm7rD4OXSreY6jxj2w8esfJvP 4NFQkL1In9ycsvKKzMcLgWwLZHSKYa9pCa6p5FhSlVE7GtrhlCj7FUem9DScuJ3D mgfGNe04JArMnHAzaoSolW6OKbBedqgSsibhf0snwWbS19vSv8SOKM7pZeyTAzJH lxv6W0OE9tW1gNcm7EQQhV396GbF+ied44bOMyEBBDQ8+EsQEjRw7yN4JJGJ/DKM JnJVQAysnCsIW68eKo+ORXjCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT3vhWq 3+hRoI+/GmgwicsZvft3MB8GA1UdIwQYMBaAFKskr129w68GR4U9qxmfpJ/rbQc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMi9CMzdFM0NBOEU3 NEMxMUVBQkY1Q0FBMUVDNEY5QUUwMi9xeVN2WGIzRHJ3WkhoVDJyR1ota24tdHRC elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F5U3ZYYjNEcndaSGhUMnJHWi1rbi10dEJ6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMi9CMzdFM0NBOEU3NEMxMUVBQkY1Q0FBMUVDNEY5QUUwMi9xeVN2WGIzRHJ3 WkhoVDJyR1ota24tdHRCelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs8R8H3ZCM1RuKYnHQ9WYSB+Kj1lARUBZ1F9Ivv9V6hfT3ZNaYmusu YcB8+/FKOqNtk1J5cjNCcMRsdUffnd2HDWNyMBvIAzJ+SELXzKUTssUgiE8tTwRd /hUx2NITiaqALrDtMIC5x5JeXVRP1zZukgHGsGlxWDvECYQRfnbi5D/1KdCWcXlk 3USW9/LGbNiP1GvhUJpLKLMWf1icMLhhexdLBKFZFklv+o2jZmaFG5ZDn/YuVY5i 8kEEWRfRyw8B+7r+nPTnZuM9vf9dUedUQDwPhqo95b9JABrHbwLzSnuQQ7d333Ak SCQEZxAHxyv8G1Hr3CtKze7JJDblBS47 -----END CERTIFICATE-----Generated at Fri May 31 00:28:36 2024 by rpki-client on console-ams.rpki-client.org