$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: A7skk9G06NF4SBAJ6NxvmRc/VGpfaXiio4xs4t72il8= Subject key identifier: 14:D5:C7:D0:A0:9A:D1:90:C6:13:46:B8:0A:87:56:35:CD:55:45:5D Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 057B Signing time: Sun 19 May 2024 00:35:53 +0000 Manifest this update: Sun 19 May 2024 00:35:53 +0000 Manifest next update: Sun 26 May 2024 00:35:53 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: 3Lfpp5qxk3sXQR5ARttYxjqNSfyYHW1Rxu4zPwEpUYk=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: EIN/njyu4BzcXMAIvogPwN+JdMGS8bE5pSJ0XvZCpCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: May 19 00:35:53 2024 GMT Not After : May 26 00:35:53 2024 GMT Subject: CN=66494969-33d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:ba:a1:34:3a:4f:bb:f5:36:b6:53:b4:e3: a3:f1:9e:a3:40:8a:7c:93:bb:24:4d:1c:93:07:2c: 1e:b6:6e:72:60:9d:fc:f6:3a:47:fa:9b:cd:28:c7: c6:c1:93:9f:23:47:c5:8d:9f:70:e5:80:dd:a1:a6: a9:1d:7a:74:c0:f7:4c:66:0a:98:88:06:ce:ef:9b: a9:d2:9e:de:b9:f5:f7:eb:0d:7c:b1:0b:7e:94:b5: 1e:a8:c6:2e:16:a1:0f:f3:3b:f8:db:9a:b3:60:95: ee:c9:2e:11:11:ff:07:53:b6:61:d9:4b:42:9c:c2: b5:74:8d:a0:25:9b:d8:78:87:c7:56:77:7b:02:07: 21:1c:fd:bd:54:1a:83:ee:da:df:32:eb:cb:f9:1c: 25:a7:e7:92:22:87:3d:29:5f:81:9e:43:0b:5b:21: 81:f4:31:a9:74:2a:41:d4:3a:ed:f6:7e:18:9c:30: f3:49:f2:18:f5:8f:03:49:ae:ba:bf:6d:d4:1e:e1: 13:68:bb:8d:4c:a9:e7:75:eb:cf:b3:06:ed:e7:4f: e7:79:30:7c:74:92:49:f7:94:03:d2:d6:d0:0a:3d: 4a:ea:2d:9a:7b:1e:a2:7c:d8:a3:98:de:19:38:15: 84:e7:64:6c:24:12:ad:23:a3:1f:fa:e2:bc:3a:ff: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:C7:D0:A0:9A:D1:90:C6:13:46:B8:0A:87:56:35:CD:55:45:5D X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a0:ed:2b:00:64:da:ea:91:fe:a2:c4:91:b6:79:d7:41:d4: 2a:09:8c:c6:db:40:7c:5e:87:59:8c:2c:e8:cc:cd:f7:a0:4b: fe:b1:de:e6:7b:89:a3:7a:c3:44:43:eb:2d:60:13:67:e5:94: 52:31:10:06:b6:6f:d2:77:c4:a2:b2:c5:7c:5f:f5:24:7d:32: d3:44:59:13:97:fc:21:ae:a2:b5:e3:b8:b6:b0:fd:f5:82:38: d9:39:06:d8:65:13:1b:f5:52:01:42:c2:a3:fd:6b:68:a3:6e: 37:d6:02:9c:31:0d:16:10:8d:78:97:b8:ec:f9:31:03:d8:c8: 77:39:8c:c9:45:b9:6d:a7:8d:0a:f6:4c:de:3f:b3:ec:a8:e1: 79:bb:50:e9:8d:78:c2:2f:66:2d:a2:77:ad:94:c5:bc:45:93: 78:ee:a2:14:6c:1e:ce:7c:30:2b:0e:53:36:ba:ae:b5:e0:1f: ff:c1:61:e9:28:e2:f6:58:79:34:ff:33:8e:41:07:e4:be:ce: 36:c7:4d:6d:ea:dd:98:d4:9b:e3:aa:d5:0e:58:9d:92:4d:de: 23:55:2b:32:0c:cc:4a:e6:af:99:5d:56:1f:35:cb:0b:b6:a7: 8d:b3:03:f8:1e:58:9c:1e:4f:62:22:45:fc:68:03:05:6e:c0: 97:ee:c5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjQwNTE5MDAzNTUzWhcNMjQwNTI2MDAzNTUzWjAYMRYwFAYD VQQDEw02NjQ5NDk2OS0zM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vu6oTQ6T7v1NrZTtOOj8Z6jQIp8k7skTRyTBywetm5yYJ389jpH+pvNKMfG wZOfI0fFjZ9w5YDdoaapHXp0wPdMZgqYiAbO75up0p7eufX36w18sQt+lLUeqMYu FqEP8zv425qzYJXuyS4REf8HU7Zh2UtCnMK1dI2gJZvYeIfHVnd7AgchHP29VBqD 7trfMuvL+Rwlp+eSIoc9KV+BnkMLWyGB9DGpdCpB1Drt9n4YnDDzSfIY9Y8DSa66 v23UHuETaLuNTKnndevPswbt50/neTB8dJJJ95QD0tbQCj1K6i2aex6ifNijmN4Z OBWE52RsJBKtI6Mf+uK8Ov97PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTVx9Cg mtGQxhNGuAqHVjXNVUVdMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1oO0rAGTa6pH+osSRtnnXQdQqCYzG20B8XodZjCzozM33oEv+sd7m e4mjesNEQ+stYBNn5ZRSMRAGtm/Sd8SissV8X/UkfTLTRFkTl/whrqK147i2sP31 gjjZOQbYZRMb9VIBQsKj/Wtoo2431gKcMQ0WEI14l7js+TED2Mh3OYzJRbltp40K 9kzeP7PsqOF5u1DpjXjCL2YtonetlMW8RZN47qIUbB7OfDArDlM2uq614B//wWHp KOL2WHk0/zOOQQfkvs42x01t6t2Y1JvjqtUOWJ2STd4jVSsyDMxK5q+ZXVYfNcsL tqeNswP4HlicHk9iIkX8aAMFbsCX7sUa -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org