$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: /Thmb90akBw2rMigOL9CSfil38sCj4BvjvImNk/BKOA= Subject key identifier: ED:DE:EE:88:C9:8A:1F:8E:DB:F1:E4:41:86:6E:8D:CF:AB:A8:AA:41 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 0466 Signing time: Sat 01 Jun 2024 02:50:48 +0000 Manifest this update: Sat 01 Jun 2024 02:50:47 +0000 Manifest next update: Sat 08 Jun 2024 02:50:47 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: kf4jUCCsujRMGmIDXGR0PUlDjJxWpJE7YWGogR1pCrk=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: lQ+1jqh0wfjJhsVaKK8sy3efDGbMHWeel7kX3lnMMu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Jun 1 02:50:47 2024 GMT Not After : Jun 8 02:50:47 2024 GMT Subject: CN=665a8c87-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:ac:5c:40:ee:32:27:dc:f7:a7:b8:93:b1: a3:e6:16:3b:19:ef:47:ed:2c:22:f0:47:6d:c0:d7: 08:c5:9a:05:7a:1b:a6:72:8c:c1:bc:2b:50:2d:4f: fc:5b:23:21:c7:f0:49:42:a5:a3:bf:0f:8a:08:e7: 7e:a5:cb:56:06:0c:d5:0e:72:1b:0e:bb:71:3b:39: 62:a7:ae:23:e9:dc:2c:c8:a8:0e:b1:e5:b8:d5:6e: 1d:9c:e1:5b:51:32:20:15:52:71:28:c3:9c:6d:25: 38:8c:9d:b0:ae:17:34:b9:9a:9c:9b:33:b5:09:d5: 31:a2:10:9a:45:3d:10:6f:4a:78:22:8b:05:eb:f2: ee:3e:86:41:fe:1d:00:e5:0e:56:b2:c1:34:a1:35: 2c:9d:bc:ff:2f:e9:83:36:60:8a:57:2f:f6:fa:4b: 37:3a:68:48:f7:9d:6e:94:f3:6d:a3:80:ad:e6:76: 8c:20:9d:57:94:77:bc:c8:50:65:37:d5:2e:1e:20: d5:74:e4:df:d2:1c:36:42:8c:e3:77:ef:61:34:40: fe:93:37:74:22:e0:d6:df:35:60:5c:73:06:9f:ce: 73:bc:de:f4:e5:69:1f:12:7c:3f:d5:42:8b:87:45: 8d:41:fa:a6:31:fe:15:b8:6d:5d:cd:61:a4:c9:9b: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DE:EE:88:C9:8A:1F:8E:DB:F1:E4:41:86:6E:8D:CF:AB:A8:AA:41 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:8f:bf:a2:16:0e:34:f8:a9:6e:b7:0b:8a:c4:ec:a9:c3:ca: 16:42:6e:ba:d8:b0:fa:c0:08:9a:00:a4:88:2c:f3:8d:75:36: 44:9a:bd:3e:95:30:06:c1:9f:07:eb:27:06:82:24:ce:4e:0e: 0b:3a:1c:0e:9c:b0:17:c5:3f:8a:10:dd:17:23:90:7c:49:ac: 15:ad:9d:32:7f:7d:31:51:d3:f6:7f:72:22:16:e3:8b:9f:89: d5:a3:c8:65:a3:af:55:65:57:49:a3:db:ff:54:ae:1f:50:a3: a4:fe:92:87:48:4d:fb:87:29:44:81:a7:02:a4:b0:be:1a:32: be:0d:17:4a:52:50:20:35:37:a0:74:d0:51:f8:0c:59:da:95: 30:8d:d8:6f:85:ef:e8:84:8b:a3:80:cb:42:48:ec:57:69:87: b0:66:b4:0f:3e:c1:68:d7:c7:8f:9a:7f:3c:11:58:ff:8f:17: 06:bd:48:65:49:9d:3e:7e:5f:15:93:e5:32:20:3e:e5:d8:34: ff:40:4c:f1:2a:9e:89:5d:89:2d:f5:ad:be:e1:5e:2a:cd:00: cb:2f:79:f6:07:79:ec:a2:3b:97:a1:06:df:3c:bc:8e:a9:e0: 0c:8a:c0:94:b8:f8:f2:13:49:0c:4d:79:d6:c7:e6:53:5d:4c: cd:f7:b0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjQwNjAxMDI1MDQ3WhcNMjQwNjA4MDI1MDQ3WjAYMRYwFAYD VQQDEw02NjVhOGM4Ny0zYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr52sXEDuMifc96e4k7Gj5hY7Ge9H7Swi8EdtwNcIxZoFehumcozBvCtQLU/8 WyMhx/BJQqWjvw+KCOd+pctWBgzVDnIbDrtxOzlip64j6dwsyKgOseW41W4dnOFb UTIgFVJxKMOcbSU4jJ2wrhc0uZqcmzO1CdUxohCaRT0Qb0p4IosF6/LuPoZB/h0A 5Q5WssE0oTUsnbz/L+mDNmCKVy/2+ks3OmhI951ulPNto4Ct5naMIJ1XlHe8yFBl N9UuHiDVdOTf0hw2Qozjd+9hNED+kzd0IuDW3zVgXHMGn85zvN705WkfEnw/1UKL h0WNQfqmMf4VuG1dzWGkyZsljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3e7ojJ ih+O2/HkQYZujc+rqKpBMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmj7+iFg40+KlutwuKxOypw8oWQm662LD6wAiaAKSILPONdTZEmr0+ lTAGwZ8H6ycGgiTOTg4LOhwOnLAXxT+KEN0XI5B8SawVrZ0yf30xUdP2f3IiFuOL n4nVo8hlo69VZVdJo9v/VK4fUKOk/pKHSE37hylEgacCpLC+GjK+DRdKUlAgNTeg dNBR+AxZ2pUwjdhvhe/ohIujgMtCSOxXaYewZrQPPsFo18ePmn88EVj/jxcGvUhl SZ0+fl8Vk+UyID7l2DT/QEzxKp6JXYkt9a2+4V4qzQDLL3n2B3nsojuXoQbfPLyO qeAMisCUuPjyE0kMTXnWx+ZTXUzN97CP -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org