$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: 9F50dI7aTausSTv/OZSojk1eFmoLTbihp3kceAuGC4c= Subject key identifier: 40:DC:3B:89:E9:BE:E9:50:B8:8B:FA:07:8D:14:02:72:F8:46:D5:93 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 33E4 Signing time: Sat 18 May 2024 14:52:33 +0000 Manifest this update: Sat 18 May 2024 14:52:32 +0000 Manifest next update: Sat 25 May 2024 14:52:32 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 2Heirti/hbwIxLYU2ZvmMQzIDed6Q9rg+MRXOfMMBz8=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: BjFKz6VL6DapjXlLA2xUII7U/DIprQaJlMgnJVxIySM=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: fkSFRa17OQbrrMZVQbgWvfMD84ms7LzhBDUdh/usdYk=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: +wGN3Wjuhjw4Q4VpvH4C2sux09XcSo7oyefpGwMO99A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13316 (0x3404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: May 18 14:52:32 2024 GMT Not After : May 25 14:52:32 2024 GMT Subject: CN=6648c0b1-8b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:59:95:3e:bf:2a:47:4d:2d:51:9f:d5:a4: 30:08:f4:e2:83:a6:a9:56:fc:06:88:14:de:12:aa: 3a:e2:6d:31:eb:1f:fa:86:b9:f5:1f:65:d2:30:cd: f3:9e:33:b1:61:37:f1:44:6b:62:4e:d9:03:07:2e: 66:6a:13:13:9f:db:e5:c3:d7:1b:7f:18:ea:8c:1f: 84:19:3d:3c:f7:94:2d:11:94:24:94:26:6e:67:c5: 09:28:81:23:67:8d:81:97:be:69:8b:dc:27:f0:67: 5e:c8:b1:6d:68:82:f3:99:35:c4:30:da:28:d6:01: 34:31:46:64:31:f5:97:58:83:eb:ed:d6:64:fd:ae: dd:48:5b:af:bb:e0:5d:c8:52:2f:9c:b5:e4:52:08: 98:81:2e:a6:91:54:ce:e5:02:a0:9b:a3:a6:59:d2: 40:b6:61:5c:58:30:b4:d1:83:2c:49:7e:b8:15:2b: 03:15:16:cf:ac:da:dc:3f:d1:2c:17:0e:b6:1f:4a: 82:93:5d:70:38:6c:84:9c:00:41:a5:cb:18:3e:17: 0e:d8:d2:5f:68:57:f0:fc:20:be:bf:e2:ca:20:db: 23:5a:c0:05:69:9a:8e:ed:60:21:de:2b:7a:18:33: ea:05:36:e2:17:29:c8:43:e8:45:67:dc:39:ab:b0: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:3B:89:E9:BE:E9:50:B8:8B:FA:07:8D:14:02:72:F8:46:D5:93 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4a:02:18:2d:2e:58:c4:30:0e:24:9b:c8:fe:e9:88:94:69: f1:55:65:32:fd:5c:b0:d3:f5:ca:de:5a:5b:22:48:37:00:66: 81:9f:9c:a0:0c:79:9f:70:b9:f9:77:6e:78:47:9b:36:29:3e: 67:4a:18:46:12:a2:46:f6:ec:34:50:3c:3d:f8:70:c6:d1:71: d4:89:b5:b7:71:68:23:de:23:80:d7:c2:4c:88:61:b2:8e:cd: 96:92:7a:22:78:8a:95:41:ab:56:ed:87:56:6d:1e:8a:e1:ab: df:a8:7c:8a:91:18:61:d6:ce:80:d1:23:78:d9:ea:e3:0d:f0: e6:7f:32:47:47:40:b0:6e:52:f8:2b:7e:51:e0:6d:07:e4:ea: 02:9c:99:fb:b6:bb:89:36:4c:8c:d1:d5:85:7b:94:50:81:14: a7:89:68:c5:ba:b5:09:88:f6:47:45:73:9e:79:f4:0d:e0:af: 94:69:a7:c9:b6:a7:81:bc:c3:b8:c8:51:46:7f:e7:b2:7a:09: 50:05:66:8b:c9:84:46:a9:a3:41:87:22:5f:7e:06:9e:24:cd: 16:72:75:93:5d:4e:0c:62:95:17:20:07:6a:b6:49:38:80:38: e1:92:95:34:e9:6f:3e:88:12:ac:40:44:9d:c7:6e:8e:5a:34: d2:d5:e7:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjQwNTE4MTQ1MjMyWhcNMjQwNTI1MTQ1MjMyWjAYMRYwFAYD VQQDEw02NjQ4YzBiMS04YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybxZlT6/KkdNLVGf1aQwCPTig6apVvwGiBTeEqo64m0x6x/6hrn1H2XSMM3z njOxYTfxRGtiTtkDBy5mahMTn9vlw9cbfxjqjB+EGT0895QtEZQklCZuZ8UJKIEj Z42Bl75pi9wn8GdeyLFtaILzmTXEMNoo1gE0MUZkMfWXWIPr7dZk/a7dSFuvu+Bd yFIvnLXkUgiYgS6mkVTO5QKgm6OmWdJAtmFcWDC00YMsSX64FSsDFRbPrNrcP9Es Fw62H0qCk11wOGyEnABBpcsYPhcO2NJfaFfw/CC+v+LKINsjWsAFaZqO7WAh3it6 GDPqBTbiFynIQ+hFZ9w5q7BbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDcO4np vulQuIv6B40UAnL4RtWTMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWSgIYLS5YxDAOJJvI/umIlGnxVWUy/Vyw0/XK3lpbIkg3AGaBn5yg DHmfcLn5d254R5s2KT5nShhGEqJG9uw0UDw9+HDG0XHUibW3cWgj3iOA18JMiGGy js2WknoieIqVQatW7YdWbR6K4avfqHyKkRhh1s6A0SN42erjDfDmfzJHR0CwblL4 K35R4G0H5OoCnJn7truJNkyM0dWFe5RQgRSniWjFurUJiPZHRXOeefQN4K+UaafJ tqeBvMO4yFFGf+eyeglQBWaLyYRGqaNBhyJffgaeJM0WcnWTXU4MYpUXIAdqtkk4 gDjhkpU06W8+iBKsQESdx26OWjTS1ecU -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org