$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: XCZI3YwQek0lI/BTUmb1PgI91+JwZOVibRgYHLucBNQ= Subject key identifier: 47:63:79:6C:DE:2D:03:AF:32:B4:0C:49:1F:55:9F:A4:C5:A3:DC:F2 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 0640 Signing time: Sat 18 May 2024 23:42:29 +0000 Manifest this update: Sat 18 May 2024 23:42:29 +0000 Manifest next update: Sat 25 May 2024 23:42:29 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: PZYKMfhsTAOWOj68AeXL22G2BFongd/M6dMqQvm+hac=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: nPTnILQ/bgyzA6oyqhNMAYL/1YXBk3jme7zHlP/uFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: May 18 23:42:29 2024 GMT Not After : May 25 23:42:29 2024 GMT Subject: CN=66493ce5-994d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:c2:43:6b:fc:ff:52:a4:bd:75:9a:5a:0e: 4d:7f:ff:3e:ca:93:ff:e7:6c:15:8d:00:4e:45:75: fe:e9:52:8b:fb:09:b2:b2:4c:e0:ee:b0:56:b3:4f: 43:93:fb:92:3d:39:ce:7c:73:fb:7c:47:e4:d9:9f: cb:81:b8:38:a2:01:23:3b:f1:9b:91:cc:3a:1e:a1: e8:74:e6:65:cc:61:05:bc:60:6d:b2:92:5d:91:f1: 1a:22:29:50:57:dd:e6:88:a0:f0:6b:28:87:5c:24: 88:68:58:50:86:0b:d4:4b:30:56:8d:d0:1c:b6:9e: 75:e9:53:3d:7f:df:74:19:2d:9a:2c:b5:a5:94:3d: 9f:10:2c:89:e1:43:66:35:7f:3f:05:5c:93:05:5e: e1:00:88:c6:55:ee:39:92:90:b8:5d:d7:9a:a7:88: d5:bf:af:ed:17:1d:04:02:13:5d:b6:8b:27:a1:f1: 45:93:67:1d:27:1a:c3:c8:3c:b6:9f:7b:97:3c:19: d1:ae:69:67:3f:fc:c0:b6:bb:a4:72:6a:48:ce:fa: 4b:2f:35:8e:b4:35:33:42:3d:c0:de:8a:ad:b4:f7: 13:8c:1f:08:75:92:f2:30:6c:27:4e:19:2b:df:a9: 7b:91:81:fa:8b:85:b4:ca:17:f7:0c:66:ac:e6:6f: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:63:79:6C:DE:2D:03:AF:32:B4:0C:49:1F:55:9F:A4:C5:A3:DC:F2 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b6:50:f9:e4:50:cb:c3:a3:97:dd:cc:e6:8e:89:5d:1b:e1: 0b:e3:17:5a:98:7c:4d:3d:09:42:fa:60:25:88:8d:ae:3c:d2: 88:1e:cc:b8:10:c1:b3:ba:32:eb:e3:7f:64:91:0e:70:e2:8d: 49:91:fc:74:c4:87:47:51:aa:c8:96:d7:31:5e:d4:41:15:dd: c0:0c:36:1f:a9:dd:6f:80:07:37:55:68:2a:6e:48:e7:a2:42: 2d:f5:e9:ca:dc:fc:96:ea:d3:0e:4b:df:a9:bd:f6:5a:a9:b3: 97:43:4d:32:a6:7d:b2:e7:0b:ca:c8:99:d4:e9:20:f9:70:89: 56:bc:dd:8b:4d:27:4e:d0:3b:06:1f:ca:b7:e8:37:51:57:04: cb:7b:6f:8b:82:3f:a1:ce:c8:e2:be:cf:f1:36:b3:51:c3:67: 0d:04:59:64:ae:4d:fa:bf:77:07:bf:1a:23:b1:e5:63:01:ca: 08:5c:02:8b:d9:37:f4:5d:b0:b7:a1:20:d8:39:de:51:df:aa: 5d:ec:e0:73:74:16:07:14:b9:43:65:ba:06:7e:47:9f:76:fa: 40:c2:76:22:06:63:d3:22:07:c4:8f:1b:77:22:f4:6a:a1:14: 3e:8e:8d:48:86:ec:f1:b3:4f:03:31:38:88:3c:4a:05:74:33: e8:13:af:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjQwNTE4MjM0MjI5WhcNMjQwNTI1MjM0MjI5WjAYMRYwFAYD VQQDEw02NjQ5M2NlNS05OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlXCQ2v8/1KkvXWaWg5Nf/8+ypP/52wVjQBORXX+6VKL+wmyskzg7rBWs09D k/uSPTnOfHP7fEfk2Z/Lgbg4ogEjO/Gbkcw6HqHodOZlzGEFvGBtspJdkfEaIilQ V93miKDwayiHXCSIaFhQhgvUSzBWjdActp516VM9f990GS2aLLWllD2fECyJ4UNm NX8/BVyTBV7hAIjGVe45kpC4Xdeap4jVv6/tFx0EAhNdtosnofFFk2cdJxrDyDy2 n3uXPBnRrmlnP/zAtrukcmpIzvpLLzWOtDUzQj3A3oqttPcTjB8IdZLyMGwnThkr 36l7kYH6i4W0yhf3DGas5m+KLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdjeWze LQOvMrQMSR9Vn6TFo9zyMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAatlD55FDLw6OX3czmjoldG+EL4xdamHxNPQlC+mAliI2uPNKIHsy4 EMGzujLr439kkQ5w4o1Jkfx0xIdHUarIltcxXtRBFd3ADDYfqd1vgAc3VWgqbkjn okIt9enK3PyW6tMOS9+pvfZaqbOXQ00ypn2y5wvKyJnU6SD5cIlWvN2LTSdO0DsG H8q36DdRVwTLe2+Lgj+hzsjivs/xNrNRw2cNBFlkrk36v3cHvxojseVjAcoIXAKL 2Tf0XbC3oSDYOd5R36pd7OBzdBYHFLlDZboGfkefdvpAwnYiBmPTIgfEjxt3IvRq oRQ+jo1Ihuzxs08DMTiIPEoFdDPoE69C -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org