$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: eZPtJypleDw0qJ2OAJhWc59Q/JwtYKDbM0xjGOnh2cY= Subject key identifier: A5:2A:35:6D:DC:95:12:26:F0:A7:29:9A:C1:43:86:7B:E7:58:EE:93 Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 0601 Signing time: Sat 18 May 2024 23:54:36 +0000 Manifest this update: Sat 18 May 2024 23:54:36 +0000 Manifest next update: Sat 25 May 2024 23:54:36 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: ToakvRjVwlFDb0EWnqRF7nb/149H16NxcKtFWv2GYC4=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: 4czhrhOoEPPLRlm870JaZ7BSYNzclM7RWEOrXebneb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: May 18 23:54:36 2024 GMT Not After : May 25 23:54:36 2024 GMT Subject: CN=66493fbc-0fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:2f:18:e8:3c:73:eb:cb:d7:5c:52:9f:b5: b1:72:5d:5b:e0:98:7d:cf:82:4f:d3:65:39:1c:46: 6c:98:09:fe:37:f3:3a:d9:f1:e9:74:b6:55:20:f2: 22:9f:75:1c:23:8a:80:0a:9d:bb:58:4d:ae:e3:7a: 3a:6c:a2:be:0b:66:61:c8:28:f7:6c:b8:90:8b:da: a4:5a:9d:68:1a:87:12:b1:59:b7:dd:20:35:0a:f5: 32:d9:41:63:38:73:3e:5d:ed:28:c3:35:56:ba:7c: fe:71:94:70:37:fc:3b:28:03:38:23:4c:96:be:c6: 1e:17:e8:93:35:64:4c:4d:aa:27:a3:8f:c0:79:74: 98:01:88:28:a3:c5:52:6a:ef:37:cd:21:22:db:d8: 28:39:a6:6b:65:51:af:2e:4d:4c:a8:6f:03:e0:e0: ab:5d:cb:f9:2e:88:45:c3:da:13:e0:d0:fc:c2:68: 7d:6a:35:9c:16:9a:69:c4:02:e4:16:a3:34:1e:5a: 64:c8:46:4f:3d:f9:ba:13:cd:84:05:73:de:3a:63: a7:62:3c:19:04:5e:c6:76:35:62:6c:50:43:11:23: d0:eb:f1:31:85:c7:5e:2a:a5:aa:07:34:5b:b0:d6: b6:62:2f:7e:27:f5:35:d0:24:8d:f4:45:04:b3:d9: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:35:6D:DC:95:12:26:F0:A7:29:9A:C1:43:86:7B:E7:58:EE:93 X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9e:3c:5a:61:a8:bc:ed:a5:37:29:a3:68:69:3b:d6:f4:d1: 90:7f:9e:f0:a2:49:db:18:ed:76:39:e9:70:80:05:1e:04:c9: 5f:1c:2e:43:42:35:d4:45:79:7d:e6:47:5d:31:01:fc:3a:9a: d9:4d:3a:90:64:3f:2f:c7:00:86:a6:fd:e3:fb:a8:8c:55:ef: df:f8:76:97:50:70:42:2b:30:12:9d:92:a5:43:5d:26:41:48: e5:1c:39:89:71:cc:10:b7:f5:b2:b9:66:94:b1:bb:a3:8a:a2: 38:11:0a:e4:3a:c2:30:1b:22:aa:d0:11:73:e7:fb:27:bb:60: 9a:c1:0a:d2:8c:ed:93:2d:de:cb:5a:e6:90:9c:00:2c:f9:51: be:4e:29:62:68:81:33:ad:98:9d:e2:78:e1:af:d8:79:fb:02: c2:1c:43:fd:57:a7:5d:d6:2b:91:e6:3c:b6:12:a7:93:ba:5a: f2:56:f5:f5:4c:fe:30:d9:c9:69:8c:2c:b0:28:ce:28:9a:12: 5f:3b:70:27:1c:04:a9:40:74:e6:9f:f3:78:10:39:c8:7e:c7: 1d:31:68:d1:33:63:65:cb:52:aa:47:b4:d0:3e:12:7a:66:c9: 6e:2f:d1:15:3d:13:4a:6c:41:54:04:bf:d7:da:c0:87:67:54: 14:f9:a9:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjQwNTE4MjM1NDM2WhcNMjQwNTI1MjM1NDM2WjAYMRYwFAYD VQQDEw02NjQ5M2ZiYy0wZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFAvGOg8c+vL11xSn7Wxcl1b4Jh9z4JP02U5HEZsmAn+N/M62fHpdLZVIPIi n3UcI4qACp27WE2u43o6bKK+C2ZhyCj3bLiQi9qkWp1oGocSsVm33SA1CvUy2UFj OHM+Xe0owzVWunz+cZRwN/w7KAM4I0yWvsYeF+iTNWRMTaono4/AeXSYAYgoo8VS au83zSEi29goOaZrZVGvLk1MqG8D4OCrXcv5LohFw9oT4ND8wmh9ajWcFpppxALk FqM0HlpkyEZPPfm6E82EBXPeOmOnYjwZBF7GdjVibFBDESPQ6/ExhcdeKqWqBzRb sNa2Yi9+J/U10CSN9EUEs9m2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUqNW3c lRIm8KcpmsFDhnvnWO6TMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/njxaYai87aU3KaNoaTvW9NGQf57woknbGO12OelwgAUeBMlfHC5D QjXURXl95kddMQH8OprZTTqQZD8vxwCGpv3j+6iMVe/f+HaXUHBCKzASnZKlQ10m QUjlHDmJccwQt/WyuWaUsbujiqI4EQrkOsIwGyKq0BFz5/snu2CawQrSjO2TLd7L WuaQnAAs+VG+TiliaIEzrZid4njhr9h5+wLCHEP9V6dd1iuR5jy2EqeTulryVvX1 TP4w2clpjCywKM4omhJfO3AnHASpQHTmn/N4EDnIfscdMWjRM2Nly1KqR7TQPhJ6 ZsluL9EVPRNKbEFUBL/X2sCHZ1QU+akS -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org