$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: l6OSH7+v5ptuytUQq+I1jCBct+B6GmUUu8Aaz7l1kBQ= Subject key identifier: 36:B7:62:FA:0C:67:BD:3A:EB:72:BA:9D:8A:02:0D:37:1B:E9:DE:F8 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 034E Signing time: Sun 19 May 2024 02:55:15 +0000 Manifest this update: Sun 19 May 2024 02:55:15 +0000 Manifest next update: Sun 26 May 2024 02:55:15 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: 4HURDoW4BhShJ9Ty5dFDRMuBQ0aQeBDWqxi+GxR544o=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: 2ZcrJfUo8iGbf+zRyErKxf9o0VcsflrpmejeHCyEHtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: May 19 02:55:15 2024 GMT Not After : May 26 02:55:15 2024 GMT Subject: CN=66496a13-fc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:8a:8e:5d:60:77:18:1c:9c:6f:a9:bd:f4: ac:b1:44:a5:39:f1:4e:cb:ac:0a:47:80:49:0a:33: cc:f0:8b:ac:71:f7:4d:de:36:87:de:74:16:74:e0: db:62:e2:65:bc:2d:4b:dc:43:f5:c4:92:14:db:3d: d2:55:fb:de:4a:6b:aa:24:6e:77:e2:54:3f:97:4d: db:0c:86:7a:75:2f:c1:e0:65:68:fb:6d:bb:d3:0b: 42:56:1e:22:8d:09:d2:bf:a5:46:ca:bb:f0:5b:ff: 1e:12:a6:f8:c1:32:b7:1f:20:ae:38:f2:cf:ed:7b: 4c:7a:5b:61:38:1f:0b:59:e0:c2:6d:08:ff:14:96: 24:d9:95:cb:9b:03:76:a8:aa:d7:f9:58:84:31:ca: 37:f9:13:3c:61:fa:ea:bd:aa:05:fc:27:81:c7:3e: 00:18:aa:32:70:b7:60:91:b7:aa:bd:04:b3:5b:d3: 45:92:4d:43:90:d1:fb:c8:4a:0b:d7:c1:47:39:08: 2c:13:2f:3f:d9:76:86:60:f1:a8:e4:f4:6d:b1:1e: 62:51:6b:66:22:18:b1:bc:a8:6f:43:8c:df:81:63: 8a:43:f4:1b:eb:71:48:cc:63:fb:25:7c:6f:5a:2a: e9:98:c0:c8:cd:ac:99:12:03:2e:e6:00:b7:7c:ad: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B7:62:FA:0C:67:BD:3A:EB:72:BA:9D:8A:02:0D:37:1B:E9:DE:F8 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:36:bb:35:4a:d7:15:c5:05:e4:35:3c:b9:7a:71:b0:dc: e6:64:3e:5c:ba:13:d2:9c:ad:a6:3f:1a:67:e0:04:75:6c:ec: ec:b4:75:2d:13:b5:20:28:8f:2e:f0:0d:fb:32:76:ae:9c:75: 74:74:05:6e:f4:c8:07:93:0d:65:19:22:f6:e8:9e:6d:0a:cc: d2:be:1e:12:69:fa:81:a1:4a:95:4f:36:67:79:2d:07:37:7a: f7:69:f5:66:57:6a:9a:c1:14:42:26:9e:1b:76:01:52:09:55: ea:fb:3f:29:ca:e8:70:0c:80:b0:77:c8:0e:eb:c8:22:f5:a8: 81:4a:94:7e:f6:76:e0:5e:d5:55:04:3b:ae:ac:46:13:e9:29: 7a:ab:ec:9b:1f:54:69:8c:5b:74:6c:46:98:66:82:0e:34:dd: d8:67:36:43:c6:09:58:32:48:5d:f1:15:cf:5e:d5:a6:ec:7f: 96:b5:d5:08:b5:88:fd:6a:70:7d:61:78:57:5b:2d:d6:93:20: 8f:62:b9:d7:40:d6:00:53:2c:6b:fd:c8:62:f0:eb:58:a3:92: 04:1e:0c:06:cd:ec:e5:ef:05:a2:58:da:50:78:78:42:32:3e: b8:6c:40:92:27:c2:1e:9b:c7:cd:54:c6:a0:af:c1:93:66:9e: ef:f9:8f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjQwNTE5MDI1NTE1WhcNMjQwNTI2MDI1NTE1WjAYMRYwFAYD VQQDEw02NjQ5NmExMy1mYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0taKjl1gdxgcnG+pvfSssUSlOfFOy6wKR4BJCjPM8IuscfdN3jaH3nQWdODb YuJlvC1L3EP1xJIU2z3SVfveSmuqJG534lQ/l03bDIZ6dS/B4GVo+2270wtCVh4i jQnSv6VGyrvwW/8eEqb4wTK3HyCuOPLP7XtMelthOB8LWeDCbQj/FJYk2ZXLmwN2 qKrX+ViEMco3+RM8YfrqvaoF/CeBxz4AGKoycLdgkbeqvQSzW9NFkk1DkNH7yEoL 18FHOQgsEy8/2XaGYPGo5PRtsR5iUWtmIhixvKhvQ4zfgWOKQ/Qb63FIzGP7JXxv WirpmMDIzayZEgMu5gC3fK3uQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa3YvoM Z70663K6nYoCDTcb6d74MB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwNDa7NUrXFcUF5DU8uXpxsNzmZD5cuhPSnK2mPxpn4AR1bOzstHUt E7UgKI8u8A37MnaunHV0dAVu9MgHkw1lGSL26J5tCszSvh4SafqBoUqVTzZneS0H N3r3afVmV2qawRRCJp4bdgFSCVXq+z8pyuhwDICwd8gO68gi9aiBSpR+9nbgXtVV BDuurEYT6Sl6q+ybH1RpjFt0bEaYZoIONN3YZzZDxglYMkhd8RXPXtWm7H+WtdUI tYj9anB9YXhXWy3WkyCPYrnXQNYAUyxr/chi8OtYo5IEHgwGzezl7wWiWNpQeHhC Mj64bECSJ8Iem8fNVMagr8GTZp7v+Y+I -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org