$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: GinvqoEoXmSNWmxd+TSiTrb9mRlIQ1T6L6xwaT2Gquo= Subject key identifier: 68:CD:F0:B3:88:BF:2D:AE:A4:FF:2C:EA:F1:12:6E:4A:6B:7E:FA:DC Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 3427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 33EE Signing time: Sat 18 May 2024 14:26:58 +0000 Manifest this update: Sat 18 May 2024 14:26:58 +0000 Manifest next update: Sat 25 May 2024 14:26:58 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: oj7SXBcLX8+h68t1z6FScg7KF9HonVXKAoIR1FkEZwU=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: v1rV53WzZWmrMzI/ovzC6ZtIEqJ492pcfJCtFraz0gM=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: gjp3o9tIm4VyqLrJwyLfxpBmtpdyfXJMbbExRvAW/uQ=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 7gvulhymoo0memfRg/UTkfWV5Oiq5ExIUWNThD1MND8=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: +gu8WSeEMeEOHevLv3lHmq1TZu30rJs1aHVVDzSTqYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13351 (0x3427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: May 18 14:26:58 2024 GMT Not After : May 25 14:26:58 2024 GMT Subject: CN=6648bab2-6366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:28:cb:74:11:37:b3:05:94:6c:fc:66:ec: ce:d7:23:40:3b:07:49:3b:51:37:a2:89:25:66:5d: 2d:55:36:19:d9:1c:99:53:d0:84:7c:0d:01:38:77: 57:ef:45:6b:a6:e1:4f:89:3c:0a:be:fa:23:aa:85: 85:2f:6e:40:78:7a:c2:1e:ec:38:76:78:e4:76:71: 31:03:70:40:29:a3:88:75:85:9b:3b:c5:75:df:6d: c5:d4:ed:6b:cd:77:e8:78:5b:15:5a:dc:0a:ee:6b: ae:1c:d2:66:86:48:c4:80:83:24:6c:7c:70:40:ba: d5:f9:19:e4:88:30:6f:ea:c6:40:58:f9:79:b7:3d: 5a:f7:0d:84:db:bd:a1:59:1e:39:e0:ab:89:73:4f: 5e:8f:a9:19:d2:97:3e:67:d9:b1:2b:58:ba:a1:ae: b7:19:74:5d:5c:37:6a:86:1d:b9:92:e6:a5:7a:c5: 63:7f:e4:b3:c3:2c:82:3a:14:9a:0d:e1:5b:e1:5a: 97:f9:b4:2a:9f:7c:21:87:7c:15:15:71:88:aa:20: d6:e3:3c:92:42:40:55:78:46:38:9d:be:49:f9:ac: 2d:3a:91:f1:4a:88:95:b8:49:f6:34:8a:7e:99:b2: e3:d4:d3:e4:9b:9d:d2:84:da:ec:c2:2a:de:4a:cb: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:F0:B3:88:BF:2D:AE:A4:FF:2C:EA:F1:12:6E:4A:6B:7E:FA:DC X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:54:97:af:f1:89:08:c5:06:9c:8d:a8:05:b2:a6:1e:46:72: 8f:fc:b5:3b:46:ab:50:98:8b:c3:5a:23:8e:85:49:43:3c:28: 78:4f:bc:56:79:9c:01:1e:92:f8:c6:82:58:df:52:e4:73:70: 67:e9:cc:4a:69:b5:c8:6f:32:84:25:0b:85:3d:0b:92:d5:33: c8:e0:4b:cc:99:0e:ba:f9:e5:e9:fb:9d:48:2a:58:17:b9:be: 2a:7e:dd:18:ba:5e:a0:8f:44:98:df:0a:a3:43:7c:6a:ef:5d: bd:a1:41:6d:3c:85:7d:eb:ad:51:12:ad:d4:1c:b1:4b:23:cd: 80:20:58:ce:1d:fd:09:31:ff:78:c0:99:3b:fd:57:91:33:05: ed:42:a7:fc:1f:97:90:b1:16:bd:4c:80:00:cf:24:e5:50:53: 35:94:38:24:2d:a0:e3:43:92:99:f8:54:03:c4:18:89:d6:27: 18:01:05:c3:79:8e:f8:fc:8f:d5:18:0d:b1:da:8c:6b:cb:2b: 43:9b:08:22:b8:a3:80:0f:dd:64:eb:42:82:a0:33:90:f0:e3: cb:72:a7:15:84:42:b1:37:62:b3:1e:1d:e1:fb:cf:57:39:ab: 4e:10:e2:82:17:89:c7:65:25:2f:f7:62:16:a2:d4:95:a1:62: 52:08:16:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjQwNTE4MTQyNjU4WhcNMjQwNTI1MTQyNjU4WjAYMRYwFAYD VQQDEw02NjQ4YmFiMi02MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug8oy3QRN7MFlGz8ZuzO1yNAOwdJO1E3ooklZl0tVTYZ2RyZU9CEfA0BOHdX 70VrpuFPiTwKvvojqoWFL25AeHrCHuw4dnjkdnExA3BAKaOIdYWbO8V1323F1O1r zXfoeFsVWtwK7muuHNJmhkjEgIMkbHxwQLrV+RnkiDBv6sZAWPl5tz1a9w2E272h WR454KuJc09ej6kZ0pc+Z9mxK1i6oa63GXRdXDdqhh25kualesVjf+SzwyyCOhSa DeFb4VqX+bQqn3whh3wVFXGIqiDW4zySQkBVeEY4nb5J+awtOpHxSoiVuEn2NIp+ mbLj1NPkm53ShNrswireSsuXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjN8LOI vy2upP8s6vESbkprfvrcMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApVJev8YkIxQacjagFsqYeRnKP/LU7RqtQmIvDWiOOhUlDPCh4T7xW eZwBHpL4xoJY31Lkc3Bn6cxKabXIbzKEJQuFPQuS1TPI4EvMmQ66+eXp+51IKlgX ub4qft0Yul6gj0SY3wqjQ3xq7129oUFtPIV9661REq3UHLFLI82AIFjOHf0JMf94 wJk7/VeRMwXtQqf8H5eQsRa9TIAAzyTlUFM1lDgkLaDjQ5KZ+FQDxBiJ1icYAQXD eY74/I/VGA2x2oxryytDmwgiuKOAD91k60KCoDOQ8OPLcqcVhEKxN2KzHh3h+89X OatOEOKCF4nHZSUv92IWotSVoWJSCBYt -----END CERTIFICATE-----Generated at Sat May 18 15:26:08 2024 by rpki-client on console-fra.rpki-client.org