$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: t+nd+SCplXyqiJCqnDH2e9Q2wyMCCAE0v1ueqqJcXhQ= Subject key identifier: 6B:D1:62:03:0B:5A:37:61:41:5F:3D:09:77:52:1B:4A:F9:C0:5C:1E Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 02CC Signing time: Sun 19 May 2024 03:28:06 +0000 Manifest this update: Sun 19 May 2024 03:28:05 +0000 Manifest next update: Sun 26 May 2024 03:28:05 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: rqG8QpM9Gb9ubAGtBtoQI2kEFGNcjTfTq2M/YaAJGRQ=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: IHCx8iKwFaHNBcD68Fjdjf74kAkM54IECqYXNmF+PP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: May 19 03:28:05 2024 GMT Not After : May 26 03:28:05 2024 GMT Subject: CN=664971c6-2d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:02:5e:4c:02:a1:eb:c0:d7:4a:5a:aa:e6: 14:ff:18:f5:e0:39:f6:76:74:93:b7:e3:ea:e1:da: 3d:69:18:1c:4f:e9:52:27:4c:38:d4:a9:c7:90:56: 09:77:3f:33:38:d6:c9:39:83:79:82:1d:a6:df:4b: 7a:77:57:3a:14:2d:48:00:b6:26:77:1f:63:19:d0: 89:01:1a:eb:37:12:67:4a:5c:2d:a6:75:e2:23:8e: cd:47:db:77:06:51:32:44:fe:0f:9a:7e:30:61:91: 4e:9c:f4:e3:60:e0:f0:c2:a0:d4:25:a5:4b:9b:33: 32:8d:d0:11:63:50:49:8b:06:8a:01:e7:9c:db:df: dd:25:b3:4a:0b:3c:c5:b6:fb:05:52:ae:83:ac:b5: c1:00:74:a2:3b:3a:c0:6c:95:eb:f7:0a:95:e8:c8: 56:c9:af:87:db:37:5a:93:12:17:05:03:35:92:7b: 76:ba:bd:0c:78:88:8b:7f:32:bc:c5:1c:22:83:a7: 72:10:8f:a0:fd:de:a3:65:a8:4e:c3:6f:53:b8:b4: e8:07:cc:69:09:2f:9e:27:fa:3a:5b:3d:bf:af:3e: 87:f8:c0:75:c5:59:dc:37:ca:37:71:31:38:20:4c: cc:1a:30:47:94:1b:45:68:5f:fd:dc:8a:b8:ac:a2: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D1:62:03:0B:5A:37:61:41:5F:3D:09:77:52:1B:4A:F9:C0:5C:1E X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ed:8b:79:53:e5:47:94:0b:71:00:a5:ee:33:af:46:aa:6e: 12:2b:3c:0d:6d:2b:a6:6f:72:8f:cc:d2:48:e3:f8:bb:f4:f4: d4:cc:12:47:1e:e5:2e:32:a7:9c:45:4d:42:38:ff:e9:d7:82: f2:19:1b:7b:85:6c:7d:c1:ea:00:47:58:5e:d5:46:ff:1f:88: 8f:db:8f:67:80:20:c2:64:32:9f:8f:44:a2:c7:8b:20:3b:bf: 47:5b:ab:47:ee:96:e9:ef:d1:e4:dd:3e:b7:9a:60:e9:17:f6: 54:b7:9d:3e:0c:63:1a:35:1d:ee:4b:d5:9c:fb:54:50:1a:f7: 2d:c4:ed:6d:a3:07:d4:84:b6:74:33:a6:e3:3e:63:5b:8b:e1: b5:64:88:a0:dd:c4:df:35:3f:ce:f4:b5:d6:77:33:f7:31:63: 9d:be:0f:77:27:92:7e:55:62:48:9d:a4:8e:14:81:c2:3e:c5: d7:5c:a3:8d:3f:01:74:a2:57:13:f8:0e:b1:8c:7e:3d:1e:fa: b9:99:aa:0f:f1:14:5c:b8:be:9f:ef:38:e9:95:e0:e6:70:a0: 74:86:66:c1:b6:13:29:5a:60:1f:9a:a8:2c:0e:1e:f1:a1:8c: 67:33:c2:5c:3a:39:06:7a:78:46:85:6d:b8:54:11:6a:e1:f2: fd:d9:af:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjQwNTE5MDMyODA1WhcNMjQwNTI2MDMyODA1WjAYMRYwFAYD VQQDEw02NjQ5NzFjNi0yZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb4CXkwCoevA10paquYU/xj14Dn2dnSTt+Pq4do9aRgcT+lSJ0w41KnHkFYJ dz8zONbJOYN5gh2m30t6d1c6FC1IALYmdx9jGdCJARrrNxJnSlwtpnXiI47NR9t3 BlEyRP4Pmn4wYZFOnPTjYODwwqDUJaVLmzMyjdARY1BJiwaKAeec29/dJbNKCzzF tvsFUq6DrLXBAHSiOzrAbJXr9wqV6MhWya+H2zdakxIXBQM1knt2ur0MeIiLfzK8 xRwig6dyEI+g/d6jZahOw29TuLToB8xpCS+eJ/o6Wz2/rz6H+MB1xVncN8o3cTE4 IEzMGjBHlBtFaF/93Iq4rKIt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvRYgML WjdhQV89CXdSG0r5wFweMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx7Yt5U+VHlAtxAKXuM69Gqm4SKzwNbSumb3KPzNJI4/i79PTUzBJH HuUuMqecRU1COP/p14LyGRt7hWx9weoAR1he1Ub/H4iP249ngCDCZDKfj0Six4sg O79HW6tH7pbp79Hk3T63mmDpF/ZUt50+DGMaNR3uS9Wc+1RQGvctxO1towfUhLZ0 M6bjPmNbi+G1ZIig3cTfNT/O9LXWdzP3MWOdvg93J5J+VWJInaSOFIHCPsXXXKON PwF0olcT+A6xjH49Hvq5maoP8RRcuL6f7zjpleDmcKB0hmbBthMpWmAfmqgsDh7x oYxnM8JcOjkGenhGhW24VBFq4fL92a8z -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org