$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: vdFe+Qk8bdndvWPUUTjsR8WHOkikI0KkTERbX8Oxflk= Subject key identifier: 0C:C8:7A:9B:DE:2C:DB:00:ED:0F:DF:F7:1B:08:62:C7:FF:B4:35:18 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 023A Signing time: Sun 19 May 2024 04:00:44 +0000 Manifest this update: Sun 19 May 2024 04:00:43 +0000 Manifest next update: Sun 26 May 2024 04:00:43 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: AYoVp5SaNCbCckv7rzA0Kz6/IS126BO9LvLxy6GrESg=) 2: EC6483F2A21011ED850DD13CC4F9AE02.roa (hash: AqiKzfxAx2+y4fpUN8HuoTB2f9aC0LoVjP0OmgbAy0E=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: S6LN+TbL8opVfjFRlM1glK2Ag2e2qtVfe+DrN2wZFBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: May 19 04:00:43 2024 GMT Not After : May 26 04:00:43 2024 GMT Subject: CN=6649796c-08d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:28:4e:eb:c0:74:95:55:86:a1:9e:a0:b5: 34:66:48:23:e8:1a:5a:cf:b3:2f:ca:27:cb:ce:af: 47:e6:90:51:ee:5d:2b:3a:ac:02:b8:3f:61:8a:8b: 6c:39:3a:70:2d:3e:ca:4d:22:a6:bb:81:e4:cd:6a: 93:58:19:3b:3f:69:22:ad:1b:44:b5:b7:86:3f:c9: ae:fe:2c:f5:19:65:56:d2:72:e5:bc:08:f9:ca:8e: ce:e7:ea:70:df:bd:10:df:7b:c3:f2:f7:35:01:1f: 60:34:a1:ad:29:be:3a:60:55:d0:08:2e:e0:72:d7: ff:9f:b1:64:21:fe:93:55:29:79:51:85:bf:2b:3a: b7:be:6d:fe:54:e7:ce:6f:96:50:37:ba:da:06:a6: 49:4c:20:c9:02:f8:4c:fd:35:3c:1b:ea:12:09:3c: 88:3c:29:52:5f:45:1a:e4:2f:96:26:84:08:ee:5a: 55:25:65:d1:2c:09:23:1a:a0:46:c2:04:5d:5e:f8: f1:c8:d4:44:18:ca:ef:65:c0:cf:b6:92:0a:49:e7: 4c:f6:bf:90:3a:f0:d8:00:64:8b:f3:67:0c:04:4c: 86:46:e2:6f:f4:e6:46:58:53:4c:43:5b:64:c8:99: 70:d7:f6:80:91:69:61:56:67:a1:fd:5c:14:42:b7: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:7A:9B:DE:2C:DB:00:ED:0F:DF:F7:1B:08:62:C7:FF:B4:35:18 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:97:9e:79:c3:96:03:5f:91:7e:6c:db:ae:e3:81:9c:3a:74: ea:2d:a6:6f:7a:52:c7:93:0b:c7:cc:14:d5:55:0b:47:9e:5f: 5f:5c:0a:6d:0d:a4:be:89:3c:6d:14:d0:c7:7b:ac:05:d0:42: 83:db:a7:6e:39:6a:3d:20:19:c6:9c:b6:73:3f:c1:cb:57:53: bf:06:ec:78:99:d1:07:c6:c0:f3:fe:a8:40:f9:5e:aa:39:c8: 6e:8e:da:fc:98:7d:93:6e:6e:74:21:02:79:3a:eb:db:0f:58: 90:a5:e3:04:8e:0b:91:f1:e7:d4:3d:a1:14:eb:05:26:90:32: f5:65:ac:b3:d0:7a:52:72:99:25:37:02:27:ce:f3:aa:55:a8: d8:e5:5e:3d:06:cd:f5:97:4c:07:b5:1f:1c:8c:bb:36:2c:d3: 70:ae:62:24:cc:11:ba:7c:c5:a0:80:e9:8e:3d:68:25:d3:c1: 03:64:0e:ba:c6:4d:bb:dd:e3:a6:51:ed:8f:cd:4c:f3:24:74: bb:cc:02:eb:e9:0b:6c:c1:6c:bb:ab:d7:30:ff:6c:8a:a0:da: 30:e0:a9:99:98:f8:16:43:1a:0c:01:ad:98:a7:9c:d3:48:41: 33:4f:ba:bc:5f:4c:88:92:90:68:c6:a0:ac:04:ea:ff:54:60: 79:26:a5:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjQwNTE5MDQwMDQzWhcNMjQwNTI2MDQwMDQzWjAYMRYwFAYD VQQDEw02NjQ5Nzk2Yy0wOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLcoTuvAdJVVhqGeoLU0Zkgj6Bpaz7MvyifLzq9H5pBR7l0rOqwCuD9hiots OTpwLT7KTSKmu4HkzWqTWBk7P2kirRtEtbeGP8mu/iz1GWVW0nLlvAj5yo7O5+pw 370Q33vD8vc1AR9gNKGtKb46YFXQCC7gctf/n7FkIf6TVSl5UYW/Kzq3vm3+VOfO b5ZQN7raBqZJTCDJAvhM/TU8G+oSCTyIPClSX0Ua5C+WJoQI7lpVJWXRLAkjGqBG wgRdXvjxyNREGMrvZcDPtpIKSedM9r+QOvDYAGSL82cMBEyGRuJv9OZGWFNMQ1tk yJlw1/aAkWlhVmeh/VwUQreyaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzIepve LNsA7Q/f9xsIYsf/tDUYMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/l555w5YDX5F+bNuu44GcOnTqLaZvelLHkwvHzBTVVQtHnl9fXApt DaS+iTxtFNDHe6wF0EKD26duOWo9IBnGnLZzP8HLV1O/Bux4mdEHxsDz/qhA+V6q Ochujtr8mH2Tbm50IQJ5OuvbD1iQpeMEjguR8efUPaEU6wUmkDL1Zayz0HpScpkl NwInzvOqVajY5V49Bs31l0wHtR8cjLs2LNNwrmIkzBG6fMWggOmOPWgl08EDZA66 xk273eOmUe2PzUzzJHS7zALr6QtswWy7q9cw/2yKoNow4KmZmPgWQxoMAa2Yp5zT SEEzT7q8X0yIkpBoxqCsBOr/VGB5JqUR -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org