$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: f8dCaTOKRzz2OdR0+ZXowuKi5ybLNWhY/ggcpKutEZM= Subject key identifier: 1B:83:D2:41:DC:AA:08:60:C6:47:F3:50:3D:5D:1E:44:91:1A:C3:7E Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 34 Signing time: Fri 31 May 2024 09:21:48 +0000 Manifest this update: Fri 31 May 2024 09:21:48 +0000 Manifest next update: Fri 07 Jun 2024 09:21:48 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: /vAHx53y08ld0iynKnR0nD5fIwgS6KaOx+3ufZ+0/8M=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: CD5JHrOld6EH8gDDi5gO0sRUppO6UZeQlXazyHZlOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: May 31 09:21:48 2024 GMT Not After : Jun 7 09:21:48 2024 GMT Subject: CN=665996ac-ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:5f:ff:79:e6:fb:07:13:d1:1d:36:ef:f7: a9:b3:1c:db:06:95:6f:7e:ca:64:5f:8d:78:06:c2: e8:aa:8a:72:80:0d:22:26:3f:97:d5:a8:ed:fb:1c: dd:7a:ce:2e:3d:14:c1:52:23:22:33:03:b4:92:07: 38:07:db:ae:7f:fc:2b:7f:dd:24:68:d2:61:fa:9b: 6a:8e:49:38:d2:e4:7d:0d:f7:69:32:eb:7c:d9:8a: 73:0e:32:c0:4e:71:df:f2:0b:de:13:e6:e3:d8:a2: 96:d7:0e:59:e1:7c:57:fe:77:59:bc:65:b3:a5:aa: fe:67:f6:61:a8:a1:b2:7a:d4:4b:bc:c9:25:77:e8: 3c:ac:27:f7:78:47:f7:ee:ed:0b:27:70:30:ea:dd: 94:59:fe:00:36:df:09:c0:bc:b5:e1:5a:26:47:83: 4a:6a:43:d2:09:21:6f:e1:79:e0:97:48:67:e3:b8: 35:54:b8:0e:be:10:38:c8:61:47:73:db:55:7a:a6: a6:0f:ab:21:fa:68:fc:09:f1:c4:b7:ff:b4:93:c3: 4e:4f:a8:7c:e9:53:24:77:22:21:83:3d:6b:4a:6c: 24:80:aa:6b:af:36:ab:09:01:aa:eb:b9:05:27:c6: a1:96:2e:03:86:38:c8:cd:2f:37:c7:e2:ea:bd:c6: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:D2:41:DC:AA:08:60:C6:47:F3:50:3D:5D:1E:44:91:1A:C3:7E X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4b:87:27:2c:e6:00:38:e8:cf:78:58:e8:74:13:e0:d6:97: 28:f2:e2:1b:62:ed:e6:c2:2f:d0:e6:de:30:35:54:4d:84:63: 74:06:e9:0a:ae:e7:c5:b9:a8:73:70:82:c2:d9:96:ee:32:40: 70:9b:49:cd:f3:14:be:1c:32:5f:13:74:ed:03:bc:76:d3:48: 17:bb:a6:7c:a7:3b:77:21:1e:05:e3:c6:2e:1b:34:6f:37:95: b7:b1:7a:f0:ec:2b:27:73:01:a0:35:e7:5e:6b:97:06:64:45: 23:ee:58:65:85:9e:1d:de:38:29:d1:73:9c:e6:31:57:77:4a: 6e:80:ac:c8:88:00:6e:d5:32:45:39:37:6d:8d:22:67:ca:3d: c7:83:24:af:7b:06:cd:88:7d:59:a3:da:19:cd:d0:fc:15:f3: 24:ba:2f:92:af:43:03:1f:f5:b6:9a:59:a3:d3:ee:ef:6d:0a: d4:83:f9:1f:1c:0f:9a:07:ea:47:6a:f6:f7:a8:50:ef:82:19: bf:d1:00:42:56:b6:7f:52:36:9d:39:22:22:78:c2:11:da:56: 28:28:a4:bd:ce:05:92:2f:b9:69:2d:ea:fd:12:1b:04:fb:dc: 0e:ae:e9:f3:4b:0f:7d:13:8d:8f:37:e9:9a:89:77:b8:a7:7b: 8d:8b:02:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjkyOTExMC8GA1UEBRMoQTkyMTREQjk5MTg0OUIyOUM0RjA0NUMzMzY0NzBFOUQ4 MkM0OENFMjAeFw0yNDA1MzEwOTIxNDhaFw0yNDA2MDcwOTIxNDhaMBgxFjAUBgNV BAMTDTY2NTk5NmFjLWVkMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnZF//eeb7BxPRHTbv96mzHNsGlW9+ymRfjXgGwuiqinKADSImP5fVqO37HN16 zi49FMFSIyIzA7SSBzgH265//Ct/3SRo0mH6m2qOSTjS5H0N92ky63zZinMOMsBO cd/yC94T5uPYopbXDlnhfFf+d1m8ZbOlqv5n9mGoobJ61Eu8ySV36DysJ/d4R/fu 7QsncDDq3ZRZ/gA23wnAvLXhWiZHg0pqQ9IJIW/heeCXSGfjuDVUuA6+EDjIYUdz 21V6pqYPqyH6aPwJ8cS3/7STw05PqHzpUyR3IiGDPWtKbCSAqmuvNqsJAarruQUn xqGWLgOGOMjNLzfH4uq9xi3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG4PSQdyq CGDGR/NQPV0eRJEaw34wHwYDVR0jBBgwFoAUqSFNuZGEmynE8EXDNkcOnYLEjOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTI5L0JFQkRFQTk4RDVF RTExRUU5RTIwMTc3REM0RjlBRTAyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVNGTnVaR0VteW5FOEVYRE5rY09uWUxFak9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTI5L0JFQkRFQTk4RDVFRTExRUU5RTIwMTc3REM0RjlBRTAyL3FTRk51WkdFbXlu RThFWEROa2NPbllMRWpPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ1Lhycs5gA46M94WOh0E+DWlyjy4hti7ebCL9Dm3jA1VE2EY3QG6Qqu 58W5qHNwgsLZlu4yQHCbSc3zFL4cMl8TdO0DvHbTSBe7pnynO3chHgXjxi4bNG83 lbexevDsKydzAaA1515rlwZkRSPuWGWFnh3eOCnRc5zmMVd3Sm6ArMiIAG7VMkU5 N22NImfKPceDJK97Bs2IfVmj2hnN0PwV8yS6L5KvQwMf9baaWaPT7u9tCtSD+R8c D5oH6kdq9veoUO+CGb/RAEJWtn9SNp05IiJ4whHaVigopL3OBZIvuWkt6v0SGwT7 3A6u6fNLD30TjY836ZqJd7ine42LAt0= -----END CERTIFICATE-----Generated at Fri May 31 10:02:46 2024 by rpki-client on console-ams.rpki-client.org