$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: PM181E9SWY2QcChnTf9wEbsNzApmMqhs097tnfYWxkc= Subject key identifier: 82:4B:29:53:54:51:F9:E1:83:28:A2:63:42:47:CB:4F:7B:EA:6F:70 Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 0388 Signing time: Fri 31 May 2024 03:17:45 +0000 Manifest this update: Fri 31 May 2024 03:17:44 +0000 Manifest next update: Fri 07 Jun 2024 03:17:44 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: npcNaFjyB/Yk8kCVRp5lWqibL1x8XSi8gLWa7vMCXwk=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: R0Eg5VTlGn4g/E+8sB7ehm+T8ICQ6nRwL2adzlDHX6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: May 31 03:17:44 2024 GMT Not After : Jun 7 03:17:44 2024 GMT Subject: CN=66594159-f023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:c7:e2:12:62:d2:0f:86:ca:da:84:3a:ed: be:fd:2e:7b:f7:8b:9f:05:b8:5c:43:ec:7a:75:83: b3:b8:7b:6e:ff:f7:ec:90:e7:53:7a:81:a9:a7:77: bc:e9:3a:ec:cc:32:f4:a1:46:59:42:ca:25:44:3f: e8:df:ce:3f:e4:6a:b7:4a:e0:bd:3f:4c:5e:af:bf: 36:e6:da:5a:76:54:77:c6:26:0b:3e:ea:8f:dd:9c: 26:fa:88:1b:9b:61:10:0d:6c:4e:28:0e:1f:e3:86: 52:35:7f:f2:04:fd:ed:98:4b:1b:2d:bf:7b:ff:54: bd:1b:1d:d3:0e:c9:f4:11:67:51:e1:56:1f:cf:47: 01:d8:9b:28:c8:38:e0:f7:19:79:fc:8e:31:65:31: e9:82:42:77:eb:7d:ee:22:9f:cd:28:bd:a9:9f:91: 3f:b8:4b:15:d1:87:c8:bb:bd:b3:5a:69:97:14:c0: 1e:db:b4:71:32:eb:c9:08:ca:3f:bd:91:b8:fd:71: 48:74:9b:d7:da:46:ce:a5:d3:4b:5c:f4:ec:c2:52: d1:80:3b:bf:41:74:cb:8b:4a:7c:15:5e:4e:f6:d6: 21:9f:76:3f:0c:85:48:5e:b0:5f:a8:fb:d0:61:6a: d9:61:9c:38:14:9b:34:60:e4:94:44:e5:a7:eb:fc: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:29:53:54:51:F9:E1:83:28:A2:63:42:47:CB:4F:7B:EA:6F:70 X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:1d:e9:39:4f:34:d8:fe:96:c7:83:7c:75:45:78:c0:af:11: cc:2e:3a:e8:bf:14:69:ff:15:f2:ec:c5:ed:59:2b:e7:cf:77: 2c:d4:79:bf:d8:30:cd:6b:38:66:fd:64:7b:ed:69:a4:bd:33: e8:f5:a7:e6:36:cd:ce:d7:82:8d:7b:ec:34:a1:7f:93:4f:13: 15:31:96:8e:d1:7a:cd:3d:2b:a4:22:7b:6d:4e:39:af:22:89: 6d:5f:61:0c:05:a6:95:90:0e:ea:31:e4:41:79:d2:ef:dd:e3: 87:96:84:af:8f:b4:2c:e6:b4:48:21:da:9c:f3:d2:b1:f5:ab: 24:62:3b:fa:5b:ec:f0:ac:d7:08:77:ae:eb:e3:62:6d:99:58: 3f:3c:a2:55:15:b9:a5:cd:80:91:17:26:74:dc:8e:2d:4c:21: 3f:8d:43:e0:c3:bc:c5:7e:45:f6:77:94:6d:43:ea:91:f8:7d: 14:3f:63:9f:7e:52:75:bd:e7:02:b2:fc:ff:cb:57:cf:23:d2: 73:d9:e3:6c:64:0d:70:f4:e7:4d:29:eb:c5:75:3b:64:30:9f: 0e:17:34:f2:95:97:b5:da:f0:89:f4:12:cb:5e:a3:0d:00:f6: 77:6e:8d:54:37:10:18:54:cc:9f:ff:51:bc:b0:d8:63:85:0a: 03:65:27:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjQwNTMxMDMxNzQ0WhcNMjQwNjA3MDMxNzQ0WjAYMRYwFAYD VQQDEw02NjU5NDE1OS1mMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLjH4hJi0g+GytqEOu2+/S5794ufBbhcQ+x6dYOzuHtu//fskOdTeoGpp3e8 6TrszDL0oUZZQsolRD/o384/5Gq3SuC9P0xer7825tpadlR3xiYLPuqP3Zwm+ogb m2EQDWxOKA4f44ZSNX/yBP3tmEsbLb97/1S9Gx3TDsn0EWdR4VYfz0cB2JsoyDjg 9xl5/I4xZTHpgkJ3633uIp/NKL2pn5E/uEsV0YfIu72zWmmXFMAe27RxMuvJCMo/ vZG4/XFIdJvX2kbOpdNLXPTswlLRgDu/QXTLi0p8FV5O9tYhn3Y/DIVIXrBfqPvQ YWrZYZw4FJs0YOSUROWn6/zu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJLKVNU UfnhgyiiY0JHy0976m9wMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEHek5TzTY/pbHg3x1RXjArxHMLjrovxRp/xXy7MXtWSvnz3cs1Hm/ 2DDNazhm/WR77WmkvTPo9afmNs3O14KNe+w0oX+TTxMVMZaO0XrNPSukInttTjmv IoltX2EMBaaVkA7qMeRBedLv3eOHloSvj7Qs5rRIIdqc89Kx9askYjv6W+zwrNcI d67r42JtmVg/PKJVFbmlzYCRFyZ03I4tTCE/jUPgw7zFfkX2d5RtQ+qR+H0UP2Of flJ1vecCsvz/y1fPI9Jz2eNsZA1w9OdNKevFdTtkMJ8OFzTylZe12vCJ9BLLXqMN APZ3bo1UNxAYVMyf/1G8sNhjhQoDZSeV -----END CERTIFICATE-----Generated at Fri May 31 04:54:04 2024 by rpki-client on console-fra.rpki-client.org