$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft File: coqCQJLldBJUu5LVl3IzYaBL8pI.mft (raw, json) Hash identifier: K3bW7uThSVLOV2MEHq8HcoMo6E9dBMEpTCdrIM0wl1w= Subject key identifier: 61:AC:DC:FC:58:28:4B:7F:04:57:7F:C4:E0:5A:01:66:90:9A:A1:9F Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft Manifest number: 0C35 Signing time: Sat 18 May 2024 18:58:22 +0000 Manifest this update: Sat 18 May 2024 18:58:21 +0000 Manifest next update: Sat 25 May 2024 18:58:21 +0000 Files and hashes: 1: coqCQJLldBJUu5LVl3IzYaBL8pI.crl (hash: AZ8zyz+57cvRdXjMOfk+AQ8kYa5kMOE9+JZLfS9xNfg=) 2: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (hash: pNPxUMy2/VunrfLvQ92c5waT/3TRukkJAsSNmyuJB20=) 3: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (hash: okKhIAo5cLtGI8W8tBHwe7Y/dKgWVjuOG8v14Ov04dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Validity Not Before: May 18 18:58:21 2024 GMT Not After : May 25 18:58:21 2024 GMT Subject: CN=6648fa4d-87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:55:53:04:88:82:d8:dd:c4:96:f7:9b:2a: a4:c9:fd:0b:b1:11:04:2e:8a:07:4d:cf:6d:4d:47: 8d:eb:7b:2d:ee:c6:b8:a3:8a:6f:e6:d7:80:4b:a9: 67:e3:1a:e5:c4:97:19:9a:d8:11:05:fd:19:c2:ab: 9d:ca:3f:81:ca:66:7c:13:3b:22:7a:e0:99:c7:10: d8:c1:a8:ac:bc:5b:e8:dc:e6:8e:49:58:2e:69:ff: f9:34:2d:15:bb:db:b5:17:37:47:01:3a:f0:7f:d4: 76:b3:93:5f:4e:e9:03:5c:fe:84:2a:7e:61:d9:32: 1d:74:ec:93:df:74:5f:2b:64:af:8a:49:ec:e4:d7: 35:58:48:1a:45:a3:46:61:ad:b6:3f:28:cd:89:02: 00:d6:e2:d9:76:42:42:eb:c7:6b:e5:bf:8b:b0:3f: 62:6e:57:43:a5:61:bf:34:0d:0e:f8:79:74:d0:61: 2e:91:78:6e:5f:68:78:a5:80:3f:3b:5f:03:82:ae: d3:ef:3a:da:fd:a8:39:20:76:fc:c8:05:08:0d:61: e3:b5:06:63:9f:2c:de:2a:ca:1c:0f:02:bc:a2:6d: 5b:28:8c:89:98:cd:a4:8d:ee:79:c5:6d:e4:28:3b: 7c:c3:e2:80:ed:c0:17:39:bb:59:78:77:43:41:b3: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:DC:FC:58:28:4B:7F:04:57:7F:C4:E0:5A:01:66:90:9A:A1:9F X509v3 Authority Key Identifier: keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:e9:89:4d:38:f2:59:39:a6:5c:08:84:cd:b1:da:91:10: 13:1d:d5:8b:09:19:1b:2a:7d:40:cd:1c:1c:fa:b4:36:f6:e1: 25:ad:6d:10:59:b3:b5:58:b1:48:97:06:e9:a5:54:0f:28:0f: fb:a2:d8:03:be:d7:95:85:37:d6:51:2c:f0:0c:81:49:eb:0e: 07:11:99:2c:de:b3:96:0b:ca:a7:a5:05:43:1c:52:47:bd:f3: 1e:23:e3:58:06:5b:56:4a:69:64:03:1e:78:73:85:24:a0:0b: 4a:85:50:09:eb:f6:74:0e:8b:2e:5f:ad:a3:36:bd:f4:4f:f7: b1:d3:a9:f7:8d:03:6d:b9:b1:fd:7b:d9:67:78:67:eb:3a:33: c7:f1:65:be:69:4e:3c:5d:fb:de:17:63:94:d5:2b:74:4f:82: 0d:65:66:d4:48:d5:2d:c5:44:e2:9e:45:55:ae:87:c9:55:0d: ea:fd:15:51:26:d1:08:48:0f:e8:e8:d6:72:53:ff:aa:63:00: 83:58:fb:ca:06:e9:0a:7a:19:87:af:5e:6f:5d:fe:aa:e6:e5: 95:60:98:7d:ae:19:1f:6d:e6:03:0a:23:ad:0a:9e:d5:6f:75: 96:66:be:9a:fc:54:71:54:1e:d4:75:93:94:d7:52:1d:e5:9d: 3a:54:46:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx QTA0QkYyOTIwHhcNMjQwNTE4MTg1ODIxWhcNMjQwNTI1MTg1ODIxWjAYMRYwFAYD VQQDEw02NjQ4ZmE0ZC04N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ9VUwSIgtjdxJb3myqkyf0LsREELooHTc9tTUeN63st7sa4o4pv5teAS6ln 4xrlxJcZmtgRBf0Zwqudyj+BymZ8EzsieuCZxxDYwaisvFvo3OaOSVguaf/5NC0V u9u1FzdHATrwf9R2s5NfTukDXP6EKn5h2TIddOyT33RfK2Svikns5Nc1WEgaRaNG Ya22PyjNiQIA1uLZdkJC68dr5b+LsD9ibldDpWG/NA0O+Hl00GEukXhuX2h4pYA/ O18Dgq7T7zra/ag5IHb8yAUIDWHjtQZjnyzeKsocDwK8om1bKIyJmM2kje55xW3k KDt8w+KA7cAXObtZeHdDQbOXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGs3PxY KEt/BFd/xOBaAWaQmqGfMB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUI2MS8zRjAwRDc1Q0UyQUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRC SlV1NUxWbDNJellhQkw4cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzo+mJTTjyWTmmXAiEzbHakRATHdWLCRkbKn1AzRwc+rQ29uElrW0Q WbO1WLFIlwbppVQPKA/7otgDvteVhTfWUSzwDIFJ6w4HEZks3rOWC8qnpQVDHFJH vfMeI+NYBltWSmlkAx54c4UkoAtKhVAJ6/Z0DosuX62jNr30T/ex06n3jQNtubH9 e9lneGfrOjPH8WW+aU48XfveF2OU1St0T4INZWbUSNUtxUTinkVVrofJVQ3q/RVR JtEISA/o6NZyU/+qYwCDWPvKBukKehmHr15vXf6q5uWVYJh9rhkfbeYDCiOtCp7V b3WWZr6a/FRxVB7UdZOU11Id5Z06VEbX -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org