$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: kN3S0yDZrWq5foEciKzo0cQqjn8Qx4kJM3/Yy1k8EEk= Subject key identifier: 7E:93:FE:85:00:D0:3B:2E:E8:F7:AB:FD:E3:A5:2A:B9:2F:76:09:0B Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 011A Signing time: Sun 19 May 2024 05:19:50 +0000 Manifest this update: Sun 19 May 2024 05:19:49 +0000 Manifest next update: Sun 26 May 2024 05:19:49 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: 5EQiIkdxbx+JUHoo+cLHWJvYl4i76Dp2B/jrSmsnt6s=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: zVPRl8aSlwcxV68OyN0H+R3+MRPBkO3MLKHRfVZXzvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: May 19 05:19:49 2024 GMT Not After : May 26 05:19:49 2024 GMT Subject: CN=66498bf6-dbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:72:43:b6:d2:83:dc:57:88:c7:29:1b:71: 77:18:1b:85:2d:9e:f2:fe:78:32:8a:89:a4:ad:fa: 81:7f:cf:9b:8f:68:de:c2:08:e4:8a:2a:5a:49:59: dd:6a:9a:f0:b7:00:00:1a:fb:e1:69:3b:b1:3b:3e: 49:45:2e:24:7d:b3:9f:59:8d:d3:f0:4a:5d:90:19: 8f:d4:86:52:62:02:74:1b:74:12:86:1f:02:8e:65: 98:8a:80:bb:8e:98:bc:66:a1:78:f8:50:92:73:63: 5c:7a:bf:1a:9c:a5:92:8d:32:82:02:bc:c4:a0:11: 46:96:fe:13:01:71:cd:06:94:e0:73:72:45:7f:eb: ea:3b:0e:c6:da:1f:75:88:80:d1:b8:8d:10:a5:ad: 14:80:55:b7:46:00:c3:51:21:29:0c:d3:7d:65:66: d4:d0:aa:ae:b6:fb:ee:2e:d7:4d:7a:ba:69:1a:cd: 22:31:ee:ab:b1:6e:2d:f7:7b:f4:9d:21:0a:0a:44: 83:57:54:d9:09:d5:45:38:ce:58:ed:0b:7a:bb:65: 37:ee:44:fc:6c:5b:83:81:15:73:e2:49:45:07:69: 2b:61:97:01:1b:f0:06:89:c0:36:b8:cb:47:42:04: a3:d4:0a:2f:a0:93:a4:79:7f:18:67:f2:3e:72:a1: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:FE:85:00:D0:3B:2E:E8:F7:AB:FD:E3:A5:2A:B9:2F:76:09:0B X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:23:56:93:59:dd:d0:e5:1e:27:e1:63:b1:0e:bc:37:2b: 3b:c0:65:53:10:f2:7d:d7:ab:99:c6:81:18:fc:db:f5:9c:b7: b9:04:dc:79:4d:4e:0e:eb:6d:6b:c4:db:40:0f:4f:19:9d:c2: c4:a4:09:16:92:09:c5:00:b3:7c:a1:64:0e:62:c8:94:1f:37: 92:4b:23:51:9d:c8:95:f7:24:e2:32:65:bb:0c:0f:31:32:f5: 19:e9:76:c1:cf:b4:4d:03:07:4f:7e:87:78:b0:b2:ab:b7:37: b2:67:a4:32:92:12:b7:06:a4:46:75:15:ca:72:b9:3d:4e:62: ef:eb:d6:76:5f:1f:c0:3f:62:7b:00:cd:03:9f:0a:fb:7e:86: a4:e0:3b:91:bd:cb:df:3b:49:6f:c7:31:68:32:4f:02:7f:c3: e4:d9:32:8c:d5:9f:d0:2e:4b:dc:7b:41:b9:f2:1b:86:01:75: 5a:2a:ad:27:22:80:48:98:8c:9c:45:24:b3:f1:23:62:0d:f1: 0f:35:eb:a9:02:bc:ee:8f:c9:4b:33:b6:c5:b4:45:16:96:a7: 14:07:03:d4:13:b3:8d:01:27:4d:89:a1:f6:8e:e6:25:cc:0d: dd:e0:5e:ab:f4:f2:bf:88:46:aa:03:68:c2:86:f3:d6:f7:2d: b7:a3:93:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjQwNTE5MDUxOTQ5WhcNMjQwNTI2MDUxOTQ5WjAYMRYwFAYD VQQDEw02NjQ5OGJmNi1kYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY5yQ7bSg9xXiMcpG3F3GBuFLZ7y/ngyiomkrfqBf8+bj2jewgjkiipaSVnd aprwtwAAGvvhaTuxOz5JRS4kfbOfWY3T8EpdkBmP1IZSYgJ0G3QShh8CjmWYioC7 jpi8ZqF4+FCSc2Ncer8anKWSjTKCArzEoBFGlv4TAXHNBpTgc3JFf+vqOw7G2h91 iIDRuI0Qpa0UgFW3RgDDUSEpDNN9ZWbU0KqutvvuLtdNerppGs0iMe6rsW4t93v0 nSEKCkSDV1TZCdVFOM5Y7Qt6u2U37kT8bFuDgRVz4klFB2krYZcBG/AGicA2uMtH QgSj1AovoJOkeX8YZ/I+cqFvzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6T/oUA 0Dsu6Per/eOlKrkvdgkLMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+hSNWk1nd0OUeJ+FjsQ68Nys7wGVTEPJ916uZxoEY/Nv1nLe5BNx5 TU4O621rxNtAD08ZncLEpAkWkgnFALN8oWQOYsiUHzeSSyNRnciV9yTiMmW7DA8x MvUZ6XbBz7RNAwdPfod4sLKrtzeyZ6QykhK3BqRGdRXKcrk9TmLv69Z2Xx/AP2J7 AM0Dnwr7foak4DuRvcvfO0lvxzFoMk8Cf8Pk2TKM1Z/QLkvce0G58huGAXVaKq0n IoBImIycRSSz8SNiDfEPNeupArzuj8lLM7bFtEUWlqcUBwPUE7ONASdNiaH2juYl zA3d4F6r9PK/iEaqA2jChvPW9y23o5NE -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org