$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: 9mVZXE6ZACCYYzjL51QWmNW9jxg428mEMIXrz7awIU4= Subject key identifier: EF:F1:12:D1:5F:77:47:60:5E:8A:28:86:67:08:B6:FF:E4:3B:5D:F5 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 037B Signing time: Sun 19 May 2024 02:44:36 +0000 Manifest this update: Sun 19 May 2024 02:44:36 +0000 Manifest next update: Sun 26 May 2024 02:44:36 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: o+yLDA0Q3hRQNebid3R4q0xrsDSFjTMll64ELfUqcLw=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: Q2iy243agdSDjEa884LDfciYzMpoalViChCS9O74Bsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: May 19 02:44:36 2024 GMT Not After : May 26 02:44:36 2024 GMT Subject: CN=66496794-d457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:dd:b6:06:34:5c:4b:12:a9:40:e9:cb:68: 15:b0:ff:2f:e4:4c:89:b0:74:aa:6b:77:ed:da:87: 53:7e:db:db:72:59:33:66:4e:32:9a:54:0f:f3:73: 18:a8:36:d1:2c:aa:2a:c9:6b:70:2f:19:55:cc:e8: ed:d4:57:a4:f1:48:e8:c6:1a:55:0b:d4:b0:bd:7f: 55:b7:ae:40:96:a0:22:14:d2:4b:a0:78:e3:e7:76: 4e:cb:49:80:1e:9b:cc:0f:7f:db:95:3b:6b:85:da: cd:a2:76:d8:df:85:f6:a7:43:92:74:04:b7:de:00: 48:b4:a0:f9:eb:fb:d1:2b:e2:10:1f:02:4d:78:3d: 51:63:dc:3f:c5:ea:de:23:56:62:be:f1:b2:32:17: 23:fb:d5:ed:73:ec:10:50:3a:e8:c0:7b:00:09:aa: 40:0d:bb:00:ab:57:ab:4b:c2:60:4a:2a:bd:db:8d: 5c:53:da:b7:bc:b0:94:36:53:61:c3:52:12:b0:60: 2a:19:5a:b8:4a:a5:66:ea:b3:ed:b4:6e:e3:cb:ff: d4:25:8d:34:25:95:64:50:fc:7d:f7:4d:97:e9:6b: 46:fe:89:8e:e1:2c:1c:a4:6c:90:fe:f9:5d:05:77: 77:4b:d1:ce:95:61:bf:8a:19:68:4b:57:6a:3f:17: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F1:12:D1:5F:77:47:60:5E:8A:28:86:67:08:B6:FF:E4:3B:5D:F5 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:48:c4:e1:8d:7e:bf:ba:90:b3:86:8d:7f:68:f8:6b:1d:33: 6f:db:12:86:7e:02:38:a3:7d:d3:6d:b4:d8:39:12:f5:4d:69: 96:0e:9a:e5:08:5b:92:8b:48:c9:46:d6:4a:d0:54:48:5a:19: 87:6f:18:c8:c7:20:f9:64:a2:e2:a1:cb:06:2b:4e:3f:dc:94: f5:ec:bc:51:2c:e6:d2:4a:ed:73:41:94:61:63:f2:b1:f6:bd: 2c:1f:e8:ce:3e:c8:f3:d9:8f:79:70:44:48:bd:d3:3d:d2:f2: d0:ad:5a:8f:9e:40:2a:ce:5d:04:ad:69:62:f1:ca:bc:a3:4b: fe:c9:14:ec:85:34:02:f9:85:1c:22:56:1b:f7:fe:a9:22:67: a8:03:65:15:29:c4:02:6a:7f:7f:16:0c:7e:2c:4b:f0:26:97: b5:61:13:84:98:b1:74:0b:1f:51:da:8a:84:7f:ec:b6:3e:0b: 32:39:4c:07:38:16:2e:10:dc:18:ab:2a:cf:e8:7c:02:7c:5f: e9:01:b1:22:5b:51:65:e4:c5:2a:85:d9:a4:d6:53:cf:8d:61: fb:ff:64:05:7d:4c:e1:07:34:0f:43:f2:41:e8:1c:b0:69:fc: dd:9a:cc:ce:4d:90:53:0c:80:80:9d:51:c6:87:a9:81:83:47: 6e:d1:86:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjQwNTE5MDI0NDM2WhcNMjQwNTI2MDI0NDM2WjAYMRYwFAYD VQQDEw02NjQ5Njc5NC1kNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LLdtgY0XEsSqUDpy2gVsP8v5EyJsHSqa3ft2odTftvbclkzZk4ymlQP83MY qDbRLKoqyWtwLxlVzOjt1Fek8UjoxhpVC9SwvX9Vt65AlqAiFNJLoHjj53ZOy0mA HpvMD3/blTtrhdrNonbY34X2p0OSdAS33gBItKD56/vRK+IQHwJNeD1RY9w/xere I1ZivvGyMhcj+9Xtc+wQUDrowHsACapADbsAq1erS8JgSiq9241cU9q3vLCUNlNh w1ISsGAqGVq4SqVm6rPttG7jy//UJY00JZVkUPx9902X6WtG/omO4SwcpGyQ/vld BXd3S9HOlWG/ihloS1dqPxdWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/xEtFf d0dgXooohmcItv/kO131MB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBASMThjX6/upCzho1/aPhrHTNv2xKGfgI4o33TbbTYORL1TWmWDprl CFuSi0jJRtZK0FRIWhmHbxjIxyD5ZKLiocsGK04/3JT17LxRLObSSu1zQZRhY/Kx 9r0sH+jOPsjz2Y95cERIvdM90vLQrVqPnkAqzl0ErWli8cq8o0v+yRTshTQC+YUc IlYb9/6pImeoA2UVKcQCan9/Fgx+LEvwJpe1YROEmLF0Cx9R2oqEf+y2PgsyOUwH OBYuENwYqyrP6HwCfF/pAbEiW1Fl5MUqhdmk1lPPjWH7/2QFfUzhBzQPQ/JB6Byw afzdmszOTZBTDICAnVHGh6mBg0du0YYG -----END CERTIFICATE-----Generated at Sun May 19 03:38:17 2024 by rpki-client on console-ams.rpki-client.org