$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: zb9ydG8teJRpv3CQY/XmGkuu7le0AAqeCrj1N1D8QHY= Subject key identifier: AC:65:1A:05:73:82:56:B7:D1:B7:32:26:B7:41:96:E5:DA:BE:DA:0D Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 0302 Signing time: Fri 31 May 2024 03:48:14 +0000 Manifest this update: Fri 31 May 2024 03:48:14 +0000 Manifest next update: Fri 07 Jun 2024 03:48:14 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: APCESntJ94jOfxJMtiyFSdr7x+MIn6Ttwy/ZPkBVMR8=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: NmJNgM1TocJKXWdxIqSxjaeXJhysWvNCkav+9g71gx8=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: lZN8I9KZhIY+6zkUuDTd1f/VOr/7joqERe0PJi8R+bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: May 31 03:48:14 2024 GMT Not After : Jun 7 03:48:14 2024 GMT Subject: CN=6659487e-ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:45:c9:dc:02:60:09:75:b3:f9:f7:ac:68: 18:ef:82:d8:46:af:73:f0:fe:c7:5a:e0:ba:90:45: ae:96:68:88:fb:d3:4b:1e:79:d9:f9:8f:1b:ec:66: f0:b6:34:5a:3c:31:fe:3e:15:f5:27:0f:29:e5:e4: 6f:05:66:7f:1b:7b:a5:4e:6d:cf:0b:19:c3:aa:30: 99:e5:90:f1:63:b9:d6:93:53:91:9b:53:ac:1d:80: d4:86:ed:c2:bb:b4:0c:cd:4e:5c:5d:db:30:f6:0c: 60:2f:0c:5a:bd:e9:64:9a:c0:d5:77:96:6c:01:47: b2:9f:71:d4:83:49:52:1a:69:fb:24:7b:ef:0e:35: 13:63:16:b2:0c:40:49:37:c2:2a:c4:93:74:24:04: ec:f4:87:6e:50:1d:09:4c:86:59:ef:84:0e:97:3e: 59:43:63:1a:23:24:78:5f:d4:56:c7:2e:7e:63:b8: f4:95:37:19:fa:fe:e8:e0:e4:36:60:1b:c5:f6:57: e0:d3:9a:16:16:b8:cb:c0:95:74:41:f5:70:b1:98: 11:b9:c0:19:28:f0:e5:78:0a:a0:bf:78:03:fc:80: 74:21:2b:64:1e:f8:86:92:54:e3:77:91:a2:89:28: 19:3b:d2:db:d6:1a:f2:9d:a8:e6:a5:37:dc:3e:f2: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:1A:05:73:82:56:B7:D1:B7:32:26:B7:41:96:E5:DA:BE:DA:0D X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:4b:39:24:60:7a:c6:ba:f1:c9:b9:9d:d4:ed:8f:32:59: 19:c6:95:b4:e0:26:01:c4:eb:d5:fc:38:03:d0:37:59:98:e7: eb:1c:86:12:9b:8a:f1:9c:52:f2:9d:aa:13:27:1c:0a:f5:ac: 91:98:0c:bf:4b:cb:f5:95:54:9f:f0:27:5a:2e:78:1b:74:08: 10:64:63:0f:99:04:25:84:d5:c2:5e:b7:02:97:5f:d3:ca:fa: 27:f9:fd:3f:ec:63:87:9d:e5:92:81:34:08:1b:43:f2:4c:58: 5e:8c:12:c8:46:16:19:a7:65:cb:f8:36:32:84:d5:d9:64:3b: 75:db:e7:dd:a9:a8:54:01:e4:1d:bb:7d:a7:fd:7c:14:b7:4b: a8:3e:35:fb:69:67:60:d4:6b:3a:45:ac:5a:a8:d3:4a:c7:75: 24:d5:4e:8a:3d:06:ae:d3:fb:3c:9a:26:a4:68:7b:03:cc:68: 63:6b:df:46:f7:2b:59:02:fa:b5:7d:ce:ad:e4:ed:74:bd:14: c6:96:4b:4d:4a:61:08:d2:6b:6f:87:b2:6d:fc:78:6a:58:b9: 95:47:cf:86:a0:cc:01:46:f6:10:a5:32:c5:4c:01:d0:cf:12: d4:01:ea:61:c8:91:7f:ac:35:cb:0a:5d:83:aa:dc:b7:b1:a1: 22:93:d8:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjQwNTMxMDM0ODE0WhcNMjQwNjA3MDM0ODE0WjAYMRYwFAYD VQQDEw02NjU5NDg3ZS1mZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthhFydwCYAl1s/n3rGgY74LYRq9z8P7HWuC6kEWulmiI+9NLHnnZ+Y8b7Gbw tjRaPDH+PhX1Jw8p5eRvBWZ/G3ulTm3PCxnDqjCZ5ZDxY7nWk1ORm1OsHYDUhu3C u7QMzU5cXdsw9gxgLwxavelkmsDVd5ZsAUeyn3HUg0lSGmn7JHvvDjUTYxayDEBJ N8IqxJN0JATs9IduUB0JTIZZ74QOlz5ZQ2MaIyR4X9RWxy5+Y7j0lTcZ+v7o4OQ2 YBvF9lfg05oWFrjLwJV0QfVwsZgRucAZKPDleAqgv3gD/IB0IStkHviGklTjd5Gi iSgZO9Lb1hrynajmpTfcPvJdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxlGgVz gla30bcyJrdBluXavtoNMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjkUs5JGB6xrrxybmd1O2PMlkZxpW04CYBxOvV/DgD0DdZmOfrHIYS m4rxnFLynaoTJxwK9ayRmAy/S8v1lVSf8CdaLngbdAgQZGMPmQQlhNXCXrcCl1/T yvon+f0/7GOHneWSgTQIG0PyTFhejBLIRhYZp2XL+DYyhNXZZDt12+fdqahUAeQd u32n/XwUt0uoPjX7aWdg1Gs6RaxaqNNKx3Uk1U6KPQau0/s8miakaHsDzGhja99G 9ytZAvq1fc6t5O10vRTGlktNSmEI0mtvh7Jt/HhqWLmVR8+GoMwBRvYQpTLFTAHQ zxLUAephyJF/rDXLCl2Dqty3saEik9jX -----END CERTIFICATE-----Generated at Fri May 31 04:54:05 2024 by rpki-client on console-fra.rpki-client.org