$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: rntryATULVHsfMZAGgVv/+EApuV6rYEOcEcG4VE4+Xk= Subject key identifier: FE:15:DB:D1:C5:1D:F8:F3:D7:AB:17:9F:27:5D:24:76:F3:3C:58:CC Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 33D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 33CB Signing time: Sat 18 May 2024 14:39:36 +0000 Manifest this update: Sat 18 May 2024 14:39:35 +0000 Manifest next update: Sat 25 May 2024 14:39:35 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: 9DqzPuWhtduISdo1/dprEKHp3ibsto2tbpv+aJzCcRo=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: 9kdDUw6oW9iI/NZ2MZPl9Rem/p107M/MyYGUBqh5GNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13265 (0x33d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: May 18 14:39:35 2024 GMT Not After : May 25 14:39:35 2024 GMT Subject: CN=6648bda8-ba1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:5a:15:3a:65:f0:e9:0c:7e:27:b8:5e:4e: 07:05:1c:01:11:a5:3d:52:ec:01:2e:2e:7e:71:08: 16:0d:14:f5:71:bc:43:5e:35:c6:51:ce:0a:4a:81: e4:30:58:07:e0:e7:86:0c:d6:6f:4b:6f:06:c2:8b: a1:a3:31:e7:e6:c6:3b:6c:1e:ce:11:fa:76:b7:cf: c5:a8:07:4d:0c:0b:fd:23:55:53:a3:63:94:29:0f: 9a:7e:bb:7b:df:f8:25:41:78:f0:92:59:04:5a:14: 3a:93:4a:30:a0:0d:9b:38:d5:e1:3e:ba:d6:a1:23: 49:42:d7:b7:51:69:9d:c1:d5:20:59:93:f4:5b:5b: 0b:f6:ad:2d:ce:a3:d2:54:e5:fc:3e:58:7a:c6:bc: 25:42:3b:4d:c9:0c:2c:22:8e:ec:20:7a:7c:d8:7b: eb:a5:d2:70:fc:54:2d:0d:9b:57:2b:47:db:7a:e1: fe:18:2d:d6:cb:12:c9:d9:60:c4:f2:10:67:3b:89: 7d:39:c5:62:44:d7:af:ec:60:86:c7:70:7b:e4:53: 8d:a3:43:4d:86:b5:ee:21:7d:56:08:ff:6c:97:04: 6c:a2:aa:c5:d0:b7:aa:f1:b2:0b:6a:21:d1:89:79: da:bd:f6:5f:50:8a:93:77:c7:c6:7b:0e:65:26:56: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:15:DB:D1:C5:1D:F8:F3:D7:AB:17:9F:27:5D:24:76:F3:3C:58:CC X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e4:79:05:da:03:4d:83:8f:02:db:fd:fc:fa:2e:b5:0c:2a: 69:e2:7d:5b:fa:eb:5a:b9:cb:a8:0c:32:cd:bc:15:3e:14:a2: ef:04:c5:68:69:24:67:c8:ed:8e:7a:ab:42:aa:bc:f4:2b:eb: c1:17:1c:82:e3:26:e2:dc:27:dd:1b:0f:a6:30:e5:59:d7:08: bb:91:ba:52:ec:44:e0:9c:69:bc:2d:2d:e6:b9:7a:00:e9:ab: 4b:fa:5f:7e:51:76:cc:33:ae:95:51:a8:94:4f:29:7f:f9:1c: bb:4d:db:87:ff:ac:37:70:0a:47:4e:f2:2b:6e:b8:ef:8c:2a: 5d:9a:ad:3c:23:1a:72:f5:68:55:4f:66:13:6d:d9:2a:e5:2f: b1:ce:b8:cc:01:44:14:ca:63:3c:44:39:a0:52:c3:f4:7e:30: 80:d6:d1:ed:c0:6f:f1:30:76:24:1d:ff:7f:62:8d:f5:ff:dc: 15:12:45:5a:37:0b:dc:ad:e7:19:a2:a9:ac:05:8e:3a:a1:ab: 86:43:5e:e8:07:fb:61:87:37:97:66:f3:fc:8d:61:8d:79:30: 13:5a:c3:0a:7d:6d:de:7c:ed:a9:a8:09:8d:8a:b9:e9:27:9d: f6:65:99:16:6f:16:08:a4:4b:b4:23:40:df:e7:65:14:e0:78: 9e:f9:17:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjQwNTE4MTQzOTM1WhcNMjQwNTI1MTQzOTM1WjAYMRYwFAYD VQQDEw02NjQ4YmRhOC1iYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7laFTpl8OkMfie4Xk4HBRwBEaU9UuwBLi5+cQgWDRT1cbxDXjXGUc4KSoHk MFgH4OeGDNZvS28GwouhozHn5sY7bB7OEfp2t8/FqAdNDAv9I1VTo2OUKQ+afrt7 3/glQXjwklkEWhQ6k0owoA2bONXhPrrWoSNJQte3UWmdwdUgWZP0W1sL9q0tzqPS VOX8Plh6xrwlQjtNyQwsIo7sIHp82HvrpdJw/FQtDZtXK0fbeuH+GC3WyxLJ2WDE 8hBnO4l9OcViRNev7GCGx3B75FONo0NNhrXuIX1WCP9slwRsoqrF0Leq8bILaiHR iXnavfZfUIqTd8fGew5lJlYtFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4V29HF Hfjz16sXnyddJHbzPFjMMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB5HkF2gNNg48C2/38+i61DCpp4n1b+utaucuoDDLNvBU+FKLvBMVo aSRnyO2OeqtCqrz0K+vBFxyC4ybi3CfdGw+mMOVZ1wi7kbpS7ETgnGm8LS3muXoA 6atL+l9+UXbMM66VUaiUTyl/+Ry7TduH/6w3cApHTvIrbrjvjCpdmq08Ixpy9WhV T2YTbdkq5S+xzrjMAUQUymM8RDmgUsP0fjCA1tHtwG/xMHYkHf9/Yo31/9wVEkVa NwvcrecZoqmsBY46oauGQ17oB/thhzeXZvP8jWGNeTATWsMKfW3efO2pqAmNirnp J532ZZkWbxYIpEu0I0Df52UU4Hie+RdA -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org