$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: u2n4hOBa/BYIeDy4GHMypvL4xSpB/jv7nfZkzTqRCPI= Subject key identifier: 03:F2:D0:82:61:CA:14:FD:34:C6:75:B2:50:EC:B0:CA:A4:80:14:9A Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 072D Signing time: Thu 02 May 2024 22:36:59 +0000 Manifest this update: Thu 02 May 2024 22:36:59 +0000 Manifest next update: Thu 09 May 2024 22:36:59 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: hUrasehBtv0VJWc9RdaltebFe5p4v/MrYgA+0cpZZso=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: WP0Cxklh3HNdj+FSDjyYK8dBUxC8tFYElxiXLoTsDfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: May 2 22:36:59 2024 GMT Not After : May 9 22:36:59 2024 GMT Subject: CN=6634158b-aab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:77:33:1d:64:ea:76:ef:35:f7:16:60:0c: 9a:5b:17:26:ad:85:68:fb:dd:3d:9b:ee:fa:c3:02: 81:68:65:7f:62:d8:d6:39:f8:8c:4f:87:65:5f:8b: 70:65:e1:7d:da:2a:58:19:24:03:03:23:e9:35:a4: c6:a0:4f:ce:8d:d9:89:4f:de:d9:4c:35:dd:be:6b: 42:ff:bf:e3:d3:22:a7:2e:90:80:41:bb:8e:86:16: 30:5b:5e:e2:2f:48:d4:72:b2:ab:0d:e3:cf:5d:73: 27:e8:56:5d:4e:b3:1d:1a:fd:db:50:aa:a7:e0:27: f2:c9:8f:56:fd:f6:2f:33:14:67:bd:f6:40:15:30: 05:01:34:28:43:ea:f1:24:8f:e0:00:d1:a0:07:d8: 01:2b:d7:e6:ca:13:ce:9c:34:e2:fd:bd:63:3c:b1: 98:17:25:04:0d:bf:f4:53:c3:22:ef:f4:4c:92:36: 91:80:26:88:d2:ca:4f:85:c7:dc:da:09:ba:49:01: ea:46:dd:6a:ec:6e:92:ef:81:81:20:5c:17:18:92: b9:fb:ee:c4:5c:c1:0c:80:5c:6a:e1:1b:c1:27:6b: f7:1f:b1:15:30:94:c5:80:ca:ff:51:0c:80:b5:26: 2b:5e:5c:53:a7:59:bc:d0:d3:da:52:27:8d:df:b0: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F2:D0:82:61:CA:14:FD:34:C6:75:B2:50:EC:B0:CA:A4:80:14:9A X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3f:ec:19:01:75:1b:3e:05:60:cb:be:5c:df:f1:e3:e6:23: bb:21:d7:f0:d6:3b:fb:9c:23:93:52:2b:4d:8b:35:6c:ad:b0: 5e:84:75:c0:b2:49:5e:2f:af:6c:d6:41:6b:2c:cf:20:a0:b3: 8d:1e:19:ea:6d:16:83:57:65:1a:c4:c8:50:56:01:94:2a:71: 33:e0:64:57:46:e1:ed:f2:ea:3d:e2:80:e1:d3:77:10:d1:4a: e9:b4:7b:fc:26:51:b4:a2:8b:41:79:61:5f:f5:8b:42:a7:f7: 81:8a:b6:4c:b4:fd:2d:95:26:a1:53:2f:ec:de:52:98:50:77: cc:63:2c:8a:90:81:74:b2:9a:f7:97:e9:1e:80:f7:1c:32:bb: 22:cc:cc:92:b4:1d:6b:20:19:c5:01:71:2f:96:2d:db:d1:02: 1e:cb:be:42:ce:7c:6c:94:63:7a:d3:99:5c:51:88:c2:cc:ec: ba:45:e0:5f:10:54:38:ad:64:bf:00:d3:fb:d3:02:9d:87:e6: 9b:35:f3:36:6e:cc:6d:1e:c8:93:b9:47:72:bd:fb:17:7b:b0: d2:87:e9:8a:fa:a8:6e:e5:c6:6e:49:f5:4c:4e:ef:cc:00:ec: 6c:2e:16:5d:ac:4b:55:36:5e:8c:d1:f4:6a:f9:23:88:b6:dc: 66:dd:a2:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjQwNTAyMjIzNjU5WhcNMjQwNTA5MjIzNjU5WjAYMRYwFAYD VQQDEw02NjM0MTU4Yi1hYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ53Mx1k6nbvNfcWYAyaWxcmrYVo+909m+76wwKBaGV/YtjWOfiMT4dlX4tw ZeF92ipYGSQDAyPpNaTGoE/OjdmJT97ZTDXdvmtC/7/j0yKnLpCAQbuOhhYwW17i L0jUcrKrDePPXXMn6FZdTrMdGv3bUKqn4CfyyY9W/fYvMxRnvfZAFTAFATQoQ+rx JI/gANGgB9gBK9fmyhPOnDTi/b1jPLGYFyUEDb/0U8Mi7/RMkjaRgCaI0spPhcfc 2gm6SQHqRt1q7G6S74GBIFwXGJK5++7EXMEMgFxq4RvBJ2v3H7EVMJTFgMr/UQyA tSYrXlxTp1m80NPaUieN37Dt4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPy0IJh yhT9NMZ1slDssMqkgBSaMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABP+wZAXUbPgVgy75c3/Hj5iO7Idfw1jv7nCOTUitNizVsrbBehHXA skleL69s1kFrLM8goLONHhnqbRaDV2UaxMhQVgGUKnEz4GRXRuHt8uo94oDh03cQ 0UrptHv8JlG0ootBeWFf9YtCp/eBirZMtP0tlSahUy/s3lKYUHfMYyyKkIF0spr3 l+kegPccMrsizMyStB1rIBnFAXEvli3b0QIey75CznxslGN605lcUYjCzOy6ReBf EFQ4rWS/ANP70wKdh+abNfM2bsxtHsiTuUdyvfsXe7DSh+mK+qhu5cZuSfVMTu/M AOxsLhZdrEtVNl6M0fRq+SOIttxm3aLg -----END CERTIFICATE-----Generated at Thu May 2 23:19:00 2024 by rpki-client on console-ams.rpki-client.org