$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: twWD4Me/hjoqFABm3jcKs525fpqEVUak/yjLPcUsBqE= Subject key identifier: 5D:99:49:F5:D9:49:2C:F2:73:F0:C1:7D:EA:55:A2:DC:58:A7:89:AF Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: C7 Signing time: Fri 03 May 2024 06:26:57 +0000 Manifest this update: Fri 03 May 2024 06:26:57 +0000 Manifest next update: Fri 10 May 2024 06:26:57 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: hL8W4ALG5q0S97uKH1EiP5my+3k5dZVegaHNiFG8WTg=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: BX3eFxEq9yeeBZjSPRYwxqXIGZjkAuVHkNY/0eO84s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: May 3 06:26:57 2024 GMT Not After : May 10 06:26:57 2024 GMT Subject: CN=663483b1-c5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:14:e4:26:2e:ff:ca:9e:cc:a8:17:cd:89: c6:05:31:1f:c0:09:4f:fe:b0:34:76:2d:f2:ac:52: 89:60:bc:9c:35:ec:ab:87:79:48:f4:c2:8f:55:0c: 4b:46:5b:b1:23:2e:cc:a2:d9:d7:bb:b3:34:12:e4: 44:98:19:1a:c9:4b:90:e2:13:ea:ff:eb:e9:36:81: b8:10:fe:c5:d5:32:24:de:81:75:a8:22:a5:0a:51: 48:8c:e0:be:93:e6:f0:8a:1c:9a:09:16:97:2f:98: 24:c4:0b:56:a7:98:8d:12:50:0f:04:4e:d5:4e:53: 39:75:b6:9b:58:70:4d:d7:89:45:33:3b:f3:d4:48: d9:e6:a6:19:7b:7d:57:09:5f:3f:7d:85:a2:bc:14: 2e:7b:05:75:a5:b2:6d:8d:c5:df:48:f0:42:a9:26: 78:e3:ec:8a:15:e3:a2:7a:ac:a7:a1:15:59:86:27: 7b:b4:cf:0a:ef:90:51:3b:1a:d0:bb:2c:2f:ac:cf: 58:dd:61:a7:82:3c:83:15:31:6b:b6:ee:37:37:08: fa:07:33:04:a3:86:e5:be:53:b9:38:3d:23:1b:d6: d4:b0:ff:83:f0:eb:bb:5e:95:c2:ac:59:ad:43:9f: ba:7e:14:a8:91:e5:7b:7c:56:53:5a:b5:2a:b3:31: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:99:49:F5:D9:49:2C:F2:73:F0:C1:7D:EA:55:A2:DC:58:A7:89:AF X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:11:a2:9c:a3:5b:e1:f4:29:70:fb:1b:28:a6:c3:9f:ad:53: ac:9b:39:c1:cd:9b:1c:95:4d:b2:13:14:f5:c2:b3:d1:01:11: e7:90:ea:2e:be:f3:27:35:e5:c1:5a:f7:1f:f3:d4:ba:86:af: ec:55:57:4c:79:f5:50:0d:73:56:af:46:9f:f9:7e:8d:6c:fb: 8c:48:80:c0:e3:03:bf:6c:0c:6e:e9:a7:56:52:bd:93:fb:15: 3d:3b:eb:80:59:e1:56:d0:f6:95:9f:2f:77:a8:ba:14:bf:e8: 89:21:24:c6:17:64:9b:9b:c6:3a:b6:ba:e3:cf:1a:6c:51:8d: e5:4c:7e:79:a3:89:64:c6:39:33:59:37:03:6b:ed:4a:6d:cb: 5d:b2:95:96:c5:bb:16:5b:a8:72:96:9f:6c:3c:36:50:97:e8: 02:3a:30:0e:01:98:33:e5:44:51:c3:34:94:d1:21:1b:d7:55: e2:9e:50:8c:91:df:8f:d4:f6:2e:54:25:4b:cb:ce:a2:ad:d2: 97:d4:a9:5c:41:31:b6:d9:b1:6c:e0:96:08:b9:ec:4d:4a:43: 51:06:30:28:2a:72:23:d0:10:d2:09:da:5f:98:d6:1c:a3:0c: 6e:24:2b:68:6b:34:70:79:1a:5e:8c:4e:3d:0f:76:bb:27:73: f8:4d:d9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjQwNTAzMDYyNjU3WhcNMjQwNTEwMDYyNjU3WjAYMRYwFAYD VQQDEw02NjM0ODNiMS1jNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAUU5CYu/8qezKgXzYnGBTEfwAlP/rA0di3yrFKJYLycNeyrh3lI9MKPVQxL RluxIy7MotnXu7M0EuREmBkayUuQ4hPq/+vpNoG4EP7F1TIk3oF1qCKlClFIjOC+ k+bwihyaCRaXL5gkxAtWp5iNElAPBE7VTlM5dbabWHBN14lFMzvz1EjZ5qYZe31X CV8/fYWivBQuewV1pbJtjcXfSPBCqSZ44+yKFeOieqynoRVZhid7tM8K75BROxrQ uywvrM9Y3WGngjyDFTFrtu43Nwj6BzMEo4blvlO5OD0jG9bUsP+D8Ou7XpXCrFmt Q5+6fhSokeV7fFZTWrUqszFIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2ZSfXZ SSzyc/DBfepVotxYp4mvMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOEaKco1vh9Clw+xsopsOfrVOsmznBzZsclU2yExT1wrPRARHnkOou vvMnNeXBWvcf89S6hq/sVVdMefVQDXNWr0af+X6NbPuMSIDA4wO/bAxu6adWUr2T +xU9O+uAWeFW0PaVny93qLoUv+iJISTGF2Sbm8Y6trrjzxpsUY3lTH55o4lkxjkz WTcDa+1KbctdspWWxbsWW6hylp9sPDZQl+gCOjAOAZgz5URRwzSU0SEb11XinlCM kd+P1PYuVCVLy86irdKX1KlcQTG22bFs4JYIuexNSkNRBjAoKnIj0BDSCdpfmNYc owxuJCtoazRweRpejE49D3a7J3P4Tdlt -----END CERTIFICATE-----Generated at Fri May 3 09:08:45 2024 by rpki-client on console-fra.rpki-client.org