$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json) Hash identifier: vxy7Ui+EG9gXUE40/L9A+pazRxMS39vJlH+k6nc86TQ= Subject key identifier: 59:7A:E1:64:D1:06:F5:23:84:D4:23:DA:C1:71:B0:61:19:79:E1:09 Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft Manifest number: 07C0 Signing time: Thu 02 May 2024 22:10:41 +0000 Manifest this update: Thu 02 May 2024 22:10:40 +0000 Manifest next update: Thu 09 May 2024 22:10:40 +0000 Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: +m1Lyvp+nXzsL4bFDL5kt/EsgnhXusX5QJHtb7KeEe8=) 2: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: MNcUqPXfQ3T7UPwRoUK7X0hW547D3dFI8SMQm2Rhlgo=) 3: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: wFdzUcR7oncBOhkt6Qq97Sk0B7MxmE0B0n56PLJLLfc=) 4: 494F0F74BF3811EAB33B6573C4F9AE02.roa (hash: bdyhr7k6j6ZAEpApgLHe3B2KBn0lOaNL6xUfkxRaEsA=) 5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: qcQxgCc6f6DKvBXXPV7Z6QbMISYQ+I0+B+jlVDj3umU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Validity Not Before: May 2 22:10:40 2024 GMT Not After : May 9 22:10:40 2024 GMT Subject: CN=66340f60-7ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:2f:46:ea:7c:3b:ec:eb:81:a2:cc:9c:27: 01:f8:fd:00:f8:68:0e:d0:c6:2f:0d:fc:34:bb:2e: cd:6a:24:e8:23:6a:cb:f4:f6:e6:e4:eb:12:ae:42: ff:1d:c6:5a:cd:69:b2:3f:a3:38:36:e0:a7:11:20: d6:69:58:bd:b5:17:fe:2b:f4:85:62:19:ef:3e:a4: 9e:23:fd:4c:b4:5b:17:18:b6:b3:50:81:40:e9:48: e3:70:b3:8c:4b:f7:37:a9:d0:5f:01:8a:8a:cf:ee: 15:f1:95:27:41:12:db:d6:f4:f9:38:d2:83:80:21: a8:71:70:ac:b7:36:cf:46:4e:f9:34:08:ab:f6:30: 73:08:11:cf:29:1a:16:91:e4:e7:27:e1:6c:71:a4: 77:a6:41:81:57:1e:72:02:19:86:7b:3a:d4:01:81: 84:5b:15:c3:2b:cd:0e:28:49:e2:d6:df:9f:b3:58: 70:fb:a0:90:c4:3f:84:b0:d4:dd:65:c2:88:59:e4: 06:ea:48:a7:48:5b:29:4a:f3:7e:e6:06:57:4a:60: a3:68:e2:18:61:27:68:20:aa:64:91:6a:63:db:b4: 72:ba:38:af:a2:bf:d4:91:76:96:4f:26:0f:0f:0f: 74:5e:47:ff:bc:f6:dd:19:4c:7d:82:97:37:ee:3b: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7A:E1:64:D1:06:F5:23:84:D4:23:DA:C1:71:B0:61:19:79:E1:09 X509v3 Authority Key Identifier: keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fd:e1:91:98:24:23:c6:9f:07:7e:be:3b:80:54:22:22:9a: af:53:a2:7c:66:d5:d3:97:fb:bf:27:66:58:29:c9:47:01:03: 30:86:95:4c:eb:77:1f:ae:12:dd:4c:d8:9d:2e:4e:fb:73:cd: 3b:df:0e:4f:15:d3:28:08:33:d4:39:da:1b:0b:41:3c:a9:b3: 95:84:1a:2a:14:d9:03:32:a6:79:6e:93:71:da:67:bd:a1:f6: 9d:f7:a9:4b:aa:d5:87:f4:a8:b5:09:0a:8d:01:df:c4:21:08: 6f:4c:39:2f:77:c3:74:28:b4:25:be:7d:1a:b7:bb:12:7e:34: 3b:30:03:9d:3f:11:40:48:01:d7:aa:c1:12:11:35:4d:ee:13: e8:2c:8b:c4:74:3f:54:3a:de:ef:11:5a:f2:10:99:ac:2c:ac: 33:d0:dd:9d:2f:3d:60:47:35:45:d8:d2:00:76:48:ff:1e:4f: 3e:52:b6:77:9b:15:ba:f8:6e:20:d3:89:79:ec:d5:08:55:ed: fb:76:51:0b:9e:7d:87:e9:a2:3d:8e:5b:30:09:1b:8a:70:1f: a8:73:38:2e:83:10:a8:33:2c:cc:68:50:9a:96:8f:c6:af:55: ea:29:58:dd:78:08:11:3e:66:3c:21:7b:ec:5d:a3:f5:c5:bd: 73:57:82:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1 NTQyMkIxOEUwHhcNMjQwNTAyMjIxMDQwWhcNMjQwNTA5MjIxMDQwWjAYMRYwFAYD VQQDEw02NjM0MGY2MC03Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdsvRup8O+zrgaLMnCcB+P0A+GgO0MYvDfw0uy7NaiToI2rL9Pbm5OsSrkL/ HcZazWmyP6M4NuCnESDWaVi9tRf+K/SFYhnvPqSeI/1MtFsXGLazUIFA6UjjcLOM S/c3qdBfAYqKz+4V8ZUnQRLb1vT5ONKDgCGocXCstzbPRk75NAir9jBzCBHPKRoW keTnJ+FscaR3pkGBVx5yAhmGezrUAYGEWxXDK80OKEni1t+fs1hw+6CQxD+EsNTd ZcKIWeQG6kinSFspSvN+5gZXSmCjaOIYYSdoIKpkkWpj27Ryujivor/UkXaWTyYP Dw90Xkf/vPbdGUx9gpc37juq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl64WTR BvUjhNQj2sFxsGEZeeEJMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F OFdnYWlTeEhNaUZWUWlzWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/eGRmCQjxp8Hfr47gFQiIpqvU6J8ZtXTl/u/J2ZYKclHAQMwhpVM 63cfrhLdTNidLk77c8073w5PFdMoCDPUOdobC0E8qbOVhBoqFNkDMqZ5bpNx2me9 ofad96lLqtWH9Ki1CQqNAd/EIQhvTDkvd8N0KLQlvn0at7sSfjQ7MAOdPxFASAHX qsESETVN7hPoLIvEdD9UOt7vEVryEJmsLKwz0N2dLz1gRzVF2NIAdkj/Hk8+UrZ3 mxW6+G4g04l57NUIVe37dlELnn2H6aI9jlswCRuKcB+oczgugxCoMyzMaFCalo/G r1XqKVjdeAgRPmY8IXvsXaP1xb1zV4J5 -----END CERTIFICATE-----Generated at Thu May 2 23:03:09 2024 by rpki-client on console-fra.rpki-client.org