$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: 58JwsZT6ujt4T4g7NFclH/qsMBMtFeVXhLTBA12V0Vo= Subject key identifier: 32:67:5B:05:C4:E5:80:C6:4E:F5:30:9C:02:EC:1A:89:CE:CE:8B:4D Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0AF2 Signing time: Sat 04 May 2024 20:11:56 +0000 Manifest this update: Sat 04 May 2024 20:11:55 +0000 Manifest next update: Sat 11 May 2024 20:11:55 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: 7+dmwOzoePJfEG7w2c0OIH4yB5bzK0wZTISFEyWdpNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: May 4 20:11:55 2024 GMT Not After : May 11 20:11:55 2024 GMT Subject: CN=6636968b-1210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:9f:80:24:9a:a1:07:e9:a4:40:48:89:16: 95:eb:5e:64:13:c5:7e:e9:f4:71:95:33:e3:cc:c3: 4f:1a:60:63:7c:05:4a:6c:c7:0a:a2:49:87:26:f8: 47:35:a9:87:c2:b6:0a:ed:52:dc:2b:98:1d:d2:b7: 83:73:e9:ed:22:66:84:d3:e6:b7:41:22:3e:0d:22: c1:a1:04:52:00:c6:48:83:6c:7f:bf:64:1b:b1:5f: 34:df:9d:87:94:e6:1e:fe:f2:52:64:12:94:14:e6: d2:44:29:e5:d8:c6:ef:b4:fb:1c:ae:17:f5:89:9f: 6b:e0:d6:f7:d0:65:a0:c3:af:59:a8:f4:ce:e2:01: 88:27:9f:6a:d1:7d:6e:76:8d:57:3a:34:46:26:a0: 7a:a0:f0:49:b1:37:37:85:32:8c:11:ad:83:f9:6b: 26:2e:e7:d0:55:95:a5:bc:6f:74:d6:fc:c6:79:c2: fc:32:42:68:6e:a7:6b:77:19:b2:20:bc:4d:2d:0f: 76:96:a4:f1:09:94:2b:52:8c:f4:69:fd:cf:c8:da: 3d:0f:a6:51:06:1b:f0:75:9d:8c:f6:26:7d:30:42: cb:b1:6a:61:21:81:80:bb:cb:6c:dc:d3:22:71:eb: d9:81:ba:5c:e9:64:2d:92:db:93:ba:d3:3f:c8:95: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:5B:05:C4:E5:80:C6:4E:F5:30:9C:02:EC:1A:89:CE:CE:8B:4D X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:e3:d9:4d:17:08:f4:20:be:15:71:e8:c4:59:19:56:0a: d0:1a:01:b5:6c:ea:59:25:ec:8f:31:56:76:24:4f:2d:87:da: 37:4b:2f:69:f2:1b:41:de:cd:25:6d:34:24:43:54:7d:cc:66: 3c:7f:c2:e9:2b:4d:b6:5a:e0:7c:93:69:6a:72:8e:78:4a:3f: 36:80:f8:bb:13:d0:7a:d3:21:01:60:bc:04:91:6b:8f:d3:2e: 8d:9f:d1:ad:90:3c:ae:dd:33:f7:02:eb:9c:f5:88:e2:6e:47: 97:6b:be:d8:fe:91:d6:6f:73:02:82:34:7e:2a:20:5b:21:2c: fd:81:c5:08:d8:e7:8f:98:52:fd:ee:a9:1e:a9:97:ab:d2:b5: 0d:91:de:64:35:4f:26:7f:c7:24:89:e0:14:f4:f8:d7:cf:cc: 07:d2:e6:c1:9b:00:87:04:97:a4:f1:6c:7a:48:aa:95:65:1d: 91:ef:93:bf:a5:73:35:81:e2:e7:7d:cc:7d:75:b1:b3:f2:ce: fa:30:74:99:e6:02:17:c1:d2:40:22:8b:7d:e7:17:19:77:44: 8f:64:8c:95:b5:87:78:8c:f4:ab:c3:73:dd:e1:6a:fe:70:cd: 4e:26:bd:80:06:f1:24:89:0e:04:8e:a6:34:57:9c:00:d2:9a: 80:1e:a0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjQwNTA0MjAxMTU1WhcNMjQwNTExMjAxMTU1WjAYMRYwFAYD VQQDEw02NjM2OTY4Yi0xMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyGfgCSaoQfppEBIiRaV615kE8V+6fRxlTPjzMNPGmBjfAVKbMcKokmHJvhH NamHwrYK7VLcK5gd0reDc+ntImaE0+a3QSI+DSLBoQRSAMZIg2x/v2QbsV80352H lOYe/vJSZBKUFObSRCnl2MbvtPscrhf1iZ9r4Nb30GWgw69ZqPTO4gGIJ59q0X1u do1XOjRGJqB6oPBJsTc3hTKMEa2D+WsmLufQVZWlvG901vzGecL8MkJobqdrdxmy ILxNLQ92lqTxCZQrUoz0af3PyNo9D6ZRBhvwdZ2M9iZ9MELLsWphIYGAu8ts3NMi cevZgbpc6WQtktuTutM/yJVWKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJnWwXE 5YDGTvUwnALsGonOzotNMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjYOPZTRcI9CC+FXHoxFkZVgrQGgG1bOpZJeyPMVZ2JE8th9o3Sy9p 8htB3s0lbTQkQ1R9zGY8f8LpK022WuB8k2lqco54Sj82gPi7E9B60yEBYLwEkWuP 0y6Nn9GtkDyu3TP3Auuc9YjibkeXa77Y/pHWb3MCgjR+KiBbISz9gcUI2OePmFL9 7qkeqZer0rUNkd5kNU8mf8ckieAU9PjXz8wH0ubBmwCHBJek8Wx6SKqVZR2R75O/ pXM1geLnfcx9dbGz8s76MHSZ5gIXwdJAIot95xcZd0SPZIyVtYd4jPSrw3Pd4Wr+ cM1OJr2ABvEkiQ4EjqY0V5wA0pqAHqAo -----END CERTIFICATE-----Generated at Sat May 4 21:32:57 2024 by rpki-client on console-fra.rpki-client.org