$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft (raw, json) Hash identifier: q4UFfKWb7RF8FKwqGL+A5hDBPh6ZokWQPWwg4EWiRwc= Subject key identifier: 0D:D6:5E:81:FF:65:9C:3A:91:40:85:F7:C5:2B:F9:21:56:B4:EB:8E Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft Manifest number: 7C Signing time: Wed 15 May 2024 07:38:35 +0000 Manifest this update: Wed 15 May 2024 07:38:34 +0000 Manifest next update: Wed 22 May 2024 07:38:34 +0000 Files and hashes: 1: QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl (hash: 4YHIZhpDYUAX9f/o1VmPEQU3b4xfjiN6oz3puVIQA78=) 2: B184AEA47E7111EEB869AD1AC4F9AE02.roa (hash: LmJGmq2Ayop0EkwRwHAPkTavbUyr6FvfHRyacUH4ESs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Validity Not Before: May 15 07:38:34 2024 GMT Not After : May 22 07:38:34 2024 GMT Subject: CN=6644667b-3582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:ba:60:98:1d:56:e2:97:7f:c2:56:c5:7f: 83:e3:d4:99:f5:fe:18:cc:db:90:fc:bf:69:39:03: e2:7e:d8:53:9a:61:cb:d1:1a:85:d8:4d:8e:41:c6: 82:47:5f:7d:35:e2:91:a5:42:f7:86:21:5a:2f:c9: 59:b4:d9:6d:2d:13:7e:fa:38:05:4e:96:11:fc:d3: 3e:3e:71:86:2f:bc:14:d5:a6:8b:77:8d:bc:a0:dd: f5:71:a3:c9:51:3d:96:fb:6d:5f:cd:f6:26:3d:b8: 7a:96:e0:b6:4d:7f:1b:b9:41:4e:b0:b9:c6:01:85: a0:53:2b:f4:1b:ef:ae:e1:7f:bd:5f:97:52:22:b3: bf:07:aa:5d:96:53:9b:48:60:2e:84:2b:f4:29:2f: 1b:7b:8b:e8:7f:db:59:b3:93:c4:71:5d:49:f9:d6: 56:58:aa:8d:5e:25:c4:aa:43:48:68:91:2f:01:19: c1:20:81:33:67:ed:3a:48:e6:1c:e6:32:ed:8c:a7: 51:7c:34:d4:9b:cd:d1:7a:dc:df:06:6e:12:11:7c: 7e:1c:9b:2b:a2:57:42:e7:be:68:50:90:d1:37:2c: 1a:c9:ea:8b:93:57:24:89:ac:e5:fc:ba:e6:3e:17: 36:87:fc:ce:b4:e0:03:90:8a:80:c8:65:00:98:cd: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D6:5E:81:FF:65:9C:3A:91:40:85:F7:C5:2B:F9:21:56:B4:EB:8E X509v3 Authority Key Identifier: keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:91:49:51:23:da:26:5c:d3:a6:41:73:04:76:55:d8:bc:29: 4e:08:38:e2:7b:2c:8f:1e:c2:50:5f:99:7f:74:51:f7:24:d4: 0e:ac:1a:a8:9f:75:0d:0d:e5:86:4e:67:77:0e:6b:33:38:11: 7a:36:81:50:00:63:3a:de:88:30:0d:9f:66:bf:b9:e2:46:97: f9:22:b6:dc:84:af:a9:c1:ae:f9:21:63:7b:66:77:aa:7c:f9: 9c:69:d5:53:58:2a:64:62:a0:3f:55:50:e7:f5:9a:91:0c:7a: 99:ae:35:bb:ab:cd:a8:34:8d:c3:c0:68:b6:e6:5b:62:b7:d0: 20:50:fa:56:29:27:42:36:a6:d3:82:4e:d9:21:20:f0:de:d6: 72:8c:67:f4:d1:40:3e:83:b7:c4:7d:14:75:a3:a6:c7:dc:a5: a8:e6:75:13:11:14:82:49:42:0c:f3:98:33:69:b9:d4:58:d6: 40:02:01:19:1a:3d:76:12:c7:95:0e:6b:df:e8:74:25:58:27: bf:eb:21:5b:15:87:f2:19:2c:57:42:c2:c3:87:32:ec:86:70: 3a:b4:70:0d:a9:67:84:6b:1c:44:28:16:c6:e3:bd:a0:0e:1a: 8f:3d:4c:40:16:05:f4:97:1d:e9:02:3b:c4:e7:55:d3:44:14: cf:7c:8d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5 NURBQjM0RTEwHhcNMjQwNTE1MDczODM0WhcNMjQwNTIyMDczODM0WjAYMRYwFAYD VQQDEw02NjQ0NjY3Yi0zNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B26YJgdVuKXf8JWxX+D49SZ9f4YzNuQ/L9pOQPifthTmmHL0RqF2E2OQcaC R199NeKRpUL3hiFaL8lZtNltLRN++jgFTpYR/NM+PnGGL7wU1aaLd428oN31caPJ UT2W+21fzfYmPbh6luC2TX8buUFOsLnGAYWgUyv0G++u4X+9X5dSIrO/B6pdllOb SGAuhCv0KS8be4vof9tZs5PEcV1J+dZWWKqNXiXEqkNIaJEvARnBIIEzZ+06SOYc 5jLtjKdRfDTUm83RetzfBm4SEXx+HJsroldC575oUJDRNywayeqLk1ckiazl/Lrm Phc2h/zOtOADkIqAyGUAmM3XUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3WXoH/ ZZw6kUCF98Ur+SFWtOuOMB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUIxNy81OTY2REQyNjcyQTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9I MS13UXRwOGw2ZTZWMnJOT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCokUlRI9omXNOmQXMEdlXYvClOCDjieyyPHsJQX5l/dFH3JNQOrBqo n3UNDeWGTmd3DmszOBF6NoFQAGM63ogwDZ9mv7niRpf5IrbchK+pwa75IWN7Zneq fPmcadVTWCpkYqA/VVDn9ZqRDHqZrjW7q82oNI3DwGi25ltit9AgUPpWKSdCNqbT gk7ZISDw3tZyjGf00UA+g7fEfRR1o6bH3KWo5nUTERSCSUIM85gzabnUWNZAAgEZ Gj12EseVDmvf6HQlWCe/6yFbFYfyGSxXQsLDhzLshnA6tHANqWeEaxxEKBbG472g DhqPPUxAFgX0lx3pAjvE51XTRBTPfI1b -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org