$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: H3LBTrwUzjO3bM5xTYg5cLV2nXq43oNL6jQ9x6Nx5nE= Subject key identifier: 91:CC:56:D0:4B:3D:1B:37:8B:48:08:FE:42:08:FB:B5:63:35:E8:B3 Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: D8 Signing time: Wed 01 May 2024 06:38:50 +0000 Manifest this update: Wed 01 May 2024 06:38:49 +0000 Manifest next update: Wed 08 May 2024 06:38:49 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: fDt79vFFDuoGogioPgee5KogktxT0jWy2PpP6/e4kDQ=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: 6j7w9+hGUOPNXXB5FjLRh9dRH3zCAl46bVFBtFbG7eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: May 1 06:38:49 2024 GMT Not After : May 8 06:38:49 2024 GMT Subject: CN=6631e379-2520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:5d:a4:d2:2d:72:f5:a0:dd:38:38:b8:97: c4:20:b5:d4:fb:b2:b0:ca:bf:8d:64:f8:d2:34:94: b6:81:1f:8e:20:33:df:ec:44:f0:52:99:a7:86:3f: 4a:35:3e:30:74:35:fd:f2:83:e7:42:3e:89:da:c0: 59:a3:4c:9e:05:b4:86:e6:31:53:ac:a4:58:98:ef: 1b:ed:65:51:43:c4:d8:61:4c:16:fd:e3:bc:62:5c: 68:22:90:b7:62:16:4b:6c:f2:bd:d5:ef:04:03:13: d4:9c:9b:bf:bd:e5:07:40:41:1f:9f:ab:9e:cd:5d: 57:b0:4b:33:34:58:f7:99:c2:c6:cb:49:00:f1:d4: eb:91:0d:00:5c:f7:52:f0:fe:f7:16:31:1e:7b:bb: ea:7b:54:00:cf:e6:80:e6:99:46:4c:be:d5:8a:7b: ba:4b:12:bc:e2:3f:2b:2f:fb:3d:ea:14:f9:55:04: 81:e3:b9:15:94:8b:33:3f:53:e4:4c:6b:de:41:6a: 10:7b:24:a6:15:06:cb:c6:d5:00:bc:66:b6:95:fc: c1:a8:84:62:35:47:cf:47:ad:61:98:3d:eb:cb:87: f4:1e:b0:2b:ce:f6:35:41:5f:87:1a:68:40:7f:6c: 78:17:78:68:98:1c:e3:1a:ce:a0:b8:8b:5d:52:e9: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:56:D0:4B:3D:1B:37:8B:48:08:FE:42:08:FB:B5:63:35:E8:B3 X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0b:15:93:c7:4d:31:47:95:4d:e9:c5:2c:2c:52:89:c2:33: 96:a9:c0:ca:c2:db:fd:94:f8:b5:02:28:e1:b2:51:60:de:dc: f9:4a:fb:ec:18:4e:14:28:6c:41:f7:32:64:21:76:c2:5b:f7: ad:e3:e8:52:cf:1a:a3:56:ca:33:31:08:e0:af:91:62:b7:ce: 71:4a:5c:fb:15:b1:6a:0e:e9:ee:99:31:c2:b0:fe:fa:93:04: f8:60:50:9e:e3:09:51:60:9d:fc:85:d5:19:f9:e8:e3:22:44: 61:1f:63:fe:65:19:22:04:85:46:ec:13:4c:f5:93:c1:70:9d: a1:31:51:21:0f:40:56:eb:73:95:7c:fe:ee:9b:34:94:f9:0b: a6:7c:a3:3d:2a:f3:8f:de:4b:50:85:3f:6f:26:31:5e:91:bd: af:b0:af:b2:0f:5f:6c:1f:d3:df:21:69:d7:6d:aa:c9:f9:26: b7:5c:19:53:0b:e1:38:67:b2:ff:2e:64:9b:f4:bf:33:09:5d: 54:c9:55:6b:78:53:c9:90:53:45:80:c5:5e:d9:c0:8a:27:2e: 5d:68:2f:7f:db:bd:d6:6d:2c:18:8f:7e:19:52:b0:90:20:eb: 43:60:29:66:dc:aa:14:85:46:1e:d6:27:0d:86:7f:ad:bc:20: 49:86:fe:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjQwNTAxMDYzODQ5WhcNMjQwNTA4MDYzODQ5WjAYMRYwFAYD VQQDEw02NjMxZTM3OS0yNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlRdpNItcvWg3Tg4uJfEILXU+7Kwyr+NZPjSNJS2gR+OIDPf7ETwUpmnhj9K NT4wdDX98oPnQj6J2sBZo0yeBbSG5jFTrKRYmO8b7WVRQ8TYYUwW/eO8YlxoIpC3 YhZLbPK91e8EAxPUnJu/veUHQEEfn6uezV1XsEszNFj3mcLGy0kA8dTrkQ0AXPdS 8P73FjEee7vqe1QAz+aA5plGTL7Vinu6SxK84j8rL/s96hT5VQSB47kVlIszP1Pk TGveQWoQeySmFQbLxtUAvGa2lfzBqIRiNUfPR61hmD3ry4f0HrArzvY1QV+HGmhA f2x4F3homBzjGs6guItdUunlOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHMVtBL PRs3i0gI/kII+7VjNeizMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2CxWTx00xR5VN6cUsLFKJwjOWqcDKwtv9lPi1AijhslFg3tz5Svvs GE4UKGxB9zJkIXbCW/et4+hSzxqjVsozMQjgr5Fit85xSlz7FbFqDunumTHCsP76 kwT4YFCe4wlRYJ38hdUZ+ejjIkRhH2P+ZRkiBIVG7BNM9ZPBcJ2hMVEhD0BW63OV fP7umzSU+QumfKM9KvOP3ktQhT9vJjFekb2vsK+yD19sH9PfIWnXbarJ+Sa3XBlT C+E4Z7L/LmSb9L8zCV1UyVVreFPJkFNFgMVe2cCKJy5daC9/273WbSwYj34ZUrCQ IOtDYClm3KoUhUYe1icNhn+tvCBJhv4p -----END CERTIFICATE-----Generated at Wed May 1 07:06:26 2024 by rpki-client on console-fra.rpki-client.org