$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: 8Rj0Md018VGyaa/u1l3A0C7FbSCuSxWHr6GyQVcC+lw= Subject key identifier: 77:AA:B0:7C:64:9F:E8:86:82:6B:BE:4E:C2:76:37:E7:02:1F:B7:A5 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 116E Signing time: Mon 06 May 2024 17:53:17 +0000 Manifest this update: Mon 06 May 2024 17:53:17 +0000 Manifest next update: Mon 13 May 2024 17:53:17 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: 5cQqA565EBjvb5+Tk1TQc/6HfXvM6E5R7W6IPEDhNiY=) 2: 68E5014A355C11EC96291331C4F9AE02.roa (hash: KxPY2GSftqdJFzgDeoNVtONYbEatx62Ixetc0d07l0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4480 (0x1180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: May 6 17:53:17 2024 GMT Not After : May 13 17:53:17 2024 GMT Subject: CN=6639190d-c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:59:cf:71:24:06:a2:23:b2:f3:1e:c9:eb: 51:0c:dc:2e:e8:99:09:a9:5f:91:a7:04:87:70:77: 42:ff:53:e7:6f:e0:26:57:93:db:4e:75:1d:87:2d: e0:86:fe:58:57:fc:c0:50:ce:08:7f:85:e8:3a:f2: 3b:dd:12:35:29:39:ff:38:12:2a:51:1f:ea:8f:eb: cc:c9:05:45:e5:58:29:ce:22:42:c3:10:64:70:6e: 42:d5:2d:b2:e5:18:b8:34:af:6c:64:cf:7a:89:ff: 8b:52:06:d9:f9:f3:b4:f9:9e:f0:df:45:85:22:d0: 22:68:af:cd:e3:b3:88:30:21:e0:bc:04:04:ab:fa: dd:41:9f:52:69:66:24:3c:61:6e:c1:77:f1:17:d1: 11:70:ca:63:4a:b3:b7:98:60:1a:aa:12:91:c4:14: 1a:ca:69:09:0a:02:84:65:f0:cb:d8:7c:7f:30:e4: 67:4b:f0:72:64:3d:fd:7a:68:99:0b:39:ae:6c:cc: 47:36:0d:38:33:84:f1:4d:6e:1e:80:46:49:55:48: 6a:bb:43:98:0b:b3:cb:1a:58:bf:f4:67:2d:e5:df: c1:b0:38:fa:80:9f:51:2e:b3:65:59:d0:74:8a:fe: 5d:f0:d9:14:09:47:a7:19:46:b3:4c:25:97:49:61: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:B0:7C:64:9F:E8:86:82:6B:BE:4E:C2:76:37:E7:02:1F:B7:A5 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b5:48:a8:35:4e:63:f2:73:e9:c9:a1:14:06:9e:3f:e4:0d: 78:0d:37:15:4c:d0:14:ea:5d:27:51:48:37:41:fa:a2:90:6e: 17:09:bd:4a:7c:74:07:d2:57:f8:34:86:55:7e:38:d3:70:2c: b5:94:c1:32:37:c0:eb:0f:6c:67:32:27:78:e1:66:18:55:37: 05:cd:ca:81:bc:ca:22:4e:8b:37:ae:23:82:9b:99:8e:11:90: 94:21:96:70:98:5e:74:b3:41:95:d0:80:6f:e3:c6:0b:cc:f9: 0b:c8:63:c3:2b:7d:98:77:b2:21:93:5e:da:3f:8f:cd:4c:d6: 84:97:53:ca:b2:93:da:bf:79:f9:05:df:a9:f4:5c:d9:52:4f: cb:0d:b6:a8:fe:89:82:84:63:33:08:d6:3b:63:02:29:65:1c: 38:4a:9a:ef:fb:17:69:10:27:cd:45:06:a5:41:82:e6:f9:e0: 7c:5e:0a:bf:1e:7a:87:f8:2c:1f:1e:36:2b:1e:0c:a1:c0:e9: 01:f7:a3:fb:5e:57:c5:a9:82:c5:c7:85:86:ea:d2:23:1a:e8: 4c:6e:2b:56:5f:0d:a4:f3:2e:47:62:71:29:37:e7:d1:69:83: f8:41:76:12:10:4c:68:2c:82:22:db:49:27:5e:c8:28:71:d7: 92:5b:c5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjQwNTA2MTc1MzE3WhcNMjQwNTEzMTc1MzE3WjAYMRYwFAYD VQQDEw02NjM5MTkwZC1jNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscxZz3EkBqIjsvMeyetRDNwu6JkJqV+RpwSHcHdC/1Pnb+AmV5PbTnUdhy3g hv5YV/zAUM4If4XoOvI73RI1KTn/OBIqUR/qj+vMyQVF5VgpziJCwxBkcG5C1S2y 5Ri4NK9sZM96if+LUgbZ+fO0+Z7w30WFItAiaK/N47OIMCHgvAQEq/rdQZ9SaWYk PGFuwXfxF9ERcMpjSrO3mGAaqhKRxBQaymkJCgKEZfDL2Hx/MORnS/ByZD39emiZ CzmubMxHNg04M4TxTW4egEZJVUhqu0OYC7PLGli/9Gct5d/BsDj6gJ9RLrNlWdB0 iv5d8NkUCUenGUazTCWXSWHbmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeqsHxk n+iGgmu+TsJ2N+cCH7elMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhtUioNU5j8nPpyaEUBp4/5A14DTcVTNAU6l0nUUg3QfqikG4XCb1K fHQH0lf4NIZVfjjTcCy1lMEyN8DrD2xnMid44WYYVTcFzcqBvMoiTos3riOCm5mO EZCUIZZwmF50s0GV0IBv48YLzPkLyGPDK32Yd7Ihk17aP4/NTNaEl1PKspPav3n5 Bd+p9FzZUk/LDbao/omChGMzCNY7YwIpZRw4Sprv+xdpECfNRQalQYLm+eB8Xgq/ HnqH+CwfHjYrHgyhwOkB96P7XlfFqYLFx4WG6tIjGuhMbitWXw2k8y5HYnEpN+fR aYP4QXYSEExoLIIi20knXsgocdeSW8XI -----END CERTIFICATE-----Generated at Mon May 6 20:19:07 2024 by rpki-client on console-fra.rpki-client.org