$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft File: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json) Hash identifier: CnwRa13ACEFPDCkzFtLF4K5Fk/M3xxbjc7jWZMA69MI= Subject key identifier: 37:AC:5C:F3:19:3B:AF:C4:25:93:7B:22:7C:C8:68:DB:96:E2:50:05 Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft Manifest number: 5A Signing time: Sat 25 May 2024 08:05:16 +0000 Manifest this update: Sat 25 May 2024 08:05:15 +0000 Manifest next update: Sat 01 Jun 2024 08:05:15 +0000 Files and hashes: 1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: PX3nD9aPHqEdXG7gaBDBym8CAnjdGR6XG8rNOLbeomA=) 2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: rpiYBDsqN0Qgx3RcPEzlC3AIVSlHVQLYFZRws5f6fHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Validity Not Before: May 25 08:05:15 2024 GMT Not After : Jun 1 08:05:15 2024 GMT Subject: CN=66519bbc-7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:70:7a:23:99:1b:54:14:b7:ad:e5:db:6e: 7a:95:36:05:47:61:92:92:c0:62:c6:5e:07:43:50: f3:f2:3f:ea:49:0d:73:2f:b3:91:36:88:38:46:ff: f2:90:14:b9:75:69:2e:97:61:92:91:8b:66:c2:05: 7e:16:95:2a:37:29:01:80:a7:19:c5:59:1f:55:9a: 1d:9a:2a:a9:b4:59:3a:e4:0a:45:28:89:80:07:a9: 35:27:9c:0e:34:c2:d5:c1:a4:d7:94:af:9b:ed:d1: 0a:36:0f:99:36:23:69:c5:91:ff:26:19:a2:f5:79: 33:6e:f4:0d:ba:15:65:92:03:10:32:eb:3c:eb:5f: 11:20:1a:2a:c2:fb:10:a4:a3:e1:d8:f9:ad:c3:e6: 92:dd:9f:24:89:fb:c5:2e:80:e6:ab:8e:f9:65:a5: 3a:1c:98:7e:48:13:ec:bb:b4:56:90:96:50:7e:c0: 83:d9:75:ce:01:1d:e0:3f:91:d3:88:da:c6:eb:a4: a7:f1:33:3b:f4:3c:83:f7:3b:69:17:48:5a:7e:d4: 21:23:a5:1b:52:f2:c8:11:ac:09:c9:98:d1:7f:05: a0:03:5e:1b:1b:a9:a9:f6:01:b0:e6:64:e1:aa:f8: b6:27:95:cc:f7:ea:e0:8c:3f:d6:31:10:3e:db:7d: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AC:5C:F3:19:3B:AF:C4:25:93:7B:22:7C:C8:68:DB:96:E2:50:05 X509v3 Authority Key Identifier: keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d1:7e:ee:98:ce:0b:c4:3f:ee:17:0c:a0:39:75:b8:ad:47: da:e3:1b:de:73:ac:4d:21:17:09:78:13:28:e2:20:08:17:5c: 3d:b4:45:f8:1d:98:c3:d0:7b:4f:56:8d:b6:23:02:eb:33:86: 66:c7:ae:6c:94:ce:da:70:33:2d:e4:59:f8:74:65:18:d7:15: 8a:87:36:45:35:e0:21:22:99:76:a5:f6:58:dc:fc:57:a3:a2: 35:93:e8:2e:55:9e:d6:ea:90:9c:fe:c2:d4:61:39:e1:2a:bf: 6b:6f:c7:b2:5b:aa:10:41:9c:94:88:5a:bc:46:05:89:6e:3c: f3:68:87:f0:ca:a7:cd:0e:7b:db:01:d4:1e:b5:da:be:ec:67: 12:06:68:cd:05:09:c7:f1:83:35:9e:e1:c6:8b:5e:19:a3:aa: a2:ae:80:78:b3:84:42:44:a3:32:09:9f:cb:c9:f8:57:fb:01: a7:46:64:27:94:3a:e1:65:81:f3:2a:2f:a2:f8:41:03:46:37: c4:7f:c5:11:94:3f:43:ad:a8:61:75:fb:f9:2e:90:b1:26:2d: 69:c1:1b:dd:ba:47:8e:54:9a:0f:f8:37:0d:88:0b:40:b7:86: e0:32:44:ca:42:9b:07:f8:86:1e:63:68:1c:00:65:b6:11:06: 16:2a:6f:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzdBMjExMC8GA1UEBRMoNDM4MkY5QUEzMDE2RkNCRjMxRjkyNENGMTMyRTk1QkY5 MjcwOUFERDAeFw0yNDA1MjUwODA1MTVaFw0yNDA2MDEwODA1MTVaMBgxFjAUBgNV BAMTDTY2NTE5YmJjLTdjNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7u3B6I5kbVBS3reXbbnqVNgVHYZKSwGLGXgdDUPPyP+pJDXMvs5E2iDhG//KQ FLl1aS6XYZKRi2bCBX4WlSo3KQGApxnFWR9Vmh2aKqm0WTrkCkUoiYAHqTUnnA40 wtXBpNeUr5vt0Qo2D5k2I2nFkf8mGaL1eTNu9A26FWWSAxAy6zzrXxEgGirC+xCk o+HY+a3D5pLdnySJ+8UugOarjvllpTocmH5IE+y7tFaQllB+wIPZdc4BHeA/kdOI 2sbrpKfxMzv0PIP3O2kXSFp+1CEjpRtS8sgRrAnJmNF/BaADXhsbqan2AbDmZOGq +LYnlcz36uCMP9YxED7bfdchAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN6xc8xk7 r8Qlk3sifMho25biUAUwHwYDVR0jBBgwFoAUQ4L5qjAW/L8x+STPEy6Vv5Jwmt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzN0EyLzQ5RTZFM0Q2OTMz QzExRUVCNDIxMEYyOUM0RjlBRTAyL1E0TDVxakFXX0w4eC1TVFBFeTZWdjVKd210 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTRMNXFqQVdfTDh4LVNUUEV5NlZ2NUp3bXQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz N0EyLzQ5RTZFM0Q2OTMzQzExRUVCNDIxMEYyOUM0RjlBRTAyL1E0TDVxakFXX0w4 eC1TVFBFeTZWdjVKd210MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjRfu6YzgvEP+4XDKA5dbitR9rjG95zrE0hFwl4EyjiIAgXXD20Rfgd mMPQe09WjbYjAuszhmbHrmyUztpwMy3kWfh0ZRjXFYqHNkU14CEimXal9ljc/Fej ojWT6C5VntbqkJz+wtRhOeEqv2tvx7JbqhBBnJSIWrxGBYluPPNoh/DKp80Oe9sB 1B612r7sZxIGaM0FCcfxgzWe4caLXhmjqqKugHizhEJEozIJn8vJ+Ff7AadGZCeU OuFlgfMqL6L4QQNGN8R/xRGUP0OtqGF1+/kukLEmLWnBG926R45Umg/4Nw2IC0C3 huAyRMpCmwf4hh5jaBwAZbYRBhYqb4E= -----END CERTIFICATE-----Generated at Sat May 25 10:21:04 2024 by rpki-client on console-ams.rpki-client.org