$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: dJMh5kQxJmCiNnpmoruILvvID0tu12cfJL35djFjCBg= Subject key identifier: 98:F8:50:91:03:36:A4:2C:D5:2D:93:76:1F:34:4C:B9:92:A9:EC:92 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 21 Signing time: Fri 17 May 2024 08:42:08 +0000 Manifest this update: Fri 17 May 2024 08:42:07 +0000 Manifest next update: Fri 24 May 2024 08:42:07 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: tcGpiPuSeSAJH32H/XvH32p2yfZRmnNqyPNi9gIx8hc=) 2: 57810624E12B11EEA7895018C4F9AE02.roa (hash: 4Mi5qLB24cuitrWVdl8VvHohaQSxomWOQc8JXZdPjdE=) 3: 57F1B45AE12B11EEA7895018C4F9AE02.roa (hash: wLrFru85QTYkMRJ3lt5lokeRkglQfQ0Ot5fTaQUe/xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: May 17 08:42:07 2024 GMT Not After : May 24 08:42:07 2024 GMT Subject: CN=6647185f-5cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:d3:0f:10:51:a1:2f:15:18:42:63:4a:b5: 7e:79:c4:29:57:3f:ad:9f:4d:d8:de:bd:5e:82:35: c1:c2:2d:6a:2d:e3:e9:e8:08:26:a7:e0:96:73:94: 67:2a:8b:ef:d7:bb:cb:db:7b:fb:36:36:0f:d0:e7: 31:b6:5f:6d:95:ee:12:0f:c0:98:39:b0:97:26:be: 03:1c:5b:36:fc:3a:f1:c1:4f:fb:6e:3b:f9:73:40: 31:1d:11:4a:af:c3:8a:d8:cb:6d:df:40:9d:a8:a3: 58:e6:9b:62:3c:a4:70:91:ee:f0:6c:aa:3c:69:63: 82:6a:03:c9:52:44:46:86:d3:bf:53:8b:60:54:ed: ff:ed:08:3f:6e:13:17:1b:77:9e:e5:ed:ba:e5:c6: 1f:60:a0:91:e6:87:32:7d:ac:87:6c:07:ad:c2:b7: 22:19:57:f3:37:bb:6b:9a:27:86:57:f4:90:e9:24: d8:51:ac:94:4d:ce:fb:23:a0:50:d6:f9:8a:01:98: 59:4f:2f:49:88:29:d8:09:7a:8e:c3:72:44:44:bc: 1b:b3:41:95:74:09:35:f0:91:a5:1d:f9:16:ae:37: 7c:5b:35:79:47:a0:7b:3b:81:0c:66:e2:56:4e:84: e5:47:bd:c8:74:8b:47:dc:47:fe:26:81:94:ff:5f: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F8:50:91:03:36:A4:2C:D5:2D:93:76:1F:34:4C:B9:92:A9:EC:92 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:ab:3e:03:5f:f9:3e:18:ae:83:6e:4e:cf:5f:00:c5:15: 6c:d7:cd:61:3a:d0:43:33:40:bf:63:2a:d1:46:9e:03:b8:d8: f0:b8:00:8d:47:d0:63:ea:3e:f3:9c:52:f3:70:f9:f3:a3:02: ac:5a:8c:cc:46:32:ef:ff:e3:4c:bb:ed:21:16:06:56:06:a0: 1f:56:c1:39:a0:30:d5:ba:68:07:51:23:27:f9:78:92:a6:29: 53:0f:9b:d2:0f:b0:1c:d9:c9:31:8a:4c:fa:90:aa:2a:5e:28: cb:b7:e6:7c:d0:81:8e:b1:d8:63:34:3d:48:c3:6b:fb:a4:19: ee:31:a1:cf:88:2e:15:6f:34:88:05:58:8e:90:dc:c4:1e:a5: 10:e4:38:7d:be:09:fa:e8:a8:e0:93:d1:36:9c:93:46:17:ec: 91:c6:c6:7f:6d:3a:0a:ca:e1:b6:33:06:b2:56:69:0c:98:6c: 4b:d4:b1:4d:1e:e3:2e:71:fe:74:92:16:a9:d3:b2:53:13:35: be:2f:9c:13:97:e5:4d:aa:8d:94:25:4b:76:aa:ac:59:e3:9b: ab:70:39:6f:7e:4e:6f:33:f7:2e:83:ed:15:5b:2c:bf:f9:8a: 40:b0:15:2d:9e:d0:d8:2d:11:b4:d8:ff:2d:85:c8:c1:03:0f: 25:1b:5d:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTY4QjExMC8GA1UEBRMoNDJFNjY1RTExMTA0RDhDRDA4M0ZCMTlEM0M2RjM1NUM3 NjI4QzQ0NTAeFw0yNDA1MTcwODQyMDdaFw0yNDA1MjQwODQyMDdaMBgxFjAUBgNV BAMTDTY2NDcxODVmLTVjZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwttMPEFGhLxUYQmNKtX55xClXP62fTdjevV6CNcHCLWot4+noCCan4JZzlGcq i+/Xu8vbe/s2Ng/Q5zG2X22V7hIPwJg5sJcmvgMcWzb8OvHBT/tuO/lzQDEdEUqv w4rYy23fQJ2oo1jmm2I8pHCR7vBsqjxpY4JqA8lSREaG079Ti2BU7f/tCD9uExcb d57l7brlxh9goJHmhzJ9rIdsB63CtyIZV/M3u2uaJ4ZX9JDpJNhRrJRNzvsjoFDW +YoBmFlPL0mIKdgJeo7DckREvBuzQZV0CTXwkaUd+RauN3xbNXlHoHs7gQxm4lZO hOVHvch0i0fcR/4mgZT/X5F9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmPhQkQM2 pCzVLZN2HzRMuZKp7JIwHwYDVR0jBBgwFoAUQuZl4REE2M0IP7GdPG81XHYoxEUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjhCL0ZDMUQyNzM2RTEy QTExRUU4Njg0QzIxN0M0RjlBRTAyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXVabDRSRUUyTTBJUDdHZFBHODFYSFlveEVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NjhCL0ZDMUQyNzM2RTEyQTExRUU4Njg0QzIxN0M0RjlBRTAyL1F1Wmw0UkVFMk0w SVA3R2RQRzgxWEhZb3hFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqUqz4DX/k+GK6Dbk7PXwDFFWzXzWE60EMzQL9jKtFGngO42PC4AI1H 0GPqPvOcUvNw+fOjAqxajMxGMu//40y77SEWBlYGoB9WwTmgMNW6aAdRIyf5eJKm KVMPm9IPsBzZyTGKTPqQqipeKMu35nzQgY6x2GM0PUjDa/ukGe4xoc+ILhVvNIgF WI6Q3MQepRDkOH2+CfroqOCT0Tack0YX7JHGxn9tOgrK4bYzBrJWaQyYbEvUsU0e 4y5x/nSSFqnTslMTNb4vnBOX5U2qjZQlS3aqrFnjm6twOW9+Tm8z9y6D7RVbLL/5 ikCwFS2e0NgtEbTY/y2FyMEDDyUbXXw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:07 2024 by rpki-client on console-ams.rpki-client.org