$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: oLIp6WmrDfKiwTIEdEwVE0e6OT83nbkkPzZ1Tt3U5E8= Subject key identifier: CF:BC:2E:C4:A1:0C:A6:92:69:07:A0:7C:46:B9:11:57:90:6F:1A:FF Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 7F Signing time: Wed 15 May 2024 07:21:40 +0000 Manifest this update: Wed 15 May 2024 07:21:39 +0000 Manifest next update: Wed 22 May 2024 07:21:39 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: O7Do60S/sR0wDRT7ErVRlYbyQkujJ8aNa3JkP321JTY=) 2: 120AADD0A9F311EE9164C011C4F9AE02.roa (hash: a5C+zTSD/7WPAqfNd/SO46Bz7FWICIztDLknbGjSsdU=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: PNcLg+VvUtW05nZyDBF6Xyi0pL4/YgC1oHUsCQgLfJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: May 15 07:21:39 2024 GMT Not After : May 22 07:21:39 2024 GMT Subject: CN=66446284-d2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:87:f5:7c:8b:b4:fc:8c:34:08:8e:3e:5e: 4a:87:f2:82:5f:94:50:eb:2b:c7:0e:a9:95:cf:1e: 44:66:6a:45:1f:1e:8b:0a:28:71:5b:3a:fc:19:f0: 0d:a3:3c:32:3a:31:78:dc:a2:cf:76:88:7c:15:67: 74:ca:ce:13:9f:33:8c:2a:47:33:39:5a:9e:2e:0a: 85:56:2e:f7:0a:80:f8:5d:1b:e9:7c:e6:c2:83:ed: 43:de:91:6d:81:5e:75:c7:ad:9e:b1:94:af:ba:ff: 93:96:95:96:57:9c:09:51:b8:92:58:c4:3c:5d:1a: cb:59:c8:f0:23:af:44:86:1a:ff:c8:1b:8c:88:86: 46:5b:93:7b:10:f3:05:c0:08:18:23:b0:b7:ad:94: fb:57:34:ea:2b:5e:fb:5b:10:7f:57:50:b7:79:90: b7:1c:08:1d:f3:a2:7a:62:4f:a0:37:3c:d0:fc:4a: c2:35:47:ea:94:ab:8e:eb:bf:5e:22:0b:4d:b1:3c: 4b:6f:7b:81:cb:54:16:5d:b7:9f:b5:7c:3d:bb:71: 7f:a1:ed:0b:77:79:1d:92:d5:a9:6e:b5:27:4e:c9: 81:b8:9b:f4:af:83:92:74:24:65:b2:fb:f6:2e:5d: 04:45:9a:13:13:d6:d3:52:e6:f1:e9:03:a9:42:8b: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:2E:C4:A1:0C:A6:92:69:07:A0:7C:46:B9:11:57:90:6F:1A:FF X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fd:44:2a:b4:38:b0:cc:eb:46:0a:a3:43:0c:83:96:64:50: af:c1:dd:16:61:e0:de:5b:87:37:6f:11:0e:8f:09:3e:15:8c: 3d:6a:94:06:7e:2e:91:2c:dd:1b:56:4a:5c:4d:0f:73:b6:77: 94:59:24:5a:ee:42:a9:8e:84:a3:d5:42:06:9e:be:1b:a0:6a: 5f:d4:fe:35:60:54:19:c0:4c:9b:d5:4c:bf:7f:a9:da:ec:ae: 9e:6c:fc:61:e0:f3:79:f0:c8:b8:27:7e:dd:f1:7d:36:97:cf: 29:79:b9:2d:f7:50:0b:63:ba:bd:b8:4b:5e:94:47:db:96:5b: 0e:28:6c:fc:c3:80:45:69:77:b8:e3:82:45:2f:bc:01:02:38: 52:da:bd:25:b9:d0:5e:62:86:a8:ce:1f:bb:e5:40:ba:c9:51: 16:1f:72:bd:3c:74:e2:0d:a7:a3:f1:fe:91:b2:ca:68:63:a4: 76:b0:83:89:32:b0:7e:e4:89:63:9a:f4:98:a9:f1:41:67:f0: f5:12:0d:de:48:bf:9e:d1:30:b5:44:0a:19:f7:ed:a1:25:78: 0c:2b:b5:ec:00:39:04:35:a7:06:04:ef:14:99:f9:aa:cb:ba: 71:64:01:71:0b:7b:28:f2:4b:21:15:c6:26:2e:71:fc:2b:3c: 2a:4e:22:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjQwNTE1MDcyMTM5WhcNMjQwNTIyMDcyMTM5WjAYMRYwFAYD VQQDEw02NjQ0NjI4NC1kMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFiH9XyLtPyMNAiOPl5Kh/KCX5RQ6yvHDqmVzx5EZmpFHx6LCihxWzr8GfAN ozwyOjF43KLPdoh8FWd0ys4TnzOMKkczOVqeLgqFVi73CoD4XRvpfObCg+1D3pFt gV51x62esZSvuv+TlpWWV5wJUbiSWMQ8XRrLWcjwI69Ehhr/yBuMiIZGW5N7EPMF wAgYI7C3rZT7VzTqK177WxB/V1C3eZC3HAgd86J6Yk+gNzzQ/ErCNUfqlKuO679e IgtNsTxLb3uBy1QWXbeftXw9u3F/oe0Ld3kdktWpbrUnTsmBuJv0r4OSdCRlsvv2 Ll0ERZoTE9bTUubx6QOpQos7TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+8LsSh DKaSaQegfEa5EVeQbxr/MB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3/UQqtDiwzOtGCqNDDIOWZFCvwd0WYeDeW4c3bxEOjwk+FYw9apQG fi6RLN0bVkpcTQ9ztneUWSRa7kKpjoSj1UIGnr4boGpf1P41YFQZwEyb1Uy/f6na 7K6ebPxh4PN58Mi4J37d8X02l88pebkt91ALY7q9uEtelEfbllsOKGz8w4BFaXe4 44JFL7wBAjhS2r0ludBeYoaozh+75UC6yVEWH3K9PHTiDaej8f6RsspoY6R2sIOJ MrB+5IljmvSYqfFBZ/D1Eg3eSL+e0TC1RAoZ9+2hJXgMK7XsADkENacGBO8Umfmq y7pxZAFxC3so8kshFcYmLnH8KzwqTiKg -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org