$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: tjPsjgNrPbpEwGpshpu1Im/m3OYAE45kJL5DY1ffISw= Subject key identifier: 6E:12:8B:D4:A0:97:DF:85:31:E0:82:2A:EA:D0:B1:57:5C:A6:03:DC Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 04F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 04EF Signing time: Fri 03 May 2024 01:24:05 +0000 Manifest this update: Fri 03 May 2024 01:24:05 +0000 Manifest next update: Fri 10 May 2024 01:24:04 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: XtXDjBm0pBRCIhAxbg9geN3xpYpd8hGvMrR2h9kOKzk=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: PZk2s4pVxdd+uWGbpLDdKqQnLnDAwueZPLePiboRxIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: May 3 01:24:05 2024 GMT Not After : May 10 01:24:04 2024 GMT Subject: CN=66343cb5-93b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:31:8b:25:5e:73:2c:f0:2d:f1:ba:39:ca: 1b:3c:65:cf:f7:69:8d:f0:b7:86:58:4b:71:ce:0f: cc:a4:21:f4:ff:01:2f:4c:87:4a:60:94:9f:b7:25: bb:c6:ea:e6:d5:dd:52:08:bb:77:cc:7f:c5:5c:bf: a7:50:e5:83:3e:40:39:50:59:46:50:27:b4:03:2a: 71:45:37:25:90:43:a5:3a:f6:ee:32:1c:45:5c:31: 6f:65:fd:c6:de:70:19:10:e5:b0:e2:3e:69:15:f0: 9f:40:4e:86:4d:77:9e:bf:c2:77:d3:d6:1d:03:a7: c9:f3:e1:fa:bc:b7:3e:72:a4:52:29:b6:13:d8:bb: 9e:74:89:c9:d3:40:ad:d2:0a:3a:9b:57:df:b9:ca: db:0c:e3:fe:e8:3a:a8:34:a5:8d:36:4c:9c:31:a4: 04:dc:c3:5d:e4:3f:0c:5b:e3:5f:d4:f7:45:a0:cf: 6f:ea:8f:c4:5f:8c:a1:83:0e:34:a1:c6:71:6c:ee: ba:40:c8:1e:1f:0c:04:af:83:d4:26:aa:40:ed:34: ff:e6:8b:59:d4:a5:72:b5:91:e5:bf:76:46:48:f4: 48:54:15:10:ec:65:73:0b:0f:a7:32:71:39:6d:e9: 31:32:52:96:71:ac:18:41:6a:3e:18:f4:6b:19:0c: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:12:8B:D4:A0:97:DF:85:31:E0:82:2A:EA:D0:B1:57:5C:A6:03:DC X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:89:e5:dc:35:6d:dc:b4:e6:1c:af:a7:28:36:ad:54:84:38: 9a:73:c1:13:83:17:bf:3c:30:14:98:dd:e1:24:f4:33:8f:97: 7b:ee:a3:d8:8b:2e:9b:fb:f7:03:13:ff:64:ab:22:57:81:18: f9:5e:48:a1:85:9c:af:87:8c:52:ad:5a:e3:0d:d1:c9:a8:85: d8:38:19:22:93:09:88:4d:0c:6f:74:9f:1a:b6:a2:e2:c0:5f: 73:bb:92:47:89:5f:ff:7a:7c:de:93:0e:23:9a:be:1a:f0:54: 57:e5:cd:26:ae:56:ac:1f:12:ad:a2:2d:03:7a:8c:51:e5:06: dd:4a:08:68:dc:ba:c5:b2:08:74:4b:4e:db:19:8b:ad:92:a9: a3:38:da:a0:33:b3:9b:e1:1f:61:8e:0a:16:99:0c:fc:df:ee: c4:59:32:84:fa:44:a6:01:67:0d:1d:ff:ed:ce:ab:45:c9:77: 77:96:cc:26:9d:1e:19:c2:0d:3b:99:07:1a:86:fe:8d:b4:96: ba:f0:2d:3e:a7:06:0e:81:df:d4:c4:6f:3f:a0:a3:7f:1a:0c: 34:de:c6:86:bb:e6:82:ab:d7:19:d0:95:16:19:a7:eb:a4:35: 06:e7:68:15:86:8c:c4:58:39:83:20:9b:eb:71:84:56:21:62: a8:6b:fd:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjQwNTAzMDEyNDA1WhcNMjQwNTEwMDEyNDA0WjAYMRYwFAYD VQQDEw02NjM0M2NiNS05M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh8xiyVecyzwLfG6OcobPGXP92mN8LeGWEtxzg/MpCH0/wEvTIdKYJSftyW7 xurm1d1SCLt3zH/FXL+nUOWDPkA5UFlGUCe0AypxRTclkEOlOvbuMhxFXDFvZf3G 3nAZEOWw4j5pFfCfQE6GTXeev8J309YdA6fJ8+H6vLc+cqRSKbYT2LuedInJ00Ct 0go6m1ffucrbDOP+6DqoNKWNNkycMaQE3MNd5D8MW+Nf1PdFoM9v6o/EX4yhgw40 ocZxbO66QMgeHwwEr4PUJqpA7TT/5otZ1KVytZHlv3ZGSPRIVBUQ7GVzCw+nMnE5 bekxMlKWcawYQWo+GPRrGQyuKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4Si9Sg l9+FMeCCKurQsVdcpgPcMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGieXcNW3ctOYcr6coNq1UhDiac8ETgxe/PDAUmN3hJPQzj5d77qPY iy6b+/cDE/9kqyJXgRj5XkihhZyvh4xSrVrjDdHJqIXYOBkikwmITQxvdJ8atqLi wF9zu5JHiV//enzekw4jmr4a8FRX5c0mrlasHxKtoi0DeoxR5QbdSgho3LrFsgh0 S07bGYutkqmjONqgM7Ob4R9hjgoWmQz83+7EWTKE+kSmAWcNHf/tzqtFyXd3lswm nR4Zwg07mQcahv6NtJa68C0+pwYOgd/UxG8/oKN/Ggw03saGu+aCq9cZ0JUWGafr pDUG52gVhozEWDmDIJvrcYRWIWKoa/0L -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org