$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: f2nZBgUJpAhpf4NKg5W24580ByzCMxEz30UQyIh5wAY= Subject key identifier: D9:02:0A:C5:6A:B4:BA:B7:47:E5:BC:68:47:13:A9:5C:DA:F0:FC:BC Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 33C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 33C0 Signing time: Thu 02 May 2024 14:42:41 +0000 Manifest this update: Thu 02 May 2024 14:42:40 +0000 Manifest next update: Thu 09 May 2024 14:42:40 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: vRNSbWVK+5FL4gZuXh1WdDqhOGkjeCBG8QOmg2IhkFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: May 2 14:42:40 2024 GMT Not After : May 9 14:42:40 2024 GMT Subject: CN=6633a661-3680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:9c:43:cc:35:99:f7:c0:06:2e:ce:12:c5: 1f:82:b5:97:93:de:94:ce:0f:1d:95:22:fb:97:5f: aa:ea:3a:85:06:14:69:b4:56:02:49:07:5d:3c:6b: 33:92:9f:21:68:4c:0f:4b:a9:19:31:45:6a:c0:bb: 98:fc:c9:42:b4:06:d0:ee:96:a4:8b:81:bb:57:e9: d9:4e:64:2a:2f:cd:e7:91:14:b3:97:a0:fc:83:21: 7f:b8:c8:f7:a5:dd:d7:e6:b3:95:f6:3c:9a:ad:6b: 4f:3b:68:4d:71:90:27:a4:bc:22:89:9d:c4:46:57: c7:8e:92:b9:f2:8f:17:28:e2:01:2b:ae:9f:81:e0: 65:b2:86:cc:83:4e:03:9e:21:fe:f9:c0:b4:40:e9: bf:2d:64:82:84:50:b9:b3:95:f3:79:0f:18:64:f9: 03:64:a3:58:9e:1e:1e:db:a0:75:88:83:95:ce:0f: 1b:bb:8b:85:e0:4a:fb:a1:a3:b8:13:fb:8c:f3:4f: 0b:5e:eb:03:c6:11:b2:89:c2:48:36:5a:94:33:56: 9a:ca:39:d8:a9:d9:1c:03:80:fa:2a:a2:d1:18:0f: 69:aa:b0:d3:13:b8:d7:f4:d9:39:54:30:62:88:cd: e6:ce:da:bd:e0:d1:b0:81:f8:ff:cd:57:e5:1f:d9: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:0A:C5:6A:B4:BA:B7:47:E5:BC:68:47:13:A9:5C:DA:F0:FC:BC X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e3:2d:24:1b:6b:bc:13:94:03:f9:7b:cf:6d:55:e4:c9:c1: 1e:22:2d:51:1a:a3:e0:97:14:00:99:ef:0d:f0:1f:ed:1d:ba: ee:80:0b:4c:ef:1b:34:2a:a7:56:29:79:cd:f1:eb:7a:29:2c: 77:c4:a6:d1:0d:82:f4:2c:94:24:27:7a:1e:ce:52:e9:66:c4: 33:f9:55:e3:e0:1a:a3:6c:14:03:8d:f7:5d:4c:dc:6d:b1:e5: b8:93:f6:6d:52:5c:84:65:e3:12:df:f3:4e:3a:ff:b4:9f:bc: f6:6c:a3:9c:73:83:c4:a5:e9:95:de:48:02:70:d6:9f:d0:a4: da:d5:4a:81:6d:7d:6d:5c:be:59:92:ec:78:90:f7:4d:ca:dc: f0:ec:04:ed:cd:d3:20:a3:89:f5:dd:7a:55:6d:1e:d4:26:30: 93:52:3f:da:31:38:94:99:c5:e0:a0:12:5b:b4:46:0b:a8:c7: b7:6a:28:e5:f3:45:55:54:5f:52:61:90:2a:4f:bc:76:59:89: a6:c2:bb:6c:b2:6c:fb:ba:73:8d:48:5d:3f:5a:ea:cd:97:4a: a2:82:6c:3c:cc:f9:ac:01:56:33:a8:44:0d:e2:20:a9:17:a9: bb:9c:88:53:14:33:e9:78:24:2b:1d:ed:ac:11:4b:cf:85:2e: 56:4f:cb:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjQwNTAyMTQ0MjQwWhcNMjQwNTA5MTQ0MjQwWjAYMRYwFAYD VQQDEw02NjMzYTY2MS0zNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sOcQ8w1mffABi7OEsUfgrWXk96Uzg8dlSL7l1+q6jqFBhRptFYCSQddPGsz kp8haEwPS6kZMUVqwLuY/MlCtAbQ7paki4G7V+nZTmQqL83nkRSzl6D8gyF/uMj3 pd3X5rOV9jyarWtPO2hNcZAnpLwiiZ3ERlfHjpK58o8XKOIBK66fgeBlsobMg04D niH++cC0QOm/LWSChFC5s5XzeQ8YZPkDZKNYnh4e26B1iIOVzg8bu4uF4Er7oaO4 E/uM808LXusDxhGyicJINlqUM1aayjnYqdkcA4D6KqLRGA9pqrDTE7jX9Nk5VDBi iM3mztq94NGwgfj/zVflH9lrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkCCsVq tLq3R+W8aEcTqVza8Py8MB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC24y0kG2u8E5QD+XvPbVXkycEeIi1RGqPglxQAme8N8B/tHbrugAtM 7xs0KqdWKXnN8et6KSx3xKbRDYL0LJQkJ3oezlLpZsQz+VXj4BqjbBQDjfddTNxt seW4k/ZtUlyEZeMS3/NOOv+0n7z2bKOcc4PEpemV3kgCcNaf0KTa1UqBbX1tXL5Z kux4kPdNytzw7ATtzdMgo4n13XpVbR7UJjCTUj/aMTiUmcXgoBJbtEYLqMe3aijl 80VVVF9SYZAqT7x2WYmmwrtssmz7unONSF0/WurNl0qigmw8zPmsAVYzqEQN4iCp F6m7nIhTFDPpeCQrHe2sEUvPhS5WT8tw -----END CERTIFICATE-----Generated at Thu May 2 17:43:05 2024 by rpki-client on console-fra.rpki-client.org