$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft File: RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json) Hash identifier: UsvPHf3qBQX7KtmESm7CAOH1T8P1M1cwfUkVk9gAv6U= Subject key identifier: 6C:B9:79:AC:26:BD:A9:02:21:E5:19:E9:05:91:A1:25:C1:2A:DA:4B Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 Certificate issuer: /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft Manifest number: 1B6F Signing time: Thu 02 May 2024 17:26:46 +0000 Manifest this update: Thu 02 May 2024 17:26:46 +0000 Manifest next update: Thu 09 May 2024 17:26:46 +0000 Files and hashes: 1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: nvXeEZfO59nk6+VRBLqMa5iDwrQiEYBFinHuMJHTBEY=) 2: A3C52B6AC8B111EE84B08767C4F9AE02.roa (hash: Zwu0lSJjD8+bcl44v9PBW4AOPEOrZqkqJIZkWhBN/ag=) 3: E2D65C64657C11EDA6716016C4F9AE02.roa (hash: 44AcWaL/dU5V3I9mHQqOVriqEH3a2RPcxsHFnNW1Qq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Validity Not Before: May 2 17:26:46 2024 GMT Not After : May 9 17:26:46 2024 GMT Subject: CN=6633ccd6-e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:dd:5d:41:f3:ec:51:c1:d9:2b:4e:69:2f: 25:fa:cb:8d:07:62:a1:81:c3:56:ba:96:d1:2a:1c: cd:b7:f3:70:51:9f:13:c5:43:a3:28:b3:68:4a:ce: 25:8c:5f:56:db:1f:4b:34:b0:1d:27:57:64:ed:cc: 69:6d:80:0a:5b:39:43:d9:6a:26:d0:b2:69:47:e6: 36:7e:db:e9:81:85:5a:a6:43:27:e7:75:bb:c7:1c: 1c:e2:dc:bd:d6:e7:9f:0c:c8:12:fd:99:aa:b1:98: e9:2a:30:fd:5f:fb:ec:4c:3a:a1:8b:d8:c5:f5:ed: 15:75:9f:8a:0b:92:e1:1d:12:f2:b0:0b:9b:a9:05: 5c:ed:04:29:5e:74:fd:42:57:fb:9b:26:f5:2e:d0: 26:4d:f6:d3:33:49:f0:10:31:71:20:71:9f:81:93: 3e:2c:82:61:53:a8:4f:56:70:73:65:64:25:72:83: e9:27:bd:bd:1b:03:eb:f8:70:54:0c:d1:71:5d:4c: 0e:36:e4:00:19:b9:f2:1d:80:3e:af:19:44:21:be: ac:67:e6:d4:8c:f3:eb:86:fe:67:12:fc:c3:2b:cb: d3:89:a2:c5:a2:d4:dd:b2:9b:dc:3b:5c:ae:c0:e2: 90:23:ee:e2:b9:79:28:9c:ba:f8:8f:0d:a7:80:50: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B9:79:AC:26:BD:A9:02:21:E5:19:E9:05:91:A1:25:C1:2A:DA:4B X509v3 Authority Key Identifier: keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5a:19:5e:04:ad:a9:ed:11:d3:09:e7:29:aa:9c:45:f0:7d: 32:54:4d:21:8e:5a:6a:ba:e1:0b:6c:c4:01:04:cd:68:b7:bd: 4c:32:99:06:85:af:a3:95:bd:89:83:85:21:fe:6c:e3:d0:70: fa:e6:49:e9:53:ba:fd:48:43:aa:c0:58:7e:bc:87:09:14:cb: 50:dd:eb:ff:9e:a9:e8:bc:12:e7:b0:8e:34:a2:53:aa:e8:89: d5:c4:ee:7b:7d:59:70:ab:0b:70:75:fd:74:3b:59:0d:59:05: b7:5d:0a:13:ec:64:99:a2:27:61:2a:f3:7e:d3:7e:d4:0b:2d: 08:b5:cb:46:d9:66:3a:22:57:84:cd:d7:35:44:64:4d:c4:dc: 56:36:af:39:3a:9f:7d:d0:50:c7:62:1c:71:8f:00:68:ee:4f: 86:2c:31:4a:81:3c:51:f6:00:94:1f:32:d8:16:37:c9:1d:42: d1:17:de:84:fb:04:e4:85:51:bb:ad:4e:fb:7b:6d:e5:08:7c: 08:ef:30:57:72:44:b5:f4:a5:e0:39:64:27:55:45:25:aa:65: d5:23:b3:61:32:cb:d0:9b:2f:de:3c:85:90:2c:6c:97:34:2b: ba:b3:ba:c8:7e:bb:fe:ce:2a:13:05:0c:59:67:79:77:19:39: 46:dc:36:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDQ1MDk2ODk5NjZEMzc5Mjc1NjlDRjJDQkI0NEZGRTkz QUNBOEU2ODEwHhcNMjQwNTAyMTcyNjQ2WhcNMjQwNTA5MTcyNjQ2WjAYMRYwFAYD VQQDEw02NjMzY2NkNi1lODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgPdXUHz7FHB2StOaS8l+suNB2KhgcNWupbRKhzNt/NwUZ8TxUOjKLNoSs4l jF9W2x9LNLAdJ1dk7cxpbYAKWzlD2Wom0LJpR+Y2ftvpgYVapkMn53W7xxwc4ty9 1uefDMgS/ZmqsZjpKjD9X/vsTDqhi9jF9e0VdZ+KC5LhHRLysAubqQVc7QQpXnT9 Qlf7myb1LtAmTfbTM0nwEDFxIHGfgZM+LIJhU6hPVnBzZWQlcoPpJ729GwPr+HBU DNFxXUwONuQAGbnyHYA+rxlEIb6sZ+bUjPPrhv5nEvzDK8vTiaLFotTdspvcO1yu wOKQI+7iuXkonLr4jw2ngFAf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy5eawm vakCIeUZ6QWRoSXBKtpLMB8GA1UdIwQYMBaAFEUJaJlm03knVpzyy7RP/pOsqOaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVTZFduUExMdEVfLWs2eW81 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JRbG9tV2JUZVNkV25QTEx0RV8tazZ5bzVvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVT ZFduUExMdEVfLWs2eW81b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEWhleBK2p7RHTCecpqpxF8H0yVE0hjlpquuELbMQBBM1ot71MMpkG ha+jlb2Jg4Uh/mzj0HD65knpU7r9SEOqwFh+vIcJFMtQ3ev/nqnovBLnsI40olOq 6InVxO57fVlwqwtwdf10O1kNWQW3XQoT7GSZoidhKvN+037UCy0ItctG2WY6IleE zdc1RGRNxNxWNq85Op990FDHYhxxjwBo7k+GLDFKgTxR9gCUHzLYFjfJHULRF96E +wTkhVG7rU77e23lCHwI7zBXckS19KXgOWQnVUUlqmXVI7NhMsvQmy/ePIWQLGyX NCu6s7rIfrv+zioTBQxZZ3l3GTlG3Das -----END CERTIFICATE-----Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org