$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: aBdhNx5NhiUUsbAB/dnLhj21ZLD8ToqYM1oXENb480o= Subject key identifier: 00:D6:91:8C:BA:4F:31:75:05:25:F4:C9:03:BB:BD:E8:0E:36:4D:4F Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 26ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 26DE Signing time: Mon 06 May 2024 16:00:26 +0000 Manifest this update: Mon 06 May 2024 16:00:26 +0000 Manifest next update: Mon 13 May 2024 16:00:26 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: S1yBI6fXzHX1TTVDPuzXF/LtZeVSumUt0VmjKPDIABY=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: 8sGGt+SGiHPQcIk4RPk18gyGscIwkxemOo4LxPmvMKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9965 (0x26ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: May 6 16:00:26 2024 GMT Not After : May 13 16:00:26 2024 GMT Subject: CN=6638fe9a-cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:6a:39:5c:7a:e8:40:3e:1b:91:bf:92:3e: e7:b5:ab:02:fc:3b:8c:7b:7d:ea:0e:f6:42:12:b3: c4:3e:44:83:6d:b0:2a:6f:87:6e:26:02:cb:7a:d5: c5:02:e9:ed:a9:11:52:bd:43:3e:64:8c:62:48:db: f1:2b:7e:61:70:e4:7f:b6:05:02:ac:60:bf:48:5e: e6:50:1d:8b:6b:95:1f:7e:8c:4f:7d:a2:50:31:4a: 90:d7:8b:2f:3b:dd:81:ff:49:bd:76:dd:c3:92:95: 8c:84:34:8c:e2:c4:87:4f:77:72:88:30:e6:51:e5: fa:51:e3:97:00:2f:3d:5a:11:62:48:38:93:36:b8: f6:50:d6:41:2f:28:01:7d:bc:48:13:e8:6e:93:f1: f5:35:0e:07:6f:01:4f:7b:a5:3f:83:9f:a3:fc:d3: 12:79:d2:cd:3c:53:cf:9c:81:b2:78:d6:36:b0:92: ca:cb:58:7d:d5:0c:86:41:22:d7:b1:e5:46:be:19: f0:9a:f2:a4:8a:c2:ec:c8:b9:53:ad:fa:be:fa:a1: 01:bb:27:b5:cc:78:4b:b8:30:30:50:8d:ef:f8:44: 7f:af:05:7f:4e:f6:b2:3a:d5:0a:6a:20:70:e5:63: 18:b6:ff:d4:1b:68:17:55:a4:8f:bf:20:4e:41:5c: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D6:91:8C:BA:4F:31:75:05:25:F4:C9:03:BB:BD:E8:0E:36:4D:4F X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:03:ab:81:fa:09:ac:cf:47:19:c5:ac:77:27:b2:76:c4:e0: d5:b6:43:fb:25:52:83:ac:fa:8d:ce:f8:e4:ce:30:48:73:ce: 42:03:e4:f0:ab:7b:d9:e7:f3:a9:41:2a:f2:1d:e5:fa:a7:65: 06:43:9e:70:a5:23:e1:ff:9f:db:a5:24:c6:b0:a4:4d:29:9a: 9b:64:26:08:80:40:8d:a9:d3:24:e3:85:a6:bb:7e:bd:31:0a: 37:ce:e0:4f:41:29:33:be:f4:58:38:85:3a:d2:fa:a4:84:53: 70:af:76:79:08:7e:50:88:ba:a5:a3:4b:21:3d:5c:16:0a:d3: 7f:bc:16:66:bc:78:39:3b:89:9c:a5:d9:72:6c:5f:3f:7d:fd: 0b:c7:47:b0:fa:8c:ba:5d:31:38:73:1a:2d:6a:bd:d0:d2:bc: c3:53:e9:30:07:0e:91:2c:d5:65:de:91:a8:74:5e:21:9c:72: fd:b6:3c:9e:12:c3:49:a7:d9:25:1f:c6:2e:af:d5:e9:2e:62: fb:9f:1e:80:0a:4e:0e:22:5a:f9:50:fc:1a:e4:50:5a:ce:44: ac:bb:bb:72:46:bc:8d:2d:b1:a6:97:41:7b:1f:0e:37:94:74: b4:63:28:47:14:7b:74:18:8f:38:b1:84:43:6b:d4:46:3b:70: 7f:0b:a8:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjQwNTA2MTYwMDI2WhcNMjQwNTEzMTYwMDI2WjAYMRYwFAYD VQQDEw02NjM4ZmU5YS1jY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QBqOVx66EA+G5G/kj7ntasC/DuMe33qDvZCErPEPkSDbbAqb4duJgLLetXF AuntqRFSvUM+ZIxiSNvxK35hcOR/tgUCrGC/SF7mUB2La5UffoxPfaJQMUqQ14sv O92B/0m9dt3DkpWMhDSM4sSHT3dyiDDmUeX6UeOXAC89WhFiSDiTNrj2UNZBLygB fbxIE+huk/H1NQ4HbwFPe6U/g5+j/NMSedLNPFPPnIGyeNY2sJLKy1h91QyGQSLX seVGvhnwmvKkisLsyLlTrfq++qEBuye1zHhLuDAwUI3v+ER/rwV/TvayOtUKaiBw 5WMYtv/UG2gXVaSPvyBOQVzafwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADWkYy6 TzF1BSX0yQO7vegONk1PMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYA6uB+gmsz0cZxax3J7J2xODVtkP7JVKDrPqNzvjkzjBIc85CA+Tw q3vZ5/OpQSryHeX6p2UGQ55wpSPh/5/bpSTGsKRNKZqbZCYIgECNqdMk44Wmu369 MQo3zuBPQSkzvvRYOIU60vqkhFNwr3Z5CH5QiLqlo0shPVwWCtN/vBZmvHg5O4mc pdlybF8/ff0Lx0ew+oy6XTE4cxotar3Q0rzDU+kwBw6RLNVl3pGodF4hnHL9tjye EsNJp9klH8Yur9XpLmL7nx6ACk4OIlr5UPwa5FBazkSsu7tyRryNLbGml0F7Hw43 lHS0YyhHFHt0GI84sYRDa9RGO3B/C6hb -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org