$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: 0zY3TqY2X5N+Cub0fHlPu4Y/uLRu4d+p7ca9NM2s/CY= Subject key identifier: 60:13:54:1A:50:AA:22:F4:07:98:F9:26:A5:0A:5E:3A:DA:06:F1:0D Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1A4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1A47 Signing time: Tue 14 May 2024 16:51:13 +0000 Manifest this update: Tue 14 May 2024 16:51:13 +0000 Manifest next update: Tue 21 May 2024 16:51:13 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: k3LKqskaxxihNIz6FHzp8MMERU0M4jXFmlV+qMNSof4=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: pULaI/XZVZdpxxko03m86w8bbIuo104whBobYDPnIWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 15:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6730 (0x1a4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: May 14 16:51:13 2024 GMT Not After : May 21 16:51:13 2024 GMT Subject: CN=66439681-2664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:9b:05:84:98:e0:4e:15:7d:8c:5a:4c:b8: 45:f5:15:a6:4d:2d:d9:cf:25:99:4e:3d:1a:4b:9d: 9e:e6:e3:a9:0b:23:8d:37:1d:aa:2c:6d:fb:87:37: 2b:db:90:26:c6:af:a2:85:7e:22:6b:ac:da:d8:df: 12:d2:7a:f9:83:ed:8f:20:f6:58:22:cc:d8:7a:25: 60:36:72:02:5a:c4:54:90:47:a1:fb:88:5b:65:11: 6a:98:b9:df:44:a0:61:81:dc:6c:40:bb:0c:28:27: e7:65:02:01:bf:1b:8e:07:93:a0:3e:67:ce:62:8b: da:60:60:5e:d8:c8:dd:1f:cf:a6:7b:09:80:1d:17: 95:5d:80:95:61:ab:f5:33:ad:f8:96:47:94:d4:f5: e4:ef:ab:88:98:9f:be:15:d3:5a:ab:c8:13:cd:d4: 00:a3:b5:1a:b4:bf:c5:21:eb:00:2e:44:a9:5a:fc: 08:95:be:d4:d5:23:6b:19:94:fe:c5:e1:3f:b9:ee: cf:80:ec:10:5c:ca:0d:4b:fd:5a:ce:7e:5b:ed:56: 7f:fe:8d:ea:c1:6e:da:cb:1c:f9:96:d3:e4:45:4c: 09:7c:c2:05:fa:57:b8:34:98:3f:a0:48:9e:41:7e: ff:95:9b:98:04:55:a9:a6:d3:c9:bc:fb:3c:6a:cb: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:54:1A:50:AA:22:F4:07:98:F9:26:A5:0A:5E:3A:DA:06:F1:0D X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:9e:d9:22:14:5a:ba:3b:e8:60:1f:f8:b7:40:df:c9:ed: 15:d5:84:cd:34:d0:a6:cb:78:40:82:2c:7c:fc:c8:8a:f3:94: 05:9d:ca:45:56:03:9c:e6:1e:b1:20:d2:e9:0b:09:67:99:dc: c7:54:88:90:73:81:e2:b7:97:e8:0a:26:05:90:c3:ab:87:0b: 43:aa:7d:8f:5c:c1:5c:3b:8a:f7:8a:b9:61:c5:c3:a8:ef:a0: ed:3c:0d:ae:a0:d9:99:3f:af:be:02:37:96:b4:11:a0:e3:a9: 07:20:d4:b2:55:09:92:c5:5c:2c:ba:9b:ea:9b:70:81:0c:50: 65:df:84:82:fd:ed:cf:c8:b8:d6:d9:2f:ad:f6:89:25:12:53: a5:7f:69:9b:e6:6b:f5:37:2a:06:d4:1c:e2:1c:e8:77:7a:9e: cd:92:cc:66:c5:e0:4a:30:fd:fe:f9:67:62:c9:d5:5d:6f:2f: 6c:e9:fd:3d:41:17:45:b4:d9:16:7a:ae:bd:52:bc:dc:db:82: 2b:70:7f:f2:14:b6:b8:c8:55:44:95:ff:4c:10:a9:eb:db:c8: 81:d1:0d:d9:14:dc:25:70:1b:b9:a2:9d:e0:47:21:4b:4b:fa: 0b:99:38:38:6b:f1:7c:83:d9:01:af:f1:81:c8:bc:4c:c7:b4: 77:2b:3a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjQwNTE0MTY1MTEzWhcNMjQwNTIxMTY1MTEzWjAYMRYwFAYD VQQDEw02NjQzOTY4MS0yNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEWbBYSY4E4VfYxaTLhF9RWmTS3ZzyWZTj0aS52e5uOpCyONNx2qLG37hzcr 25Amxq+ihX4ia6za2N8S0nr5g+2PIPZYIszYeiVgNnICWsRUkEeh+4hbZRFqmLnf RKBhgdxsQLsMKCfnZQIBvxuOB5OgPmfOYovaYGBe2MjdH8+mewmAHReVXYCVYav1 M634lkeU1PXk76uImJ++FdNaq8gTzdQAo7UatL/FIesALkSpWvwIlb7U1SNrGZT+ xeE/ue7PgOwQXMoNS/1azn5b7VZ//o3qwW7ayxz5ltPkRUwJfMIF+le4NJg/oEie QX7/lZuYBFWpptPJvPs8asuZyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGATVBpQ qiL0B5j5JqUKXjraBvENMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyLp7ZIhRaujvoYB/4t0Dfye0V1YTNNNCmy3hAgix8/MiK85QFncpF VgOc5h6xINLpCwlnmdzHVIiQc4Hit5foCiYFkMOrhwtDqn2PXMFcO4r3irlhxcOo 76DtPA2uoNmZP6++AjeWtBGg46kHINSyVQmSxVwsupvqm3CBDFBl34SC/e3PyLjW 2S+t9oklElOlf2mb5mv1NyoG1BziHOh3ep7NksxmxeBKMP3++WdiydVdby9s6f09 QRdFtNkWeq69Urzc24IrcH/yFLa4yFVElf9MEKnr28iB0Q3ZFNwlcBu5op3gRyFL S/oLmTg4a/F8g9kBr/GByLxMx7R3KzoX -----END CERTIFICATE-----Generated at Tue May 14 19:10:15 2024 by rpki-client on console-ams.rpki-client.org