$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: /jIfxdecW1M210AFigdG5zVvDjyeyEeAjlyT8JSkahM= Subject key identifier: 00:94:3E:76:0C:48:38:0A:AF:41:C5:7A:76:7F:62:4B:52:32:81:C2 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 06BE Signing time: Thu 02 May 2024 23:12:33 +0000 Manifest this update: Thu 02 May 2024 23:12:33 +0000 Manifest next update: Thu 09 May 2024 23:12:33 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: iWpUsbo4HXzPZnZRu4WhAoqtQrOo+NxBIs6buHt+IeY=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: pQKtdpCIXPQXEJuUNBTn18+ZC87Dv47jIb/GBvl5ETc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: May 2 23:12:33 2024 GMT Not After : May 9 23:12:33 2024 GMT Subject: CN=66341de1-a62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:b8:3a:0b:22:36:f4:03:2b:50:06:34:1a: 36:c5:a6:ca:57:3b:b7:b4:fe:6e:61:07:48:1d:86: 49:28:cc:9b:7a:37:cd:29:d1:c3:16:3e:1d:5d:dd: 23:76:52:4f:bb:16:09:d9:ba:1f:14:b4:a5:70:34: 98:51:00:2e:4c:f9:82:f7:6f:46:2d:2f:0d:da:fc: a7:5f:7f:ca:2f:bc:43:9a:1d:d8:35:2e:a1:85:56: dc:63:d8:47:88:f1:3b:73:59:d2:47:d5:f5:9e:83: 6e:29:b8:33:5c:52:c0:cc:fc:a8:fe:df:ce:5c:0c: 3e:5b:81:e1:4e:bc:75:9d:f5:62:a8:cb:00:01:9e: aa:e5:3b:29:f8:75:f0:0b:34:ce:91:2f:26:41:ba: 69:21:cd:7b:66:da:6c:ae:f5:a2:5f:3b:25:e4:60: 93:3b:a8:31:c6:5e:89:95:61:63:a6:f9:dc:89:41: 04:19:1b:04:8b:cb:db:e9:74:3c:05:86:5a:dd:e1: ce:40:1e:a6:59:8e:0e:2e:89:0d:2c:f8:69:39:7e: 59:11:3b:c2:0d:38:ab:6a:84:ea:43:02:e3:6e:62: 55:da:da:3a:9e:63:be:80:35:a4:34:06:17:a0:fd: a3:55:65:85:4b:4b:7a:e0:e2:e5:37:02:9d:7d:54: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:94:3E:76:0C:48:38:0A:AF:41:C5:7A:76:7F:62:4B:52:32:81:C2 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:c4:97:44:5b:2b:fc:59:4f:02:0c:d7:e7:cf:e3:00:51:47: 6d:c7:2e:5b:52:26:6e:e7:1c:aa:d0:6f:61:1e:11:d5:42:98: 67:13:14:0b:8f:f3:3e:20:2f:ba:ab:85:f3:11:37:74:f3:e4: cf:7d:7b:e3:64:29:53:2a:e6:f8:7a:8f:39:fb:47:d8:82:c2: c5:a3:11:be:d4:d8:f4:3c:fd:8d:d5:eb:1d:df:74:ff:05:2f: e7:0e:c6:aa:4b:6f:c6:2d:95:a8:9f:24:bf:ea:32:01:7b:c8: d4:a7:12:a9:85:52:5b:26:60:24:fc:3d:66:e8:8b:f7:d6:3c: a1:10:44:6c:f9:ca:c6:d4:4d:d4:25:5b:19:1f:3c:97:19:9e: 85:5d:67:fe:62:c6:e5:b5:69:6e:94:7d:27:16:b5:cd:af:70: d6:c5:2a:d9:ea:5d:55:59:93:d3:3c:d0:4e:f0:74:84:9e:ec: 4b:60:03:31:80:b1:cf:cb:d6:19:ce:96:a1:36:4f:7f:0f:fe: 55:51:8c:21:f9:9e:ca:b2:08:2d:61:ee:0b:6c:00:4f:6e:d4: c0:d0:4d:6b:18:84:6d:a2:9b:f0:72:31:31:80:ea:a2:e6:b5: 8c:53:8b:79:ab:93:62:59:23:22:81:bc:cd:c4:65:fc:f1:d6: 21:22:b7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjQwNTAyMjMxMjMzWhcNMjQwNTA5MjMxMjMzWjAYMRYwFAYD VQQDEw02NjM0MWRlMS1hNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP+4OgsiNvQDK1AGNBo2xabKVzu3tP5uYQdIHYZJKMybejfNKdHDFj4dXd0j dlJPuxYJ2bofFLSlcDSYUQAuTPmC929GLS8N2vynX3/KL7xDmh3YNS6hhVbcY9hH iPE7c1nSR9X1noNuKbgzXFLAzPyo/t/OXAw+W4HhTrx1nfViqMsAAZ6q5Tsp+HXw CzTOkS8mQbppIc17ZtpsrvWiXzsl5GCTO6gxxl6JlWFjpvnciUEEGRsEi8vb6XQ8 BYZa3eHOQB6mWY4OLokNLPhpOX5ZETvCDTiraoTqQwLjbmJV2to6nmO+gDWkNAYX oP2jVWWFS0t64OLlNwKdfVRcQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACUPnYM SDgKr0HFenZ/YktSMoHCMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbxJdEWyv8WU8CDNfnz+MAUUdtxy5bUiZu5xyq0G9hHhHVQphnExQL j/M+IC+6q4XzETd08+TPfXvjZClTKub4eo85+0fYgsLFoxG+1Nj0PP2N1esd33T/ BS/nDsaqS2/GLZWonyS/6jIBe8jUpxKphVJbJmAk/D1m6Iv31jyhEERs+crG1E3U JVsZHzyXGZ6FXWf+YsbltWlulH0nFrXNr3DWxSrZ6l1VWZPTPNBO8HSEnuxLYAMx gLHPy9YZzpahNk9/D/5VUYwh+Z7KsggtYe4LbABPbtTA0E1rGIRtopvwcjExgOqi 5rWMU4t5q5NiWSMigbzNxGX88dYhIrfV -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org