$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: P6Zni6/Lhsp0M6eSrm8nWIegwAgRFzy6Lg3sXyYs6FM= Subject key identifier: C3:CE:D5:1E:51:52:BF:F5:0B:DB:5E:D0:32:EF:08:C1:A7:3C:7F:E2 Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 3148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3140 Signing time: Mon 06 May 2024 15:43:10 +0000 Manifest this update: Mon 06 May 2024 15:43:10 +0000 Manifest next update: Mon 13 May 2024 15:43:10 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: Fg3pBp+gcUY0Bh1e1Ozi468jatqFhwLX5wFRn0arnV4=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: vZA2+KWBR1wDSvH4IKxEBdO5KRub7QRUaZOldm9+tP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12616 (0x3148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: May 6 15:43:10 2024 GMT Not After : May 13 15:43:10 2024 GMT Subject: CN=6638fa8e-4ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:af:38:c9:9f:e3:2d:06:73:6a:42:0a:43: 0d:fb:fb:6f:0c:54:6f:6c:b1:0f:df:96:b5:9f:fe: bb:96:a7:6b:74:53:22:f2:15:37:1e:cd:ab:a9:28: 1d:58:26:9b:65:f3:f5:4a:ed:8b:e4:cb:00:32:1d: d7:56:09:ba:61:58:a6:8f:85:2d:00:5d:aa:0e:e0: ef:9d:61:a7:62:ec:47:5d:23:34:9f:97:9e:50:ec: 4d:a5:71:2e:aa:3f:4f:f5:df:b0:fd:7f:1a:74:4a: ad:df:04:fb:66:e1:7f:a9:81:37:ac:4d:e3:b7:67: 7b:15:84:3c:84:a5:6e:c8:83:de:5f:3e:b3:49:82: da:15:35:07:dd:c4:52:75:42:f1:b9:75:fb:52:0a: 87:5d:e1:e7:33:fc:e4:25:dc:09:4a:e5:43:55:e4: 35:e0:77:35:fc:57:8f:9f:71:1d:85:32:fb:56:ae: 8c:58:31:7d:ac:fd:68:ed:9a:95:4d:bc:c3:ef:e1: 49:f7:01:69:21:e1:04:8a:2f:08:ce:ef:8e:21:0b: 54:ae:b5:45:93:80:39:43:b4:09:cb:3d:0e:ff:e2: 87:4d:89:d5:3b:5a:84:84:b4:94:ba:68:4a:21:8a: e2:0e:24:11:01:5a:aa:b1:d7:d3:79:60:d4:46:a2: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:D5:1E:51:52:BF:F5:0B:DB:5E:D0:32:EF:08:C1:A7:3C:7F:E2 X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8f:58:48:28:c7:69:3e:7c:6c:90:df:3c:49:1b:4c:d0:55: 82:37:d3:dc:d2:31:af:69:dd:2a:7e:82:3d:98:97:bc:52:f3: 31:79:1f:2b:43:1b:20:0a:53:6a:dd:0f:b1:dd:c3:02:ae:7f: 3f:7d:3f:88:3b:47:c8:f3:2d:d4:92:94:b7:43:48:7a:e1:b5: 8b:32:fc:cb:1a:71:af:6c:f1:eb:60:75:6b:c1:bf:85:98:49: 44:12:14:06:82:92:b5:d1:de:af:ec:62:59:4f:c5:88:17:dd: 77:bf:c3:9c:55:27:0b:a1:eb:ec:d8:f6:df:57:92:2e:3b:22: 54:f5:97:c4:f5:cd:fc:66:dc:78:36:01:a4:76:29:5d:51:40: f3:7e:e4:0e:44:f8:58:ae:43:27:f6:b3:a1:b4:34:32:29:31: 14:bd:66:df:1d:63:c4:73:d8:9d:b1:f0:c8:34:d2:45:5a:5d: 32:c2:50:7c:49:82:73:1e:cc:f8:7e:10:e9:55:ec:ec:2a:2d: df:c3:55:8c:a9:ed:26:1d:7d:d0:a2:42:01:13:a3:e8:6d:e6: c4:c8:29:65:4a:fe:86:81:ec:17:43:f4:84:64:46:74:78:d9: ea:fc:7d:c4:37:f9:46:de:a5:57:62:c0:25:40:c7:1b:0c:6c: 6c:10:b2:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjQwNTA2MTU0MzEwWhcNMjQwNTEzMTU0MzEwWjAYMRYwFAYD VQQDEw02NjM4ZmE4ZS00ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY6vOMmf4y0Gc2pCCkMN+/tvDFRvbLEP35a1n/67lqdrdFMi8hU3Hs2rqSgd WCabZfP1Su2L5MsAMh3XVgm6YVimj4UtAF2qDuDvnWGnYuxHXSM0n5eeUOxNpXEu qj9P9d+w/X8adEqt3wT7ZuF/qYE3rE3jt2d7FYQ8hKVuyIPeXz6zSYLaFTUH3cRS dULxuXX7UgqHXeHnM/zkJdwJSuVDVeQ14Hc1/FePn3EdhTL7Vq6MWDF9rP1o7ZqV TbzD7+FJ9wFpIeEEii8Izu+OIQtUrrVFk4A5Q7QJyz0O/+KHTYnVO1qEhLSUumhK IYriDiQRAVqqsdfTeWDURqKiVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPO1R5R Ur/1C9te0DLvCMGnPH/iMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1j1hIKMdpPnxskN88SRtM0FWCN9Pc0jGvad0qfoI9mJe8UvMxeR8r QxsgClNq3Q+x3cMCrn8/fT+IO0fI8y3UkpS3Q0h64bWLMvzLGnGvbPHrYHVrwb+F mElEEhQGgpK10d6v7GJZT8WIF913v8OcVScLoevs2PbfV5IuOyJU9ZfE9c38Ztx4 NgGkdildUUDzfuQORPhYrkMn9rOhtDQyKTEUvWbfHWPEc9idsfDINNJFWl0ywlB8 SYJzHsz4fhDpVezsKi3fw1WMqe0mHX3QokIBE6PobebEyCllSv6GgewXQ/SEZEZ0 eNnq/H3EN/lG3qVXYsAlQMcbDGxsELKy -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org