$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: QnQVFeykazIywkz96vyhWMMbUtOFSYAp7bUh5Zd1Fg0= Subject key identifier: DB:D9:A6:D2:39:21:08:09:69:9B:A7:AC:D3:A8:16:3A:EB:B3:12:F8 Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1B6D Signing time: Sat 04 May 2024 16:42:48 +0000 Manifest this update: Sat 04 May 2024 16:42:47 +0000 Manifest next update: Sat 11 May 2024 16:42:47 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: u/vuW59ZaOGWwQZPJY1IN3hqiZPkxbR9Z1k0s1Sy2xo=) 2: 2F341A72E93C11EDA61CF335C4F9AE02.roa (hash: M5RGvAdHd9jNB7xOnNh53+PVgXgdcc+v9pWLo+rFyQY=) 3: CF4257EEFEBD11EEA50E3240C4F9AE02.roa (hash: m2qWI7kWSh3RmiBcVxfB3QMSHoM+SuIpXaZf9pJnww8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7049 (0x1b89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: May 4 16:42:47 2024 GMT Not After : May 11 16:42:47 2024 GMT Subject: CN=66366588-569c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:16:11:91:c3:76:bd:3c:5a:5d:08:89:c9: 1a:dd:8c:35:4f:ae:08:47:c7:97:49:c8:88:10:3f: 95:41:2c:9d:e3:42:bc:b9:c2:59:4d:c1:cf:8b:39: 8a:9b:92:12:3f:a3:37:d5:4b:ad:c8:00:4b:20:db: 9a:d5:9a:23:d7:f6:2d:6c:69:8d:e5:66:15:b1:21: 2d:5e:6a:ff:b5:52:a5:33:1b:72:83:c9:a7:91:43: ee:99:df:02:9c:71:1c:b1:6f:ae:28:69:cb:44:ab: 3a:68:f1:29:f2:96:1c:8e:46:27:0f:98:be:f8:32: 3b:a7:98:b4:8b:1d:50:76:28:1d:07:5f:55:46:d1: 93:02:9a:21:45:b3:53:2c:05:fa:c4:10:51:14:31: 3a:54:13:33:fe:00:79:88:cf:cc:bf:48:2c:dc:20: 82:3f:d7:7c:48:1a:d3:af:a5:0d:20:81:83:86:07: 53:54:07:38:4f:58:83:e9:37:b9:6f:5c:31:a7:bf: bc:31:94:9c:83:6b:e9:57:24:be:53:92:73:93:ce: d8:4b:15:cf:03:1c:ee:82:7c:07:47:09:ce:19:39: ad:6b:e8:0d:ef:e9:ee:d4:3c:61:f1:ab:68:fb:06: 2f:50:49:b5:88:b8:6c:2f:1d:03:4b:d8:99:15:4b: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D9:A6:D2:39:21:08:09:69:9B:A7:AC:D3:A8:16:3A:EB:B3:12:F8 X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:40:c6:53:57:9d:24:81:97:b0:83:54:8b:e0:25:6e:32:14: 30:9c:b3:03:7e:0d:3b:ab:e4:65:33:19:72:a8:1b:39:50:f5: 54:5e:4a:41:58:a2:ae:4b:f6:51:93:34:6e:0d:b4:49:70:01: e1:c1:0a:90:9b:d7:0a:52:37:37:b3:8e:66:77:a5:6f:52:b0: e4:b8:66:39:62:ad:b8:8c:ba:ec:74:a4:9f:63:ad:58:8a:8d: d8:8c:69:3b:5b:79:7c:ff:d1:39:c8:1a:1f:ae:9d:e0:ba:62: 3e:f8:20:11:d6:be:c8:d0:70:65:4c:2e:db:67:9b:77:32:d9: ff:be:ce:72:de:6b:25:ff:8d:12:56:01:87:39:00:72:d0:0c: c3:78:fe:35:6a:be:c3:54:e1:df:d1:02:2c:c2:7c:12:6a:b8: 70:d4:0b:1e:4e:f8:bd:dc:9c:64:27:3f:70:0f:b0:01:29:6f: f5:af:4b:29:9b:53:71:e6:fc:3f:bb:18:5e:84:70:84:8a:75: ba:9e:a5:d3:c6:1e:b4:90:f4:3e:e8:ca:51:ca:52:0c:96:08: 1f:d7:6c:74:32:a7:00:39:26:5f:73:9b:1d:1b:56:df:b2:d6: f7:e4:c4:cb:67:12:06:d0:09:e4:99:54:ae:7c:d2:5c:de:a4: f4:63:2c:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjQwNTA0MTY0MjQ3WhcNMjQwNTExMTY0MjQ3WjAYMRYwFAYD VQQDEw02NjM2NjU4OC01NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JAWEZHDdr08Wl0Iicka3Yw1T64IR8eXSciIED+VQSyd40K8ucJZTcHPizmK m5ISP6M31UutyABLINua1Zoj1/YtbGmN5WYVsSEtXmr/tVKlMxtyg8mnkUPumd8C nHEcsW+uKGnLRKs6aPEp8pYcjkYnD5i++DI7p5i0ix1QdigdB19VRtGTApohRbNT LAX6xBBRFDE6VBMz/gB5iM/Mv0gs3CCCP9d8SBrTr6UNIIGDhgdTVAc4T1iD6Te5 b1wxp7+8MZScg2vpVyS+U5Jzk87YSxXPAxzugnwHRwnOGTmta+gN7+nu1Dxh8ato +wYvUEm1iLhsLx0DS9iZFUtpVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvZptI5 IQgJaZunrNOoFjrrsxL4MB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9QMZTV50kgZewg1SL4CVuMhQwnLMDfg07q+RlMxlyqBs5UPVUXkpB WKKuS/ZRkzRuDbRJcAHhwQqQm9cKUjc3s45md6VvUrDkuGY5Yq24jLrsdKSfY61Y io3YjGk7W3l8/9E5yBofrp3gumI++CAR1r7I0HBlTC7bZ5t3Mtn/vs5y3msl/40S VgGHOQBy0AzDeP41ar7DVOHf0QIswnwSarhw1AseTvi93JxkJz9wD7ABKW/1r0sp m1Nx5vw/uxhehHCEinW6nqXTxh60kPQ+6MpRylIMlggf12x0MqcAOSZfc5sdG1bf stb35MTLZxIG0AnkmVSufNJc3qT0Yyyv -----END CERTIFICATE-----Generated at Sat May 4 17:19:48 2024 by rpki-client on console-fra.rpki-client.org