$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: mNWZ/UZN4al9jlA88clPsxBJLKam1s4yuKen7pg4pPA= Subject key identifier: B0:82:71:94:C2:37:BF:95:A7:DE:0B:E3:57:F1:E5:3C:B7:6B:29:0E Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 062B Signing time: Mon 06 May 2024 23:48:41 +0000 Manifest this update: Mon 06 May 2024 23:48:40 +0000 Manifest next update: Mon 13 May 2024 23:48:40 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: 3gyKpSFw6ZYIA0nkoK6d7CM9IiWEPevR7hQz6GrT2L4=) 2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: fwrCj5M6hmFqw7LSn8k1W73ZsRaS1cPrTIz4W++dK2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: May 6 23:48:40 2024 GMT Not After : May 13 23:48:40 2024 GMT Subject: CN=66396c59-a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:c6:31:b5:12:cd:96:f1:ff:5d:a3:67:70: 03:26:4c:cd:73:f6:6e:b9:55:c8:bb:8b:ad:51:24: 28:67:7e:29:b3:f8:7c:c8:08:0a:a6:a1:65:94:db: c8:7a:78:8a:83:2e:f8:a9:c3:58:83:74:a5:ef:63: a8:95:3d:93:61:04:fa:3e:95:11:d6:da:03:71:89: 55:a0:2d:53:96:06:1e:19:78:00:7b:96:f4:93:0e: e9:fa:08:b8:0d:64:2e:a6:e4:2c:53:26:db:fd:24: 8d:f0:bc:5f:2c:ed:1d:83:a5:3b:8d:ac:64:a5:64: 23:3a:9d:8f:20:54:58:cd:a5:76:1f:1e:38:ff:77: 78:02:25:63:b2:93:b1:04:6a:0d:2f:28:48:31:9e: 9f:4c:60:b8:72:59:f2:2f:bf:32:42:43:71:36:27: 80:f2:85:18:f5:0e:6a:48:10:c1:bf:c0:54:73:0a: 73:db:48:d8:a5:c8:47:55:2b:60:4e:19:fb:3e:dc: 76:ee:92:6a:8a:7c:f0:77:e4:12:ab:f3:18:4f:9f: a7:5a:0a:ab:fc:67:07:20:14:66:af:16:cf:41:45: 7a:38:71:b8:30:b4:7c:44:40:6c:2a:bf:af:97:73: 89:8a:b1:03:b1:6c:27:9a:e1:64:9d:63:17:6c:33: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:82:71:94:C2:37:BF:95:A7:DE:0B:E3:57:F1:E5:3C:B7:6B:29:0E X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6a:cb:c2:52:27:4b:d1:64:48:74:65:fa:91:3a:af:20:9b: cd:02:d1:c1:a8:c0:a4:e2:85:02:80:36:55:1c:ce:9c:22:8d: 7f:e0:a4:68:dd:09:2f:3d:23:95:f3:5e:1a:94:f2:46:6e:73: 82:67:04:f6:32:91:6d:d1:8e:d1:b9:4c:1b:d0:f8:36:5d:0f: 67:21:37:c5:87:b5:9f:e3:41:43:51:96:bc:b6:40:5b:14:36: 76:34:66:a7:6d:fd:8d:02:59:88:d5:ff:8f:ad:14:0c:7e:1e: 20:ee:41:eb:ff:e4:1f:37:22:db:15:d6:31:ee:cc:06:dc:d7: 17:5c:dc:90:6c:7c:14:02:21:c5:4c:91:bb:a1:b5:7d:eb:8f: b0:06:cd:ff:fe:e1:1d:ab:89:4d:5e:fd:e1:ab:53:f9:b0:ad: f2:9f:a3:4f:80:5b:f0:c2:0f:d6:6e:82:f6:6d:96:86:7b:96: 6b:15:66:84:b4:37:3f:ef:61:1f:0b:19:5b:35:4a:0f:7f:9c: 6a:01:a9:3e:f4:b7:44:89:91:3a:00:cf:78:ba:b0:f6:a8:0a: c0:b5:bf:ab:cc:1a:fa:0c:a8:9b:65:12:71:1a:a3:1e:3e:24: c6:1e:8b:1d:9b:7f:24:da:ee:f5:c5:d2:7c:f1:f7:83:99:7d: fc:87:c9:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjQwNTA2MjM0ODQwWhcNMjQwNTEzMjM0ODQwWjAYMRYwFAYD VQQDEw02NjM5NmM1OS1hOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlubGMbUSzZbx/12jZ3ADJkzNc/ZuuVXIu4utUSQoZ34ps/h8yAgKpqFllNvI eniKgy74qcNYg3Sl72OolT2TYQT6PpUR1toDcYlVoC1TlgYeGXgAe5b0kw7p+gi4 DWQupuQsUybb/SSN8LxfLO0dg6U7jaxkpWQjOp2PIFRYzaV2Hx44/3d4AiVjspOx BGoNLyhIMZ6fTGC4clnyL78yQkNxNieA8oUY9Q5qSBDBv8BUcwpz20jYpchHVStg Thn7Ptx27pJqinzwd+QSq/MYT5+nWgqr/GcHIBRmrxbPQUV6OHG4MLR8REBsKr+v l3OJirEDsWwnmuFknWMXbDN6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCCcZTC N7+Vp94L41fx5Ty3aykOMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiasvCUidL0WRIdGX6kTqvIJvNAtHBqMCk4oUCgDZVHM6cIo1/4KRo 3QkvPSOV814alPJGbnOCZwT2MpFt0Y7RuUwb0Pg2XQ9nITfFh7Wf40FDUZa8tkBb FDZ2NGanbf2NAlmI1f+PrRQMfh4g7kHr/+QfNyLbFdYx7swG3NcXXNyQbHwUAiHF TJG7obV964+wBs3//uEdq4lNXv3hq1P5sK3yn6NPgFvwwg/WboL2bZaGe5ZrFWaE tDc/72EfCxlbNUoPf5xqAak+9LdEiZE6AM94urD2qArAtb+rzBr6DKibZRJxGqMe PiTGHosdm38k2u71xdJ88feDmX38h8k9 -----END CERTIFICATE-----Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org