$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: 02hJfQjUJN/380Ej/EJqXGxA74NGZul7+sXzTelJZwo= Subject key identifier: 25:F5:12:80:67:B5:5D:05:5E:E9:4A:F5:36:6A:E4:2E:39:D5:F1:C7 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 075B Signing time: Thu 02 May 2024 22:32:23 +0000 Manifest this update: Thu 02 May 2024 22:32:23 +0000 Manifest next update: Thu 09 May 2024 22:32:22 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: 0b9sjDTCxzDaZ8NY6AIgOtthClg/88TZY9JkTnzWOa8=) 2: 15097D94C6E611EEAEFF385AC4F9AE02.roa (hash: WiheNduPT9/1phSGH9ZhAIu21BnbfwWda1qejJlRCvw=) 3: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: mg7CM9T6nrDJp0lRtMO5+iswfxR9UO5JiJnyXhM80YU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: May 2 22:32:23 2024 GMT Not After : May 9 22:32:22 2024 GMT Subject: CN=66341477-885a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:00:37:12:fd:6d:41:1d:f7:90:0d:98:67: da:d3:11:6c:29:aa:1c:60:1c:58:21:0b:63:30:2e: 73:ce:2f:21:23:86:14:ba:2e:2d:e3:ab:10:dd:f9: e2:8b:8a:3f:94:a0:2e:6c:be:93:e9:0e:44:9f:c3: b4:4f:2a:c2:20:cd:c8:dc:7a:c9:42:f3:84:e7:1f: 3b:b0:d6:11:ff:ea:dd:43:e4:9c:ea:ac:06:35:35: 2c:82:6f:b7:51:ab:3b:ca:61:83:c1:82:a2:41:c0: 23:ce:a5:48:fd:71:eb:49:7e:08:57:61:ce:22:57: 6b:45:f1:79:cd:85:f5:62:1c:12:10:d5:e4:5f:d7: 12:f9:af:b8:3f:16:00:0c:31:38:00:d7:c3:82:6a: 2a:c5:01:0e:4d:9f:36:64:7f:92:64:e5:61:e7:8b: 25:bc:42:9a:1f:1c:0a:30:3b:6c:00:7d:f6:d1:19: f8:60:b9:84:97:f5:81:4b:e6:b5:d5:45:4b:41:fe: 24:a8:a7:bb:29:ff:a9:a7:32:4e:d6:1f:e1:08:89: 01:27:58:3b:b0:c0:cd:4e:78:ef:d4:2a:e7:64:95: cb:89:81:47:b3:08:0f:df:87:5e:c6:9a:f1:3a:75: e8:0c:a1:7f:11:07:cd:5d:07:35:ef:31:e6:9d:17: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F5:12:80:67:B5:5D:05:5E:E9:4A:F5:36:6A:E4:2E:39:D5:F1:C7 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a2:05:70:c9:09:c8:f6:1a:93:53:66:b2:40:b2:df:2a:0c: 35:d0:2e:8a:88:75:02:c7:48:9e:11:e4:1b:61:4e:33:95:c0: 82:52:ac:be:81:74:3b:47:46:ed:91:2f:f8:b1:c6:ef:fe:2e: 59:1d:85:24:7a:6d:12:00:a5:76:7c:b6:0e:77:ea:51:e0:17: f1:d4:4e:60:22:75:eb:34:2b:cf:63:3d:7d:a4:6e:93:7d:05: 8b:cb:30:5a:86:e8:5b:0c:e7:5e:80:e1:20:83:ae:14:1a:04: 91:67:29:ce:d3:9e:51:09:38:42:a0:e7:87:a7:af:12:0f:67: a8:95:e0:4a:3f:af:8e:2e:93:b6:a8:dc:21:0f:80:33:12:56: 07:7a:e3:1d:41:11:f9:01:73:27:40:5d:36:04:aa:29:82:1c: 7c:60:78:fe:3f:d8:f4:e6:06:50:e0:0a:d6:34:41:0a:37:c7: a0:02:4b:b8:76:ae:61:51:05:d4:e1:ca:18:d2:2a:d9:e9:15: 2e:1d:b9:f4:0d:b3:e2:89:95:89:c8:ea:da:44:79:0b:71:4c: d8:8c:ab:7b:3a:80:79:cf:50:3d:85:92:54:84:c4:c2:f5:59: cd:6c:1d:15:02:49:35:16:80:d8:6e:c9:93:19:9b:3e:3a:7d: 45:7b:35:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjQwNTAyMjIzMjIzWhcNMjQwNTA5MjIzMjIyWjAYMRYwFAYD VQQDEw02NjM0MTQ3Ny04ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoMANxL9bUEd95ANmGfa0xFsKaocYBxYIQtjMC5zzi8hI4YUui4t46sQ3fni i4o/lKAubL6T6Q5En8O0TyrCIM3I3HrJQvOE5x87sNYR/+rdQ+Sc6qwGNTUsgm+3 Uas7ymGDwYKiQcAjzqVI/XHrSX4IV2HOIldrRfF5zYX1YhwSENXkX9cS+a+4PxYA DDE4ANfDgmoqxQEOTZ82ZH+SZOVh54slvEKaHxwKMDtsAH320Rn4YLmEl/WBS+a1 1UVLQf4kqKe7Kf+ppzJO1h/hCIkBJ1g7sMDNTnjv1CrnZJXLiYFHswgP34dexprx OnXoDKF/EQfNXQc17zHmnRe+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX1EoBn tV0FXulK9TZq5C451fHHMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpogVwyQnI9hqTU2ayQLLfKgw10C6KiHUCx0ieEeQbYU4zlcCCUqy+ gXQ7R0btkS/4scbv/i5ZHYUkem0SAKV2fLYOd+pR4Bfx1E5gInXrNCvPYz19pG6T fQWLyzBahuhbDOdegOEgg64UGgSRZynO055RCThCoOeHp68SD2eoleBKP6+OLpO2 qNwhD4AzElYHeuMdQRH5AXMnQF02BKopghx8YHj+P9j05gZQ4ArWNEEKN8egAku4 dq5hUQXU4coY0irZ6RUuHbn0DbPiiZWJyOraRHkLcUzYjKt7OoB5z1A9hZJUhMTC 9VnNbB0VAkk1FoDYbsmTGZs+On1FezUv -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org