$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: JEea6t10xrIyeCBjXiaaLNaKi4nwMa7j4GP4R9c5y4U= Subject key identifier: CB:F8:3F:A7:A7:6E:75:2D:ED:80:B4:16:B8:FC:79:E5:33:93:E7:B0 Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: F2 Signing time: Tue 07 May 2024 05:45:31 +0000 Manifest this update: Tue 07 May 2024 05:45:31 +0000 Manifest next update: Tue 14 May 2024 05:45:31 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: D93Y2nWB7+rNNJ8gCLqSqJ0zfAuAQFwdIt2Gxe+PnPs=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: r6+NalhQ604cVd3gLURXmiC6zoTOs+1f6oA0iqxnYdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: May 7 05:45:31 2024 GMT Not After : May 14 05:45:31 2024 GMT Subject: CN=6639bffb-1f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:f0:cb:1f:92:6d:5d:53:75:ba:ed:7a:27: 1c:1e:7f:1e:c6:d0:88:54:4e:c5:de:ef:da:02:c8: 87:52:35:38:2e:9e:a0:80:c4:bc:04:b2:4d:f6:6b: 57:d7:ca:a6:bf:f0:c0:d8:fb:9c:cb:da:56:91:67: 34:b8:6e:77:49:f6:8a:00:54:a4:71:1a:fe:88:47: 8f:5d:84:f0:f9:ea:61:8c:95:a5:1c:2a:cc:d8:4b: a6:82:c0:ad:6d:26:29:cb:6c:41:bf:98:f9:f1:39: 21:e8:98:b8:0e:d7:8f:95:76:49:ea:e5:1a:6a:7f: 17:5c:a1:2e:41:e3:b9:e6:8e:2e:23:62:78:f0:a1: 35:5c:14:e2:95:60:b0:f0:8d:40:0f:b1:34:0a:e7: 32:93:ac:70:e1:51:07:39:f3:4a:3a:52:7e:2f:62: c3:54:7d:c3:6d:08:0b:4c:88:be:73:8c:88:6b:19: 35:1e:da:aa:a1:2a:04:0b:32:3f:59:06:05:16:b4: 59:69:9a:c6:25:4a:4d:19:2a:8a:f8:77:f6:8e:f4: 07:a9:52:c2:7c:17:7b:6e:61:f5:0d:48:3e:ab:78: 7b:0e:73:2e:29:8d:87:f8:c0:bb:35:4f:5c:02:be: ee:7e:2a:84:bc:12:aa:13:0e:96:bc:a7:ad:4f:bc: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:3F:A7:A7:6E:75:2D:ED:80:B4:16:B8:FC:79:E5:33:93:E7:B0 X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:49:e0:25:f3:4e:4c:c7:35:ae:a6:34:74:50:96:2d:e7:8f: 94:bf:62:03:b3:fb:cf:4b:b9:06:ff:ad:30:3a:c2:06:f8:ab: b2:d5:30:bf:5b:fe:db:77:3e:97:29:dd:67:5c:a3:8c:fd:ef: 95:6f:5e:9a:3c:3b:39:3f:8b:c9:63:ee:83:c6:5b:b7:05:d7: fc:b0:94:69:e8:ba:24:ff:f0:08:66:83:8f:75:22:a7:e2:56: db:78:e0:4a:f3:f5:13:66:6b:18:56:ab:64:a0:ee:f1:35:66: a4:db:0e:fb:1d:6c:d9:0b:6b:31:2c:50:c0:00:58:44:66:28: fd:d8:17:b4:7c:45:05:d0:ad:0f:1f:f8:1a:09:f2:ad:2a:94: aa:49:e3:fe:b8:e0:f2:aa:2a:d9:e8:72:da:5a:e1:60:40:1f: 6a:1b:03:e0:4f:0e:3c:5e:12:b6:e9:43:d6:d8:55:11:bf:d0: f9:83:7b:88:f1:e7:a2:a8:c7:58:02:53:36:6b:25:14:48:ff: 96:a2:ba:49:f6:b3:79:3c:73:6d:07:42:44:4d:e9:f1:d9:cf: 5a:da:b7:66:e2:09:79:d9:ba:b7:20:d8:b9:03:58:5b:64:f6: a6:3e:55:ed:53:b3:b5:1a:4d:1f:a5:53:96:ac:f1:bc:e5:94: 1b:5f:7f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjQwNTA3MDU0NTMxWhcNMjQwNTE0MDU0NTMxWjAYMRYwFAYD VQQDEw02NjM5YmZmYi0xZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGPwyx+SbV1TdbrteiccHn8extCIVE7F3u/aAsiHUjU4Lp6ggMS8BLJN9mtX 18qmv/DA2Pucy9pWkWc0uG53SfaKAFSkcRr+iEePXYTw+ephjJWlHCrM2EumgsCt bSYpy2xBv5j58Tkh6Ji4DtePlXZJ6uUaan8XXKEuQeO55o4uI2J48KE1XBTilWCw 8I1AD7E0Cucyk6xw4VEHOfNKOlJ+L2LDVH3DbQgLTIi+c4yIaxk1HtqqoSoECzI/ WQYFFrRZaZrGJUpNGSqK+Hf2jvQHqVLCfBd7bmH1DUg+q3h7DnMuKY2H+MC7NU9c Ar7ufiqEvBKqEw6WvKetT7xgswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv4P6en bnUt7YC0Frj8eeUzk+ewMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPSeAl805MxzWupjR0UJYt54+Uv2IDs/vPS7kG/60wOsIG+Kuy1TC/ W/7bdz6XKd1nXKOM/e+Vb16aPDs5P4vJY+6Dxlu3Bdf8sJRp6Lok//AIZoOPdSKn 4lbbeOBK8/UTZmsYVqtkoO7xNWak2w77HWzZC2sxLFDAAFhEZij92Be0fEUF0K0P H/gaCfKtKpSqSeP+uODyqirZ6HLaWuFgQB9qGwPgTw48XhK26UPW2FURv9D5g3uI 8eeiqMdYAlM2ayUUSP+WorpJ9rN5PHNtB0JETenx2c9a2rdm4gl52bq3INi5A1hb ZPamPlXtU7O1Gk0fpVOWrPG85ZQbX39g -----END CERTIFICATE-----Generated at Tue May 7 06:20:17 2024 by rpki-client on console-fra.rpki-client.org