$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: QAW5ECd5wGDGxr9bcl/D7YEzD1PtwmQ1Np1T3C+u2iI= Subject key identifier: 93:2A:F0:72:D8:F7:BE:DD:06:87:47:14:2A:CB:D8:A4:CD:C5:EF:3A Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0C7A Signing time: Thu 02 May 2024 18:57:36 +0000 Manifest this update: Thu 02 May 2024 18:57:35 +0000 Manifest next update: Thu 09 May 2024 18:57:35 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: tlIuihB154Faw9dIaW7RYlcAljb68ItFSdWch3XVZ/A=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: IB7muuWgoIPrUeluGMD/Apedgd2Et9x+hEkfcig0yHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: May 2 18:57:35 2024 GMT Not After : May 9 18:57:35 2024 GMT Subject: CN=6633e21f-dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:39:ea:36:4d:86:31:20:1c:7e:6f:b0:4d: 56:29:8b:13:b1:72:a0:a9:f7:75:bc:44:87:a6:f7: 22:79:bb:fe:1d:0f:30:dc:eb:a7:e3:21:52:06:46: 15:ec:86:e6:73:a4:ca:97:bc:78:bd:17:2a:8c:23: fa:60:90:7e:41:95:38:a6:7f:37:b8:86:07:5f:2a: dc:16:94:a9:e8:34:34:bc:b9:93:a0:f0:db:9d:8d: cd:ef:5f:32:4d:27:00:88:c8:7b:e0:65:55:79:88: a7:3a:43:0f:4c:4a:a2:8e:f1:78:31:9f:cc:f7:6b: 8a:d8:92:f6:14:35:81:bc:1c:8a:c2:a8:8c:a3:3c: 00:44:fc:4a:d2:d0:e9:1f:2b:0d:63:75:04:0b:f0: 97:f2:76:02:14:a9:8b:1e:ae:ef:55:2b:71:b6:04: f4:5c:07:0e:8f:fa:9d:2f:57:47:9c:d0:91:47:a3: ff:8d:8e:ea:92:95:57:9c:fa:0c:a6:13:cb:28:dd: 92:f1:71:d1:90:08:d2:3b:d0:94:72:43:21:03:15: 53:bc:f0:a0:c9:8f:34:00:2b:30:e8:34:51:78:24: d8:df:ba:b6:96:7b:7c:f7:5c:7e:4b:2f:0f:78:93: 81:91:d6:8f:d5:e8:a4:ac:d8:4c:78:93:1f:06:12: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:F0:72:D8:F7:BE:DD:06:87:47:14:2A:CB:D8:A4:CD:C5:EF:3A X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:77:e1:c7:b1:36:49:28:0e:e4:96:27:bc:9c:18:01:ab:e8: 4a:b2:10:f9:24:65:cc:c7:13:cf:28:86:9b:d4:17:d5:e7:5c: 5b:4f:06:d1:f9:42:3d:95:01:55:44:05:30:b9:81:37:e9:4b: 3d:2e:93:8d:70:c2:cb:f4:0e:f2:9b:14:a9:8b:77:e6:f8:1b: 08:b3:7f:46:06:84:c3:7b:cf:66:2d:8e:db:20:17:37:57:be: 5e:ad:97:a0:95:ae:38:a9:3d:17:32:2b:d5:06:7e:eb:6a:7c: ba:79:44:37:ba:46:08:ea:20:70:71:8b:47:ed:ea:0d:4d:41: 17:4b:cd:54:82:92:b9:66:6b:a3:17:0a:3b:22:65:f3:0a:c3: 28:2b:f1:e8:b8:ea:3d:8d:3e:c1:9c:4e:62:c2:82:1a:08:be: d0:1a:3b:46:ad:28:35:bb:5f:11:9a:f9:eb:8d:db:fc:3e:b1: 50:8e:69:61:27:aa:ff:a5:2a:99:d1:11:aa:a1:8d:65:76:0e: 8b:0e:9b:f8:dd:3f:db:ee:61:78:33:1f:e8:80:65:e9:55:d3: 5c:ac:91:c6:89:c2:0a:90:cb:ea:6e:5c:c3:d2:76:0a:f3:3f: ef:d2:f4:de:b2:dc:bd:5f:5e:cf:07:8c:06:72:fa:1a:6d:71: 19:b5:66:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjQwNTAyMTg1NzM1WhcNMjQwNTA5MTg1NzM1WjAYMRYwFAYD VQQDEw02NjMzZTIxZi1kYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYQ56jZNhjEgHH5vsE1WKYsTsXKgqfd1vESHpvciebv+HQ8w3Oun4yFSBkYV 7Ibmc6TKl7x4vRcqjCP6YJB+QZU4pn83uIYHXyrcFpSp6DQ0vLmToPDbnY3N718y TScAiMh74GVVeYinOkMPTEqijvF4MZ/M92uK2JL2FDWBvByKwqiMozwARPxK0tDp HysNY3UEC/CX8nYCFKmLHq7vVStxtgT0XAcOj/qdL1dHnNCRR6P/jY7qkpVXnPoM phPLKN2S8XHRkAjSO9CUckMhAxVTvPCgyY80ACsw6DRReCTY37q2lnt891x+Sy8P eJOBkdaP1eikrNhMeJMfBhLj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMq8HLY 977dBodHFCrL2KTNxe86MB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKd+HHsTZJKA7klie8nBgBq+hKshD5JGXMxxPPKIab1BfV51xbTwbR +UI9lQFVRAUwuYE36Us9LpONcMLL9A7ymxSpi3fm+BsIs39GBoTDe89mLY7bIBc3 V75erZegla44qT0XMivVBn7rany6eUQ3ukYI6iBwcYtH7eoNTUEXS81UgpK5Zmuj Fwo7ImXzCsMoK/HouOo9jT7BnE5iwoIaCL7QGjtGrSg1u18Rmvnrjdv8PrFQjmlh J6r/pSqZ0RGqoY1ldg6LDpv43T/b7mF4Mx/ogGXpVdNcrJHGicIKkMvqblzD0nYK 8z/v0vTesty9X17PB4wGcvoabXEZtWYI -----END CERTIFICATE-----Generated at Thu May 2 20:50:28 2024 by rpki-client on console-fra.rpki-client.org