$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: Yj+9pnU+7qb7LFziqBC4ZGg14R8TyriREx1+x23RobY= Subject key identifier: 48:67:B7:13:E9:B1:E7:75:1D:C5:95:C0:EC:B0:7E:8C:58:27:0D:20 Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 02CE Signing time: Tue 07 May 2024 03:23:08 +0000 Manifest this update: Tue 07 May 2024 03:23:07 +0000 Manifest next update: Tue 14 May 2024 03:23:07 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: Diy/mZZHmaNKEDmY1BrYrHJIeB8PExm7TKoWoFcoaBc=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: lcnwa99qC1/CfBKm/j9U4Xa9EJ5wsMYeaygJQi9rO/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: May 7 03:23:07 2024 GMT Not After : May 14 03:23:07 2024 GMT Subject: CN=66399e9b-39dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:26:70:69:c6:1b:6a:52:21:fc:13:7f:31: 0d:60:dc:8e:4a:ac:4b:d5:e8:6a:96:17:44:93:bb: 22:0f:23:61:5e:36:b7:b9:9e:28:af:d3:b0:bb:38: 32:56:60:4f:b3:0f:01:51:d8:0d:41:2e:37:59:54: b2:25:ee:2c:07:a0:ad:f8:6f:bd:ee:6d:90:da:6c: d3:d8:75:31:df:d1:3e:c6:d0:11:15:bb:35:4d:ec: f4:f7:31:e8:e9:42:0e:be:bb:b7:60:f8:e5:5b:6f: 3d:70:72:06:fa:9f:05:14:a3:c7:aa:be:e5:86:08: a4:3e:f4:b7:26:e3:f7:ea:55:b1:ca:45:bb:ef:37: 09:29:dd:3b:f6:a0:77:65:29:b3:44:91:60:9d:b7: 0f:09:10:b9:26:62:7b:ac:79:0b:d8:9f:50:4a:c0: 11:64:c4:8b:b1:3a:f1:c8:99:e9:b2:a4:0e:b2:e7: f4:99:a9:48:68:80:09:ad:73:e4:f9:19:dd:da:7e: 64:4c:95:f6:ab:aa:ad:6c:da:98:ec:c2:47:7e:4e: 6f:73:91:8d:59:13:67:2e:13:3d:d0:78:4e:8d:cf: d1:ec:e3:d3:ee:28:a8:5f:58:0b:af:73:c6:be:55: b2:7c:22:78:ca:6f:8c:89:42:27:f1:77:9a:a0:9f: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:67:B7:13:E9:B1:E7:75:1D:C5:95:C0:EC:B0:7E:8C:58:27:0D:20 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b1:8a:25:d5:6f:7f:52:80:4c:84:f4:c9:ba:a8:c4:a3:73: 5c:3f:f9:de:da:1d:72:dd:26:8b:4c:30:73:75:79:ac:81:83: 9d:ed:56:b6:b8:72:df:3e:06:46:74:8f:f5:bc:6a:f6:da:ec: 6d:d4:e0:65:58:63:aa:74:e2:9e:be:3f:dd:d2:47:a4:e5:9e: 07:d6:d2:16:10:78:e2:39:3f:a0:62:a6:48:7e:ec:b2:d5:66: f9:c8:b9:fd:fc:ee:54:c4:bc:b7:2e:df:4d:fc:6d:da:d0:ba: 0c:d0:4c:00:7e:e3:c2:61:3e:67:17:0a:c3:44:2b:8d:e1:cb: ef:b8:3d:c3:ec:e4:b2:a2:85:df:88:b5:25:17:95:66:b1:42: 0b:16:67:6c:7d:14:ec:4f:01:4e:f1:fd:9e:d5:8d:44:52:4c: 74:fc:75:2b:70:26:74:5f:17:92:cd:f9:a6:8a:30:1a:6e:dc: 43:35:eb:59:8d:fb:4c:bd:cd:28:49:a1:8d:30:0d:da:0a:dd: e5:d2:40:0b:9c:ac:ae:42:23:0f:99:9b:5b:8b:29:07:23:45: 5d:f1:bc:be:a4:b0:a2:b9:b0:58:22:5c:0b:1c:a7:5b:b9:be: 78:11:93:54:1c:10:8b:66:d2:23:92:ec:fa:9f:e5:28:cb:8f: 55:47:d6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjQwNTA3MDMyMzA3WhcNMjQwNTE0MDMyMzA3WjAYMRYwFAYD VQQDEw02NjM5OWU5Yi0zOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFEmcGnGG2pSIfwTfzENYNyOSqxL1ehqlhdEk7siDyNhXja3uZ4or9Owuzgy VmBPsw8BUdgNQS43WVSyJe4sB6Ct+G+97m2Q2mzT2HUx39E+xtARFbs1Tez09zHo 6UIOvru3YPjlW289cHIG+p8FFKPHqr7lhgikPvS3JuP36lWxykW77zcJKd079qB3 ZSmzRJFgnbcPCRC5JmJ7rHkL2J9QSsARZMSLsTrxyJnpsqQOsuf0malIaIAJrXPk +Rnd2n5kTJX2q6qtbNqY7MJHfk5vc5GNWRNnLhM90HhOjc/R7OPT7iioX1gLr3PG vlWyfCJ4ym+MiUIn8XeaoJ9vWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhntxPp sed1HcWVwOywfoxYJw0gMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEsYol1W9/UoBMhPTJuqjEo3NcP/ne2h1y3SaLTDBzdXmsgYOd7Va2 uHLfPgZGdI/1vGr22uxt1OBlWGOqdOKevj/d0kek5Z4H1tIWEHjiOT+gYqZIfuyy 1Wb5yLn9/O5UxLy3Lt9N/G3a0LoM0EwAfuPCYT5nFwrDRCuN4cvvuD3D7OSyooXf iLUlF5VmsUILFmdsfRTsTwFO8f2e1Y1EUkx0/HUrcCZ0XxeSzfmmijAabtxDNetZ jftMvc0oSaGNMA3aCt3l0kALnKyuQiMPmZtbiykHI0Vd8by+pLCiubBYIlwLHKdb ub54EZNUHBCLZtIjkuz6n+Uoy49VR9Yn -----END CERTIFICATE-----Generated at Tue May 7 03:49:59 2024 by rpki-client on console-ams.rpki-client.org