$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json) Hash identifier: pegxH6O3qfA44qqyRWL+tgnZpc6XEF8kvhBSsZVYaUM= Subject key identifier: E4:72:18:5A:D1:38:16:74:4E:7F:65:68:18:B1:F5:31:1C:EF:5C:1F Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft Manifest number: 1B0D Signing time: Wed 08 May 2024 16:47:07 +0000 Manifest this update: Wed 08 May 2024 16:47:06 +0000 Manifest next update: Wed 15 May 2024 16:47:06 +0000 Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: mZiB08xDHUL2Y9wMrNnbqkK42eHR2XJQMSNl/HKJ/E0=) 2: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: WA5ikv41pY4Bzl1xNf46w/nTz1YDB+6f/VZ1EYjQOB8=) 3: 4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa (hash: 6rJ29r7V7x2kdEaobkC8UyArL50UhY9DBVuE2HNSOQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Validity Not Before: May 8 16:47:06 2024 GMT Not After : May 15 16:47:06 2024 GMT Subject: CN=663bac8b-10a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:1c:5a:f0:58:89:bb:92:65:0c:31:67:94: 79:2c:07:57:0d:15:ad:03:b2:39:93:a1:39:5c:b3: cb:17:a5:a0:54:60:f6:ce:ee:df:10:aa:0c:f8:e2: bd:79:74:60:64:73:a0:dc:5f:d9:e7:35:21:ba:a2: e6:39:6b:a5:d9:11:b8:1d:fd:52:69:46:42:ea:3d: 29:e1:c4:c7:26:78:b6:ec:61:da:99:f3:48:8a:68: f3:cf:7a:4b:fc:21:86:5f:f4:ca:51:cd:1a:81:88: 16:08:5d:2f:0e:87:72:82:98:7c:66:c4:e0:5f:3d: 8f:50:30:dd:8f:a5:68:da:31:ba:75:34:f7:16:e9: 70:88:0f:95:4e:ad:b4:cb:1e:0c:b1:ca:96:6f:ba: bb:0b:08:de:4f:f4:aa:ef:17:8a:1f:12:b3:b8:4b: 08:07:92:c7:ff:f6:3b:a2:4d:5f:ef:3e:f8:7d:8c: 0b:97:73:3d:6b:8f:df:db:c3:a0:5d:18:a0:f3:fb: 14:48:7c:ec:0c:a1:8b:af:80:b9:3a:e2:7f:3a:fa: a1:a1:57:7b:7f:f2:d8:e5:3c:b9:28:c8:44:4d:a5: 96:4a:1c:93:04:c3:47:4f:74:36:4a:29:58:89:e7: ff:02:af:a0:d8:22:46:55:43:0a:37:70:f2:37:08: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:72:18:5A:D1:38:16:74:4E:7F:65:68:18:B1:F5:31:1C:EF:5C:1F X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e6:47:e6:bb:29:0d:8d:fd:64:17:89:d7:dd:d3:84:50:88: 25:52:14:01:37:b5:da:04:4c:fd:5c:88:a2:3c:39:73:c4:b0: 53:44:9f:7e:62:af:16:86:58:1a:79:3d:54:97:85:28:c6:c8: b5:0f:28:08:7a:f8:7f:64:22:34:c8:45:4c:c4:75:04:86:bb: 96:df:0d:01:13:9c:35:a6:bd:ef:d5:d7:26:c7:74:17:64:ea: 99:46:7a:d5:59:13:2e:95:0e:28:97:e5:33:6a:57:32:6a:99: eb:d8:3e:e9:48:07:57:11:8d:3b:b4:6d:63:d6:57:d1:5a:91: 62:92:69:aa:6d:81:9e:f6:18:c2:1c:3a:b1:ee:16:db:aa:8a: ef:4b:31:1c:0c:98:24:fe:35:95:89:0d:69:4c:0b:71:07:b6: 33:4a:ba:5c:a8:4e:60:b3:a4:99:e2:e4:06:6f:fe:a2:7f:f4: 05:70:0e:d7:60:8c:bc:5f:17:61:4d:5e:b9:be:0f:fc:a9:ed: ac:a2:82:03:b7:bb:0d:a3:df:41:78:26:e0:55:8a:10:a9:7f: ca:c8:98:05:0e:d8:96:87:32:49:a5:a7:e3:49:4d:f8:73:21: 4d:a4:80:38:8c:4a:57:58:fd:c2:b2:fe:0b:25:f7:8d:4e:87: bf:7b:bc:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjQwNTA4MTY0NzA2WhcNMjQwNTE1MTY0NzA2WjAYMRYwFAYD VQQDEw02NjNiYWM4Yi0xMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IEcWvBYibuSZQwxZ5R5LAdXDRWtA7I5k6E5XLPLF6WgVGD2zu7fEKoM+OK9 eXRgZHOg3F/Z5zUhuqLmOWul2RG4Hf1SaUZC6j0p4cTHJni27GHamfNIimjzz3pL /CGGX/TKUc0agYgWCF0vDodygph8ZsTgXz2PUDDdj6Vo2jG6dTT3FulwiA+VTq20 yx4MscqWb7q7CwjeT/Sq7xeKHxKzuEsIB5LH//Y7ok1f7z74fYwLl3M9a4/f28Og XRig8/sUSHzsDKGLr4C5OuJ/OvqhoVd7f/LY5Ty5KMhETaWWShyTBMNHT3Q2SilY ief/Aq+g2CJGVUMKN3DyNwhZ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORyGFrR OBZ0Tn9laBix9TEc71wfMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1 eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq5kfmuykNjf1kF4nX3dOEUIglUhQBN7XaBEz9XIiiPDlzxLBTRJ9+ Yq8WhlgaeT1Ul4Uoxsi1DygIevh/ZCI0yEVMxHUEhruW3w0BE5w1pr3v1dcmx3QX ZOqZRnrVWRMulQ4ol+Uzalcyapnr2D7pSAdXEY07tG1j1lfRWpFikmmqbYGe9hjC HDqx7hbbqorvSzEcDJgk/jWViQ1pTAtxB7YzSrpcqE5gs6SZ4uQGb/6if/QFcA7X YIy8XxdhTV65vg/8qe2sooIDt7sNo99BeCbgVYoQqX/KyJgFDtiWhzJJpafjSU34 cyFNpIA4jEpXWP3Csv4LJfeNToe/e7yQ -----END CERTIFICATE-----Generated at Wed May 8 17:47:03 2024 by rpki-client on console-ams.rpki-client.org