$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: GAM1MgGmgiURXgLyCFtq5qOTG9EPtELVN1gnCJNVhs0= Subject key identifier: 4D:51:2E:DB:0D:F6:22:B2:22:44:D6:84:01:8E:28:41:DF:97:B4:FE Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 0434 Signing time: Tue 07 May 2024 01:58:29 +0000 Manifest this update: Tue 07 May 2024 01:58:28 +0000 Manifest next update: Tue 14 May 2024 01:58:28 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: TByKSDB/a+xYyo3ONQcT99JnA8z32MHL4LKXykKOJVg=) 2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: 1jP6i/gsW4Ign+tinc9Mjc3nf9zy4YX6dc8pTLkyDlc=) 3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: i4LNQJdXVnQGG0Fh4VUlSUudPn6+NsNVOnFcO5PJHmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: May 7 01:58:28 2024 GMT Not After : May 14 01:58:28 2024 GMT Subject: CN=66398ac4-24f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:bc:36:c8:2e:54:3e:27:e2:6f:fe:3b:63: cb:0f:8f:d6:88:e6:f6:34:7c:bd:74:cc:ab:16:20: ef:a3:3b:10:b6:7a:18:f3:91:8d:fe:24:61:e5:b1: 7c:66:9d:b0:7f:31:74:fc:00:0a:40:c2:32:18:f6: 04:b4:46:0c:7a:0e:a7:36:e1:4c:9b:21:67:fb:c1: ed:92:f5:c4:17:d6:13:84:bc:3d:f2:66:13:5d:be: 1c:fd:57:74:63:74:08:98:6c:1a:66:81:80:6a:10: 0d:bb:d0:9c:91:d9:12:86:c0:44:af:30:13:b0:df: d2:be:4d:7d:eb:e1:56:7e:b2:15:fd:a0:54:41:06: de:0b:60:3d:26:f9:b5:63:44:b0:bc:56:f4:a7:81: 3f:ab:cd:f9:a4:0d:1c:32:18:95:a5:1c:b9:bf:27: 68:fc:9f:4a:9d:b6:b3:59:ed:cd:a0:5b:57:70:21: 58:9c:82:66:b8:d5:c3:3e:48:0c:9b:c2:0b:f5:00: f5:0a:fe:6d:bd:dd:77:5a:7a:ce:ea:39:54:f3:56: 88:c7:48:92:9e:e5:2f:d7:2e:87:5b:b0:91:df:f9: d6:af:3f:ae:08:9d:ab:3a:54:7a:de:4a:ce:ac:17: d3:07:96:ef:e4:18:bd:40:32:b7:e2:59:da:15:3b: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:51:2E:DB:0D:F6:22:B2:22:44:D6:84:01:8E:28:41:DF:97:B4:FE X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:da:80:06:cc:f7:65:eb:16:3e:d4:0a:63:78:0d:7b:1a:8e: 4f:43:64:cb:ad:9f:5b:43:3a:43:06:02:21:42:ab:03:dc:f9: 10:48:07:75:b4:38:7b:25:2b:21:86:e2:eb:44:a0:89:f5:51: 2f:91:34:8a:43:4b:8a:08:d1:50:04:7f:29:a3:b7:71:2d:2c: 3b:86:b1:ec:8a:c0:d2:42:7f:28:29:52:07:38:e8:77:18:a7: 3e:40:e5:8d:0a:97:df:e6:62:f4:b6:bc:67:cd:1b:86:4a:0a: ad:96:4d:66:5b:4d:f1:a9:80:a4:b4:a1:a5:db:55:2d:75:ee: 83:f1:97:cf:7c:e3:0e:2b:63:0e:1c:4a:aa:70:92:40:c5:83: 3d:a7:8e:9f:1b:a1:fb:1f:b4:03:54:27:92:09:84:af:95:28: 07:af:84:55:16:e7:89:46:2b:16:ac:cb:ae:6a:b0:f9:36:3c: 4b:70:2b:e6:ce:5e:ac:9b:2a:41:91:67:dd:bd:16:6b:53:00: ea:8f:bd:d2:f3:7b:2f:b9:db:f4:78:4e:a5:05:28:67:b1:9b: 3e:34:3c:36:8c:11:c5:04:13:53:36:0e:25:b5:60:eb:b6:db: 39:30:f6:e7:da:dc:3b:33:aa:64:4b:33:c4:f3:73:50:a9:42: 0e:dd:26:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjQwNTA3MDE1ODI4WhcNMjQwNTE0MDE1ODI4WjAYMRYwFAYD VQQDEw02NjM5OGFjNC0yNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cy8NsguVD4n4m/+O2PLD4/WiOb2NHy9dMyrFiDvozsQtnoY85GN/iRh5bF8 Zp2wfzF0/AAKQMIyGPYEtEYMeg6nNuFMmyFn+8HtkvXEF9YThLw98mYTXb4c/Vd0 Y3QImGwaZoGAahANu9CckdkShsBErzATsN/Svk196+FWfrIV/aBUQQbeC2A9Jvm1 Y0SwvFb0p4E/q835pA0cMhiVpRy5vydo/J9KnbazWe3NoFtXcCFYnIJmuNXDPkgM m8IL9QD1Cv5tvd13WnrO6jlU81aIx0iSnuUv1y6HW7CR3/nWrz+uCJ2rOlR63krO rBfTB5bv5Bi9QDK34lnaFTuslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1RLtsN 9iKyIkTWhAGOKEHfl7T+MB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa2oAGzPdl6xY+1ApjeA17Go5PQ2TLrZ9bQzpDBgIhQqsD3PkQSAd1 tDh7JSshhuLrRKCJ9VEvkTSKQ0uKCNFQBH8po7dxLSw7hrHsisDSQn8oKVIHOOh3 GKc+QOWNCpff5mL0trxnzRuGSgqtlk1mW03xqYCktKGl21Utde6D8ZfPfOMOK2MO HEqqcJJAxYM9p46fG6H7H7QDVCeSCYSvlSgHr4RVFueJRisWrMuuarD5NjxLcCvm zl6smypBkWfdvRZrUwDqj73S83svudv0eE6lBShnsZs+NDw2jBHFBBNTNg4ltWDr tts5MPbn2tw7M6pkSzPE83NQqUIO3SYL -----END CERTIFICATE-----Generated at Tue May 7 03:12:20 2024 by rpki-client on console-fra.rpki-client.org