$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: dK4c12MX80pkxvVcIm0Eg/lJ3C3ppI3XZpGQim0OhrI= Subject key identifier: 4C:49:33:62:BF:61:09:ED:8D:1C:A6:7A:9D:E4:0E:6E:B4:02:5A:DE Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 06A2 Signing time: Fri 26 Apr 2024 23:27:10 +0000 Manifest this update: Fri 26 Apr 2024 23:27:09 +0000 Manifest next update: Fri 03 May 2024 23:27:09 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 0jwYcqIWMa6b3JYgdoJiG9hz68HoI1zCSYzHHkL6+PU=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: 1+DFz3Ohl+K4Krz+OlUwDG7GSgikxyNy5V+bghBruP8=) 3: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (hash: t3kiYS7RBKX8pOw6LazGRwO8YQiJHUwwNHhDc8Cb27I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 26 23:27:09 2024 GMT Not After : May 3 23:27:09 2024 GMT Subject: CN=662c384e-6ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:28:8e:6d:9c:13:15:22:b6:1d:e5:94:4c: 43:35:de:43:6b:a5:6b:6b:ae:ad:b8:47:59:ed:da: 7e:b1:e5:cc:30:08:88:a3:73:0a:4f:f1:02:d7:4f: 02:88:aa:b1:7c:5b:a8:39:2b:c5:95:a7:be:da:a2: cb:1b:f1:26:1a:79:00:84:f6:86:96:35:ee:84:0b: e2:20:5a:6f:9c:a8:67:a4:c0:1a:15:0e:1e:e2:c3: 43:f9:e0:e2:35:98:57:29:5d:d4:e3:f1:80:f3:bf: c9:db:90:2a:16:91:40:cd:6d:6d:1b:d1:c8:52:aa: 5d:e3:ce:ec:b3:80:99:ab:20:ea:65:67:14:74:71: 19:8e:c2:36:33:16:fb:88:30:03:9c:03:10:06:0c: d7:28:98:e2:bd:bb:ac:9b:b7:6b:06:53:1f:e7:2b: 2b:8b:61:a2:17:89:51:df:fc:55:29:f5:65:9a:66: ca:30:9f:02:44:3c:6c:45:54:c1:8c:f0:af:32:c6: 68:76:25:09:a3:bf:8d:b6:b9:3a:23:b3:e3:6b:4a: ba:c9:99:4c:06:01:0f:b2:24:26:48:4a:be:99:8c: 15:3f:50:55:a6:4d:8b:54:c5:62:09:92:75:78:01: 67:b2:64:fd:35:b4:b6:3b:c4:de:07:d3:c3:7c:0a: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:49:33:62:BF:61:09:ED:8D:1C:A6:7A:9D:E4:0E:6E:B4:02:5A:DE X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d8:29:a6:00:8d:3b:5b:15:a7:b0:a7:78:2e:3f:99:2d:75: dd:d8:e3:5e:20:9c:ea:4f:e5:bd:a3:c0:67:4a:07:ed:7a:e8: 9a:3a:24:a1:4b:07:a0:59:b3:d8:60:7c:44:0a:21:1a:fb:cc: 72:95:30:fa:a4:83:24:b9:1c:c8:86:5b:1b:98:50:e1:b7:fd: b3:01:f1:e4:05:b1:8a:23:48:74:e1:39:4d:4b:87:03:a1:59: df:9c:1c:a8:bc:9f:11:b4:99:6e:4d:29:17:92:32:04:da:fd: 12:fa:74:70:b1:42:eb:f8:7c:97:90:01:20:a3:cc:79:ad:d9: 71:fb:f0:7a:dc:d8:7e:8d:b3:43:ba:db:2e:e9:9b:da:e7:70: 48:49:fd:7d:06:52:2a:b0:0d:87:29:42:1a:57:23:a0:24:dc: e1:7b:99:e5:7d:80:7c:a2:30:6d:83:2e:9e:bb:7f:a2:63:cd: 83:b0:a7:96:b2:b8:c2:61:bb:dc:b3:ef:94:86:49:ad:40:9a: d8:02:a9:06:9d:09:b7:84:1b:52:cc:a8:80:6b:1c:02:de:4d: bc:13:1f:84:8f:7b:9d:f3:15:72:95:d6:a9:c7:c2:a4:96:46: 77:c5:84:e4:dc:52:a3:d9:b8:61:a2:cb:80:ab:86:ca:82:ab: 9b:ba:40:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjQwNDI2MjMyNzA5WhcNMjQwNTAzMjMyNzA5WjAYMRYwFAYD VQQDEw02NjJjMzg0ZS02YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkEojm2cExUith3llExDNd5Da6Vra66tuEdZ7dp+seXMMAiIo3MKT/EC108C iKqxfFuoOSvFlae+2qLLG/EmGnkAhPaGljXuhAviIFpvnKhnpMAaFQ4e4sND+eDi NZhXKV3U4/GA87/J25AqFpFAzW1tG9HIUqpd487ss4CZqyDqZWcUdHEZjsI2Mxb7 iDADnAMQBgzXKJjivbusm7drBlMf5ysri2GiF4lR3/xVKfVlmmbKMJ8CRDxsRVTB jPCvMsZodiUJo7+Ntrk6I7Pja0q6yZlMBgEPsiQmSEq+mYwVP1BVpk2LVMViCZJ1 eAFnsmT9NbS2O8TeB9PDfAohVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExJM2K/ YQntjRymep3kDm60AlreMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ2CmmAI07WxWnsKd4Lj+ZLXXd2ONeIJzqT+W9o8BnSgfteuiaOiSh SwegWbPYYHxECiEa+8xylTD6pIMkuRzIhlsbmFDht/2zAfHkBbGKI0h04TlNS4cD oVnfnByovJ8RtJluTSkXkjIE2v0S+nRwsULr+HyXkAEgo8x5rdlx+/B63Nh+jbND utsu6Zva53BISf19BlIqsA2HKUIaVyOgJNzhe5nlfYB8ojBtgy6eu3+iY82DsKeW srjCYbvcs++UhkmtQJrYAqkGnQm3hBtSzKiAaxwC3k28Ex+Ej3ud8xVyldapx8Kk lkZ3xYTk3FKj2bhhosuAq4bKgqubukBF -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:19 2024 by rpki-client on console-ams.rpki-client.org