$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: NDZfbmD2rl72Ps/4Ruw3QOXIx8M8bqtBOKVZT7bsR5A= Subject key identifier: 25:FB:6A:B2:62:2B:5D:16:8A:B9:FD:84:70:13:00:02:E8:23:07:CE Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0C16 Signing time: Mon 06 May 2024 19:13:10 +0000 Manifest this update: Mon 06 May 2024 19:13:09 +0000 Manifest next update: Mon 13 May 2024 19:13:09 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: YplXIcMMaEa3iAEMhPcP07LzxbdfXwRoLLeKAtFQxpc=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: zVCHn+B16uovb8iYfGPRv1+3pqv5L/1tF4Jgj3AV9zo=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: g2YYefDebt1ggBsxS/Az3CT7y0MM/TrYsNn5mU9ndnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: May 6 19:13:09 2024 GMT Not After : May 13 19:13:09 2024 GMT Subject: CN=66392bc5-7613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:e1:e4:5a:ba:00:e8:7b:51:dd:dc:dd:90: 8b:68:f2:45:19:16:c9:db:53:3e:ba:66:71:38:4a: 8f:aa:ad:d4:2a:51:00:c5:33:97:08:91:c1:a4:66: c8:35:29:37:57:51:00:e6:1d:53:00:5f:30:fc:98: 29:45:46:f0:45:55:ad:dd:36:12:31:3e:48:38:b3: 3f:1f:d9:90:ea:c7:e7:04:1c:77:f2:c5:69:6e:55: 1f:96:6d:03:b4:8f:64:4d:88:c8:fc:2c:81:91:f5: 8d:6a:1f:99:4e:bc:a9:f0:44:83:b2:af:e7:dc:23: 17:ab:bf:a7:71:34:d0:e0:b1:5e:04:b8:2b:6e:a4: c4:d6:fe:1e:e0:f0:16:b4:dd:35:70:32:88:18:84: a4:c3:1b:b7:28:f8:79:1a:8b:d4:22:6f:4c:56:c6: 02:b2:5f:da:58:47:db:90:ad:f0:74:e2:5f:9d:21: 85:79:56:89:9b:15:c5:fb:1c:26:d8:00:84:69:f2: 0e:65:19:7a:cf:ac:c3:ef:de:15:b2:71:14:41:18: e4:1c:73:9f:20:38:3f:3e:80:0d:99:4b:b0:d0:0a: c2:95:2e:6a:cc:af:8e:ac:d0:3f:6f:b9:13:1b:90: f0:6a:d4:5f:e2:25:79:4a:be:81:8e:4a:4f:ef:29: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FB:6A:B2:62:2B:5D:16:8A:B9:FD:84:70:13:00:02:E8:23:07:CE X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:a1:c9:61:9e:49:72:9c:25:71:90:00:0d:c3:52:ab:64: b6:5b:73:a7:57:53:3c:05:fa:67:40:e4:fe:6d:eb:4b:e3:09: 44:c7:89:97:83:22:08:dd:2b:f3:85:d8:5b:bf:aa:3b:fa:27: b3:96:12:bc:7e:b9:f7:0a:de:75:6e:40:7d:0b:8a:62:15:84: 61:e2:6a:ac:5e:89:10:74:f9:bf:0b:84:f0:bf:64:d6:eb:0b: 5b:37:8f:04:50:32:42:97:c5:7c:aa:56:21:bf:47:a7:47:a8: 9f:13:76:9d:89:53:9c:62:98:01:49:77:36:d8:c0:e2:61:c4: e2:64:76:cc:4d:c4:dd:16:12:36:5c:26:b9:40:28:be:79:cc: 34:5d:f0:42:aa:a4:3a:2b:b4:47:4a:f8:44:f5:3a:38:12:69: 2b:ac:a2:35:1d:06:80:be:96:fa:92:aa:56:72:1e:1f:47:d4: b9:a5:cf:a2:29:a5:92:dd:ef:40:80:cd:6d:65:2b:58:94:83: cb:45:d3:a8:38:a6:73:ec:a9:c1:05:81:b5:5a:02:ef:b6:e7: f1:3d:73:1c:63:80:74:89:99:bb:41:33:ba:d0:d1:0b:43:2e: 6e:af:4d:17:40:82:39:3a:5b:87:07:ae:86:bd:d9:42:70:62: 8c:2a:86:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjQwNTA2MTkxMzA5WhcNMjQwNTEzMTkxMzA5WjAYMRYwFAYD VQQDEw02NjM5MmJjNS03NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gLh5Fq6AOh7Ud3c3ZCLaPJFGRbJ21M+umZxOEqPqq3UKlEAxTOXCJHBpGbI NSk3V1EA5h1TAF8w/JgpRUbwRVWt3TYSMT5IOLM/H9mQ6sfnBBx38sVpblUflm0D tI9kTYjI/CyBkfWNah+ZTryp8ESDsq/n3CMXq7+ncTTQ4LFeBLgrbqTE1v4e4PAW tN01cDKIGISkwxu3KPh5GovUIm9MVsYCsl/aWEfbkK3wdOJfnSGFeVaJmxXF+xwm 2ACEafIOZRl6z6zD794VsnEUQRjkHHOfIDg/PoANmUuw0ArClS5qzK+OrNA/b7kT G5DwatRf4iV5Sr6BjkpP7ynapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX7arJi K10Wirn9hHATAALoIwfOMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChIqHJYZ5JcpwlcZAADcNSq2S2W3OnV1M8BfpnQOT+betL4wlEx4mX gyII3Svzhdhbv6o7+iezlhK8frn3Ct51bkB9C4piFYRh4mqsXokQdPm/C4Twv2TW 6wtbN48EUDJCl8V8qlYhv0enR6ifE3adiVOcYpgBSXc22MDiYcTiZHbMTcTdFhI2 XCa5QCi+ecw0XfBCqqQ6K7RHSvhE9To4EmkrrKI1HQaAvpb6kqpWch4fR9S5pc+i KaWS3e9AgM1tZStYlIPLRdOoOKZz7KnBBYG1WgLvtufxPXMcY4B0iZm7QTO60NEL Qy5ur00XQII5OluHB66GvdlCcGKMKoZ+ -----END CERTIFICATE-----Generated at Mon May 6 20:19:41 2024 by rpki-client on console-ams.rpki-client.org