$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: 6EoVgdb6guhQWDZ4kBWLc7URogm9rdR+oe1LEuxjTac= Subject key identifier: 9C:C3:A2:CF:59:D6:96:8C:40:FE:A9:43:E8:D7:64:78:98:7E:BE:3A Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 01A2 Signing time: Tue 07 May 2024 04:37:02 +0000 Manifest this update: Tue 07 May 2024 04:37:01 +0000 Manifest next update: Tue 14 May 2024 04:37:01 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: KsNzghZl8TuCkrN4UZH+IcWzGg+6Vvcqi6tmLYrD+KE=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: GxmjANpeukqxLs4FANE89YTMwPmxm5bH8pM5jU/l8kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: May 7 04:37:01 2024 GMT Not After : May 14 04:37:01 2024 GMT Subject: CN=6639afee-0db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:ae:95:e0:fd:e0:17:3e:37:d1:c4:a2:d0: 04:54:e3:21:37:80:98:27:bc:e4:5c:f1:cd:2e:c4: c4:a8:52:f1:2d:ee:e1:8d:42:53:a4:89:b8:73:aa: 27:f0:d1:dd:76:4e:a2:64:53:90:54:13:34:92:c8: 54:69:88:fb:2c:32:ef:7c:f5:2b:ba:d2:6b:5c:bb: 10:4f:4e:f2:14:89:81:37:de:45:20:d8:01:b5:3a: d8:9d:81:3f:d8:ef:bd:e0:f1:bb:3d:76:8d:5d:d4: 97:fb:9e:21:6c:59:20:56:f7:5d:2d:06:ff:39:83: b0:2b:3a:04:58:66:be:59:2b:85:2c:71:1d:c1:0b: 71:1e:c2:b5:a3:fc:22:ec:47:ff:95:7f:81:dd:e3: 95:10:e7:02:63:83:1c:0a:7f:7b:91:c3:e3:58:1e: 35:c5:df:42:05:55:be:f1:c4:91:83:af:b2:fd:68: 80:26:14:0d:e8:24:7c:50:0a:36:97:b9:6a:2e:ca: 64:b6:b6:d0:9d:da:ce:9a:6e:b5:bd:1a:27:75:67: db:66:00:e0:22:f8:9a:1b:84:d6:32:5a:a2:7b:a6: 21:e4:16:39:f8:42:b2:d0:68:b2:23:aa:5e:f0:b6: bc:e5:77:cb:e1:a2:2c:ed:64:2a:2d:fd:f3:87:31: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:A2:CF:59:D6:96:8C:40:FE:A9:43:E8:D7:64:78:98:7E:BE:3A X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:a7:78:6a:9f:52:51:38:0b:ff:88:eb:bc:07:f3:ce:f3: a5:5d:b6:3b:b3:3a:56:e8:94:2c:66:e4:4a:81:4f:8b:18:66: ce:91:d5:65:30:14:51:d6:08:72:51:59:5f:95:9c:8a:1a:f8: 4e:59:7e:ac:6d:94:16:f5:0a:b8:87:00:27:30:ee:28:e4:ad: c6:bb:dc:9f:36:84:2b:25:e6:3e:b1:cb:79:89:97:db:70:0e: 3b:dc:31:f0:0d:d9:60:3a:32:5d:68:a8:39:d9:c7:f7:2a:ce: 81:bc:94:90:28:b8:25:f8:27:f1:90:ef:05:b1:0c:fb:2b:a2: c8:a2:9a:87:52:13:3b:b0:35:94:3a:b8:10:ff:c3:fd:7a:6a: 34:4c:ac:17:4e:ca:c4:13:6f:31:75:08:96:83:68:06:25:60: a5:b3:5a:d3:0d:03:d9:68:b4:bb:a4:fa:e9:08:16:bb:ea:2e: 4d:de:ce:6b:7f:8d:a1:2b:13:33:4b:1f:e9:08:0b:c6:cd:2d: 7b:1f:56:0e:59:39:1a:6b:93:fe:53:cc:42:df:bb:a5:37:93: 29:46:7f:fb:09:fb:1a:e2:a4:d7:22:1d:6e:3e:7e:46:ca:a4: 9f:06:29:6b:21:fe:c8:be:68:b9:9d:47:b1:dc:d4:c1:94:b1: 11:9b:41:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjQwNTA3MDQzNzAxWhcNMjQwNTE0MDQzNzAxWjAYMRYwFAYD VQQDEw02NjM5YWZlZS0wZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA286uleD94Bc+N9HEotAEVOMhN4CYJ7zkXPHNLsTEqFLxLe7hjUJTpIm4c6on 8NHddk6iZFOQVBM0kshUaYj7LDLvfPUrutJrXLsQT07yFImBN95FINgBtTrYnYE/ 2O+94PG7PXaNXdSX+54hbFkgVvddLQb/OYOwKzoEWGa+WSuFLHEdwQtxHsK1o/wi 7Ef/lX+B3eOVEOcCY4McCn97kcPjWB41xd9CBVW+8cSRg6+y/WiAJhQN6CR8UAo2 l7lqLspktrbQndrOmm61vRondWfbZgDgIviaG4TWMlqie6Yh5BY5+EKy0GiyI6pe 8La85XfL4aIs7WQqLf3zhzHl2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzDos9Z 1paMQP6pQ+jXZHiYfr46MB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdSqd4ap9SUTgL/4jrvAfzzvOlXbY7szpW6JQsZuRKgU+LGGbOkdVl MBRR1ghyUVlflZyKGvhOWX6sbZQW9Qq4hwAnMO4o5K3Gu9yfNoQrJeY+sct5iZfb cA473DHwDdlgOjJdaKg52cf3Ks6BvJSQKLgl+CfxkO8FsQz7K6LIopqHUhM7sDWU OrgQ/8P9emo0TKwXTsrEE28xdQiWg2gGJWCls1rTDQPZaLS7pPrpCBa76i5N3s5r f42hKxMzSx/pCAvGzS17H1YOWTkaa5P+U8xC37ulN5MpRn/7Cfsa4qTXIh1uPn5G yqSfBilrIf7Ivmi5nUex3NTBlLERm0Gx -----END CERTIFICATE-----Generated at Tue May 7 05:39:53 2024 by rpki-client on console-fra.rpki-client.org