$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json) Hash identifier: 4rXra9zW/B5ADEIFdLvfxZa7Whd0+NNlSMcrQAmndMU= Subject key identifier: 5E:5D:2D:39:03:0E:31:43:02:23:6D:F2:B0:AA:A6:1B:AA:30:C4:B2 Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft Manifest number: D9 Signing time: Sun 05 May 2024 06:11:02 +0000 Manifest this update: Sun 05 May 2024 06:11:01 +0000 Manifest next update: Sun 12 May 2024 06:11:01 +0000 Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: 7P6qtm0luqV0R3kJLeWyCspoid0lgRpF+qJHK9ceD5s=) 2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: mUIT+mjm801Y6JDVJmN08yh1Pu5nuVVPv5rxyEwIRJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: May 5 06:11:01 2024 GMT Not After : May 12 06:11:01 2024 GMT Subject: CN=663722f5-c38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:6a:85:86:bb:27:5c:03:a6:ed:43:b3:3e: 75:de:94:08:f9:51:0f:0b:08:9b:fd:a6:0a:b5:a8: ed:52:28:cb:8f:cd:ee:68:47:cd:3d:5c:a6:15:8c: 26:12:3e:e7:21:d5:29:a9:3d:aa:4e:4b:7f:f8:00: 8e:2f:1f:f7:59:f6:8f:5d:66:0d:c3:55:79:0c:6a: ca:4a:1e:de:ef:15:f7:6a:e1:1d:9f:b8:df:e8:76: 65:f2:25:da:68:b6:46:0b:98:49:9f:40:b6:93:b6: 7b:5c:ed:4e:66:2b:05:50:17:0a:0f:87:5d:0b:26: 7c:41:a7:9b:88:f2:6c:0a:37:da:cc:1f:8f:9c:07: f2:ea:c2:32:dc:4f:b5:c7:6e:98:1a:72:3d:7b:73: 0c:01:1c:34:13:7b:47:4e:19:4a:31:a3:f3:bd:d9: 58:cf:60:a6:d3:ea:2c:ad:d7:c9:4e:1e:3c:21:41: ea:8f:36:4c:c4:5c:89:b4:48:58:88:b0:39:4d:68: 4b:1d:8f:62:c3:d0:ea:e0:d0:2e:55:06:78:d9:22: fa:46:e7:6f:ad:24:1a:b9:74:d5:cf:dd:44:6c:f1: ff:08:65:60:ca:cf:61:83:90:68:1f:1b:1b:4f:4e: 54:6e:c6:3a:e8:2d:b7:89:8b:ba:7f:ce:d1:d6:23: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5D:2D:39:03:0E:31:43:02:23:6D:F2:B0:AA:A6:1B:AA:30:C4:B2 X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:22:3e:7f:23:cf:02:3f:2d:75:9e:d4:da:e0:f3:44:90:cb: 72:7f:f4:15:90:f4:c9:ff:f6:ff:be:03:39:a0:fb:b3:e5:ab: 2f:e2:a6:21:45:1a:f5:fa:1d:b2:1e:c0:c2:64:6c:4a:59:a1: d2:74:b1:62:7c:79:4b:76:a8:8e:5c:4e:02:ba:6a:9e:b5:b8: 55:e1:33:1b:82:a5:4b:b7:4f:42:24:0e:a4:f8:a6:c7:d3:52: 7a:e9:e9:31:92:7a:7a:70:21:32:af:ef:7d:d5:4e:81:0b:d0: 17:3d:0a:6d:60:96:c3:97:22:fc:f9:8e:d1:0e:4e:c9:9d:76: b0:81:4f:08:af:ec:70:05:e4:56:85:2f:99:35:89:ec:2b:ac: 17:54:a9:7a:6f:25:9b:18:1d:c5:73:ab:8d:a3:f1:86:27:91: e2:6c:64:6b:e2:35:a7:3b:11:b5:42:f8:ca:9d:f7:81:72:6d: d2:9e:c5:1a:66:90:ad:d4:0c:c6:92:3d:77:2e:af:48:34:b9: c5:8c:70:a8:5f:ee:db:e1:da:da:83:f9:85:c4:0e:f0:ac:29: 3a:9e:f6:15:e4:2f:16:26:28:f0:0a:f1:e1:cf:cc:50:c2:4f: 49:d5:39:f0:bf:b3:ff:88:9d:c2:6f:34:b1:69:3f:e6:28:f7: 4b:93:dc:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjQwNTA1MDYxMTAxWhcNMjQwNTEyMDYxMTAxWjAYMRYwFAYD VQQDEw02NjM3MjJmNS1jMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeJqhYa7J1wDpu1Dsz513pQI+VEPCwib/aYKtajtUijLj83uaEfNPVymFYwm Ej7nIdUpqT2qTkt/+ACOLx/3WfaPXWYNw1V5DGrKSh7e7xX3auEdn7jf6HZl8iXa aLZGC5hJn0C2k7Z7XO1OZisFUBcKD4ddCyZ8QaebiPJsCjfazB+PnAfy6sIy3E+1 x26YGnI9e3MMARw0E3tHThlKMaPzvdlYz2Cm0+osrdfJTh48IUHqjzZMxFyJtEhY iLA5TWhLHY9iw9Dq4NAuVQZ42SL6RudvrSQauXTVz91EbPH/CGVgys9hg5BoHxsb T05UbsY66C23iYu6f87R1iMJzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5dLTkD DjFDAiNt8rCqphuqMMSyMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a bkZlUVFvdHhiOHJsUWtxSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiIj5/I88CPy11ntTa4PNEkMtyf/QVkPTJ//b/vgM5oPuz5asv4qYh RRr1+h2yHsDCZGxKWaHSdLFifHlLdqiOXE4CumqetbhV4TMbgqVLt09CJA6k+KbH 01J66ekxknp6cCEyr+991U6BC9AXPQptYJbDlyL8+Y7RDk7JnXawgU8Ir+xwBeRW hS+ZNYnsK6wXVKl6byWbGB3Fc6uNo/GGJ5HibGRr4jWnOxG1QvjKnfeBcm3SnsUa ZpCt1AzGkj13Lq9INLnFjHCoX+7b4drag/mFxA7wrCk6nvYV5C8WJijwCvHhz8xQ wk9J1Tnwv7P/iJ3CbzSxaT/mKPdLk9yJ -----END CERTIFICATE-----Generated at Sun May 5 08:39:07 2024 by rpki-client on console-fra.rpki-client.org