$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: E3Fg+GdDZ/RLxQyD2iK9FXtebCTj2rBc9CGflX9CHyU= Subject key identifier: 09:D3:E6:E5:E2:B7:04:10:1C:D1:43:25:10:BC:88:FB:EC:64:9B:B6 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 1669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 1661 Signing time: Sat 04 May 2024 17:16:33 +0000 Manifest this update: Sat 04 May 2024 17:16:33 +0000 Manifest next update: Sat 11 May 2024 17:16:33 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: e1gJT+t5Si7XsUL9AroGVke7tVg4IHfXiNtoXBpmb+o=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: 4y/ma/sx7t7qxzFWfsKKQaspdUYpR7GKn4wcpl9gpOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5737 (0x1669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: May 4 17:16:33 2024 GMT Not After : May 11 17:16:33 2024 GMT Subject: CN=66366d71-4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:2e:c3:b3:86:5a:b3:a2:df:11:49:13:d9: d4:85:ba:f4:2c:f0:a2:61:99:49:48:75:b2:69:5c: 2f:5d:c6:d9:95:31:81:72:df:0a:df:ae:28:36:6d: 0a:68:c9:e9:75:05:52:19:9f:87:a6:0c:12:42:2f: 09:42:4a:88:5c:b9:4c:91:95:b7:db:31:43:0a:c1: 17:64:7e:49:0d:8f:c4:6c:da:4b:36:8a:b8:e0:f1: ea:ed:c5:7c:27:f0:0a:f0:3a:9a:0f:4e:f6:21:17: 4a:6a:66:a2:68:0b:7a:69:b3:ef:4e:0a:40:eb:b2: cb:4b:e8:cf:9c:dc:cc:a4:6b:b4:95:d3:29:52:ba: 28:94:83:6d:95:ea:f1:6b:b8:bc:79:1c:ec:c1:93: 17:7a:8e:0f:b0:cb:cf:be:dc:56:51:56:2d:42:3c: e3:91:9b:ae:12:85:3e:b7:17:47:60:6f:2a:04:46: 83:83:9d:84:87:b7:ec:e3:c5:2b:68:7f:77:fa:f1: fc:92:db:bc:c6:e7:87:7b:52:b7:63:c7:20:f9:ce: 3a:dd:93:95:23:ce:da:9d:e3:cb:e5:87:d8:3b:66: 17:1d:41:29:35:11:79:9d:f1:71:dd:08:c3:7e:67: 99:17:4d:a9:2f:94:0c:14:8c:9a:05:38:af:0b:47: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:E6:E5:E2:B7:04:10:1C:D1:43:25:10:BC:88:FB:EC:64:9B:B6 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b8:dd:e2:21:06:17:97:eb:53:39:b2:31:c7:00:ed:c0:96: 06:91:ff:29:52:9b:3d:e5:f9:e4:11:42:52:2b:39:71:80:af: b2:b8:4b:de:69:a2:4b:7d:93:82:92:ff:ef:db:d8:7f:06:a3: d9:51:a2:3f:f9:e2:bc:c4:d5:ad:89:45:7e:82:ef:55:50:03: dc:0a:d2:03:cc:cd:62:ca:3a:07:ab:f8:5f:b5:55:83:f3:05: 5d:cc:89:7d:53:77:2f:41:70:5d:6b:2e:ea:f1:15:da:4b:6a: 2b:8c:7c:3f:64:60:d7:d1:a7:8d:95:53:bf:9b:ce:dc:3d:79: d0:2b:d0:2a:43:2a:10:70:58:15:39:fc:70:26:ab:b6:c8:a0: f3:2f:61:39:f9:88:73:1d:13:08:87:fa:38:04:c2:3b:47:40: 46:e8:c2:5a:54:49:7a:93:ae:af:c6:bf:41:d8:c8:23:1f:66: 92:e8:c1:92:52:70:e0:47:72:47:bf:35:f9:f8:3e:ea:80:d8: 14:44:a0:e0:f5:ce:6d:8d:40:90:ea:ff:e8:30:f9:9d:38:2c: 05:f3:81:34:19:6b:ab:62:e2:fa:d3:8c:b7:f3:33:35:6d:ae: 57:95:c5:ff:ba:6e:5f:5c:eb:b0:98:7c:84:18:ae:84:6d:07: 42:cc:e3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjQwNTA0MTcxNjMzWhcNMjQwNTExMTcxNjMzWjAYMRYwFAYD VQQDEw02NjM2NmQ3MS00NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGwuw7OGWrOi3xFJE9nUhbr0LPCiYZlJSHWyaVwvXcbZlTGBct8K364oNm0K aMnpdQVSGZ+HpgwSQi8JQkqIXLlMkZW32zFDCsEXZH5JDY/EbNpLNoq44PHq7cV8 J/AK8DqaD072IRdKamaiaAt6abPvTgpA67LLS+jPnNzMpGu0ldMpUroolINtlerx a7i8eRzswZMXeo4PsMvPvtxWUVYtQjzjkZuuEoU+txdHYG8qBEaDg52Eh7fs48Ur aH93+vH8ktu8xueHe1K3Y8cg+c463ZOVI87anePL5YfYO2YXHUEpNRF5nfFx3QjD fmeZF02pL5QMFIyaBTivC0eGTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnT5uXi twQQHNFDJRC8iPvsZJu2MB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUuN3iIQYXl+tTObIxxwDtwJYGkf8pUps95fnkEUJSKzlxgK+yuEve aaJLfZOCkv/v29h/BqPZUaI/+eK8xNWtiUV+gu9VUAPcCtIDzM1iyjoHq/hftVWD 8wVdzIl9U3cvQXBday7q8RXaS2orjHw/ZGDX0aeNlVO/m87cPXnQK9AqQyoQcFgV OfxwJqu2yKDzL2E5+YhzHRMIh/o4BMI7R0BG6MJaVEl6k66vxr9B2MgjH2aS6MGS UnDgR3JHvzX5+D7qgNgURKDg9c5tjUCQ6v/oMPmdOCwF84E0GWurYuL604y38zM1 ba5XlcX/um5fXOuwmHyEGK6EbQdCzOMn -----END CERTIFICATE-----Generated at Sat May 4 19:58:41 2024 by rpki-client on console-ams.rpki-client.org