$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: Y2hiW06U2Q7EgVQKCXIqejU61L65qn8ZA5TwqTukCR8= Subject key identifier: 55:0C:38:7B:73:0E:9B:81:81:2A:98:C1:44:90:EE:65:3C:34:EF:1C Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0B96 Signing time: Sat 04 May 2024 19:22:35 +0000 Manifest this update: Sat 04 May 2024 19:22:35 +0000 Manifest next update: Sat 11 May 2024 19:22:35 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: RlS6gZ8rmuJgJoeE26ITX8uPmAHYF7auGZ7mWWJfxTM=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: v5WnYGiqJFnOk64Cg+XJ95Fr8ijqDqDsbZRgPYZFORE=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: 3MI130qG7qiGy/yPcdkdZX/rmSLfxgXhGaaD2XSdx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: May 4 19:22:35 2024 GMT Not After : May 11 19:22:35 2024 GMT Subject: CN=66368afb-a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:47:4b:49:31:b9:24:5e:ef:f1:68:c9:a4: 08:0e:c1:05:90:49:27:fa:7f:1d:53:8e:70:5a:e5: 48:df:5e:99:62:3c:76:10:e3:8f:18:5b:65:cd:4f: 75:ed:5f:7e:1d:24:15:14:5a:ec:9c:bf:a8:22:b9: 6d:82:d0:64:46:46:b3:14:4e:26:f0:ed:cc:df:a1: f6:0f:79:2d:4d:2e:2e:98:ed:0f:fc:8a:19:a5:2c: 54:fc:5f:cc:5d:fd:cb:6d:f5:72:26:53:fd:9d:85: e6:6b:5d:61:05:83:c9:d3:5c:b6:9c:2e:2f:69:ec: 90:13:29:d0:39:b0:84:5d:71:5f:8a:a3:ea:7d:0a: b2:cc:01:40:92:4c:05:91:d2:0c:a7:98:eb:81:3d: b6:ed:45:d6:be:91:a7:0c:16:e9:17:e7:45:78:ea: be:bf:8c:31:7c:7c:48:eb:9c:c8:46:8d:fc:65:37: 70:94:0f:09:1d:1e:6c:05:ad:2e:0a:92:c1:a8:3e: 64:8c:2e:24:2c:2e:3e:dd:1e:5f:25:18:a0:bb:1b: af:8e:4a:44:9f:67:4a:19:3d:d3:e5:89:9f:34:61: 51:fe:d7:88:9c:a3:93:59:a5:90:02:6f:4f:1c:35: 50:e3:5a:f1:11:f9:81:63:00:13:1e:d0:12:4b:03: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0C:38:7B:73:0E:9B:81:81:2A:98:C1:44:90:EE:65:3C:34:EF:1C X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:75:ac:ae:0b:52:3f:e4:f9:c8:eb:ae:02:3e:82:48:59: a5:76:c5:82:7a:0f:fc:8b:03:e5:6f:61:69:db:d9:23:c1:39: 63:89:26:cc:8c:09:f3:f4:71:af:2c:3d:60:ce:00:19:89:3a: 5f:93:b5:5a:ab:63:ac:26:a2:bc:ee:29:0f:63:2a:8b:79:dc: b4:a5:b1:2d:0b:ae:04:0a:07:61:7a:76:ca:07:54:ab:06:7a: 1e:01:37:62:82:ee:58:b0:14:c7:03:6a:3b:f4:ca:b8:ff:d0: 80:76:c7:01:2e:b5:57:14:be:75:a8:39:b4:13:92:8f:86:01: ed:fa:fb:a3:1a:30:5f:d2:35:b4:69:c4:21:83:09:15:43:14: 26:d9:c3:c0:0d:ef:8f:e2:43:87:c2:2a:16:a9:79:46:07:dd: bd:f9:72:1a:94:4c:53:18:ed:b1:c8:11:82:43:9f:6a:1b:e3: 38:4d:23:82:26:83:4a:5f:a5:ba:88:d7:9d:65:b1:d8:54:13: 92:f2:09:5c:f6:75:de:61:15:73:11:3c:5a:28:50:34:5a:53: 7d:3a:b8:41:39:7e:ef:b3:e1:11:b1:59:f9:04:ce:c4:50:08: de:ea:d0:f3:10:9b:b6:d5:0c:79:95:92:1b:bc:51:74:aa:10: 89:5b:c1:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjQwNTA0MTkyMjM1WhcNMjQwNTExMTkyMjM1WjAYMRYwFAYD VQQDEw02NjM2OGFmYi1hMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cFHS0kxuSRe7/FoyaQIDsEFkEkn+n8dU45wWuVI316ZYjx2EOOPGFtlzU91 7V9+HSQVFFrsnL+oIrltgtBkRkazFE4m8O3M36H2D3ktTS4umO0P/IoZpSxU/F/M Xf3LbfVyJlP9nYXma11hBYPJ01y2nC4vaeyQEynQObCEXXFfiqPqfQqyzAFAkkwF kdIMp5jrgT227UXWvpGnDBbpF+dFeOq+v4wxfHxI65zIRo38ZTdwlA8JHR5sBa0u CpLBqD5kjC4kLC4+3R5fJRiguxuvjkpEn2dKGT3T5YmfNGFR/teInKOTWaWQAm9P HDVQ41rxEfmBYwATHtASSwMR/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUMOHtz DpuBgSqYwUSQ7mU8NO8cMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjnnWsrgtSP+T5yOuuAj6CSFmldsWCeg/8iwPlb2Fp29kjwTljiSbM jAnz9HGvLD1gzgAZiTpfk7Vaq2OsJqK87ikPYyqLedy0pbEtC64ECgdhenbKB1Sr BnoeATdigu5YsBTHA2o79Mq4/9CAdscBLrVXFL51qDm0E5KPhgHt+vujGjBf0jW0 acQhgwkVQxQm2cPADe+P4kOHwioWqXlGB929+XIalExTGO2xyBGCQ59qG+M4TSOC JoNKX6W6iNedZbHYVBOS8glc9nXeYRVzETxaKFA0WlN9OrhBOX7vs+ERsVn5BM7E UAje6tDzEJu21Qx5lZIbvFF0qhCJW8E/ -----END CERTIFICATE-----Generated at Sat May 4 20:37:14 2024 by rpki-client on console-fra.rpki-client.org