$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft File: qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json) Hash identifier: j73+QdgWdUAN8vq2X83U12mT+Ev+M8ecLKgK5hugo6g= Subject key identifier: 9C:FA:2D:4B:2E:88:A7:22:85:FD:A9:F1:FC:8A:A1:8C:91:D7:79:65 Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft Manifest number: 05A9 Signing time: Sun 05 May 2024 00:37:50 +0000 Manifest this update: Sun 05 May 2024 00:37:49 +0000 Manifest next update: Sun 12 May 2024 00:37:49 +0000 Files and hashes: 1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: rVuXqUXqZsdJFCs8att2/pz9QpIgawfp2FJ8u760VXc=) 2: ED6AC2042F8F11EE895A9C2DC4F9AE02.roa (hash: Q8vSc8ci65ZL1xKqq40dunmAQl8almh9leyOMvX2F70=) 3: D6E4690E2F8F11EE98845D2DC4F9AE02.roa (hash: 500OYze+uA8M2rNLVd9RRFtGUYtilEsP/i6UAnaaVnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: May 5 00:37:49 2024 GMT Not After : May 12 00:37:49 2024 GMT Subject: CN=6636d4dd-bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:38:5b:b4:ac:93:d4:3a:7b:3e:34:38:27: 77:c4:a7:31:14:4d:d2:4b:1b:7f:93:d1:2d:23:b3: 24:30:60:16:86:2f:41:10:3a:55:cc:a2:e2:a0:69: 21:ed:c0:03:46:8a:e5:5a:e8:c1:b7:1a:7e:91:77: b7:bd:e9:ee:67:46:0d:91:a2:78:82:5a:2c:da:29: a1:91:2c:53:8b:34:53:06:4a:51:0e:56:5c:2c:58: 04:a9:ef:a4:07:f4:e3:49:cf:2d:a2:48:a5:bd:5c: dd:2b:68:e8:6b:01:ec:c8:1a:74:d9:7d:9e:e3:97: cf:48:96:57:a6:82:4c:81:48:54:f6:4b:24:ad:7e: 7e:6b:a6:36:30:48:bc:6c:3f:94:b8:3c:96:f0:1e: 24:09:b2:bd:fb:d5:89:44:ba:73:34:26:a1:bf:0c: d2:98:6a:2c:f1:34:42:e6:d8:71:a2:f0:83:3b:d9: 88:09:5c:ff:f7:62:55:85:07:4c:42:c5:31:98:4f: 77:0a:66:09:0a:e1:d7:1b:34:0d:20:7d:8b:5c:ed: 78:56:dc:42:5a:a5:32:0f:42:44:f8:69:b2:97:83: bd:e5:10:4f:63:44:70:5e:07:ba:c8:72:31:1c:c9: 30:1e:54:e2:5d:b3:8a:b5:81:79:bb:c0:77:1b:67: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FA:2D:4B:2E:88:A7:22:85:FD:A9:F1:FC:8A:A1:8C:91:D7:79:65 X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:cb:03:3f:31:0a:67:40:92:85:43:c8:52:27:6b:16:fb:ab: 39:a1:53:b3:1c:9c:5e:90:e7:4e:c1:29:49:77:87:0a:b5:20: 96:ff:a4:d5:a1:8c:cf:92:e1:71:86:27:f7:17:38:c1:46:72: c9:eb:00:de:cd:97:af:70:84:c6:35:94:43:08:71:42:5f:a0: 93:0e:84:a2:2e:a4:81:6c:60:de:a8:bc:bf:03:8d:ee:d0:f0: 57:0f:b8:18:57:9a:18:01:d2:50:37:f2:d6:98:dd:0f:9e:e7: 9f:81:9f:3e:ce:a3:06:de:b1:55:b1:05:2d:04:7d:2a:0b:43: 59:3a:f4:35:42:ed:50:bf:f6:98:87:0a:9b:3c:84:2d:93:9b: b1:48:e5:8a:dc:5c:21:bc:b2:df:68:15:10:47:5f:84:09:72: 64:17:c0:1d:11:13:9f:85:06:4e:8d:ca:42:f0:1f:74:84:b6: fb:51:01:4b:d0:70:4a:e9:82:e6:85:8f:41:f9:78:33:2c:fa: 51:64:7b:05:d6:bd:b0:2c:06:fd:0c:f4:25:2d:29:8e:ec:1c: b7:d5:2e:26:71:e9:78:82:71:df:cd:c0:ef:51:b3:4a:12:14: 76:7e:93:b8:12:a8:17:f4:26:1f:18:ee:a8:12:f9:20:f3:e3: b1:59:33:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjQwNTA1MDAzNzQ5WhcNMjQwNTEyMDAzNzQ5WjAYMRYwFAYD VQQDEw02NjM2ZDRkZC1iZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLM4W7Ssk9Q6ez40OCd3xKcxFE3SSxt/k9EtI7MkMGAWhi9BEDpVzKLioGkh 7cADRorlWujBtxp+kXe3venuZ0YNkaJ4glos2imhkSxTizRTBkpRDlZcLFgEqe+k B/TjSc8tokilvVzdK2joawHsyBp02X2e45fPSJZXpoJMgUhU9kskrX5+a6Y2MEi8 bD+UuDyW8B4kCbK9+9WJRLpzNCahvwzSmGos8TRC5thxovCDO9mICVz/92JVhQdM QsUxmE93CmYJCuHXGzQNIH2LXO14VtxCWqUyD0JE+Gmyl4O95RBPY0RwXge6yHIx HMkwHlTiXbOKtYF5u8B3G2dsAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz6LUsu iKcihf2p8fyKoYyR13llMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjM1My8zQkZERUQ2NDg2QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3 allqdWQ3MlJ3VmNYWE1QQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYywM/MQpnQJKFQ8hSJ2sW+6s5oVOzHJxekOdOwSlJd4cKtSCW/6TV oYzPkuFxhif3FzjBRnLJ6wDezZevcITGNZRDCHFCX6CTDoSiLqSBbGDeqLy/A43u 0PBXD7gYV5oYAdJQN/LWmN0PnuefgZ8+zqMG3rFVsQUtBH0qC0NZOvQ1Qu1Qv/aY hwqbPIQtk5uxSOWK3FwhvLLfaBUQR1+ECXJkF8AdEROfhQZOjcpC8B90hLb7UQFL 0HBK6YLmhY9B+XgzLPpRZHsF1r2wLAb9DPQlLSmO7By31S4mcel4gnHfzcDvUbNK EhR2fpO4EqgX9CYfGO6oEvkg8+OxWTMd -----END CERTIFICATE-----Generated at Sun May 5 01:13:20 2024 by rpki-client on console-ams.rpki-client.org