$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: rkYoIZt6aCKvFitYSCp83o2m8sZhmvqrmtx8vTYIpFw= Subject key identifier: 8F:E2:6C:FD:1D:31:21:23:FA:6A:DD:67:1E:EC:E4:03:77:6E:16:F1 Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0161 Signing time: Fri 17 May 2024 04:57:59 +0000 Manifest this update: Fri 17 May 2024 04:57:58 +0000 Manifest next update: Fri 24 May 2024 04:57:58 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: Pobm/Byd4/h9F4eLjpIR+ePmTM81pzoKT5AHdWjRz8Q=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: S6igu3T/VXkwMIXc4NzqmMmye3tFXnVeyNhVv8UYcJw=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: O9hKnnT67qfcmU5oSpSnkqTpQTC4e3ri+WCp5NJLws4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: May 17 04:57:58 2024 GMT Not After : May 24 04:57:58 2024 GMT Subject: CN=6646e3d7-4832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:dd:f1:f1:2c:a0:d6:c2:59:7e:7a:e2:70: 27:54:44:dc:1c:73:ea:ed:38:d9:65:29:aa:de:be: 8c:30:bb:9e:b9:9d:3c:05:68:6a:ab:9e:ae:f7:37: f0:0d:33:27:1e:8e:05:24:c8:22:d3:56:54:31:ad: 68:91:37:11:0b:5a:ff:d5:06:90:99:eb:98:ca:6e: fc:b9:66:a2:ca:2a:5c:6d:4b:25:a7:62:4b:4a:87: af:ee:41:93:49:a3:fc:56:bf:2d:4d:b6:bb:1e:20: 23:61:95:28:13:e9:53:01:24:99:f1:15:78:f0:14: 58:46:b7:6c:cc:ef:2b:70:ce:1b:e6:bb:de:ae:97: cf:10:e7:61:8f:09:f9:9d:7c:fa:d6:d4:20:14:fa: 8f:a4:84:7e:e7:21:c4:9f:62:04:7a:49:57:c7:2c: 97:f6:5f:3b:83:db:04:15:d8:a7:85:6c:54:ae:a1: 6a:2b:52:c8:1f:53:7f:4e:a5:09:55:25:3a:1c:de: 1e:f3:82:b8:da:c0:21:f3:ae:c3:5c:3d:3f:0a:6e: 7b:bf:16:20:17:02:92:ef:30:d0:19:a5:8d:9d:50: 55:1f:e0:45:73:eb:d1:36:cc:5c:2b:3a:6e:2c:5d: 29:8f:a2:58:0c:6e:aa:b6:47:18:20:10:d6:c7:be: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:6C:FD:1D:31:21:23:FA:6A:DD:67:1E:EC:E4:03:77:6E:16:F1 X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:62:f3:1a:60:58:1b:5e:e5:d7:bf:11:5d:f2:7e:4b:b6:90: 39:a1:17:11:d6:f5:81:48:b0:fc:05:39:68:9d:16:78:39:c9: 5b:a5:51:68:28:6e:cb:e6:70:7a:bb:f2:59:c5:48:c9:0c:fe: 11:b9:e8:1f:47:86:03:c1:01:d7:5c:52:52:14:38:76:73:58: 96:e3:1f:47:43:f3:b1:6b:fe:45:01:1c:5b:40:d1:64:1f:de: 74:0a:0c:ae:67:07:19:6c:2f:84:62:78:83:0a:1b:7b:12:38: b7:68:d8:05:6d:c6:e5:cc:8b:89:68:f7:d5:64:f5:1a:96:d3: 01:7e:37:88:10:94:83:59:f9:5d:74:fc:ea:5b:85:51:8d:43: 3c:bb:da:21:e7:a9:6b:ba:47:fa:60:66:81:34:9f:8d:a2:05: 21:3b:0b:56:fb:c1:34:00:5c:53:86:1f:80:4f:a4:1b:49:e4: 19:25:94:cc:b6:92:41:99:64:53:fd:04:9b:87:08:ee:55:65: 02:1a:dd:d2:4e:dc:e9:07:11:26:75:c1:f7:43:38:83:d7:cd: 98:f0:34:01:29:cb:2f:70:25:4c:3e:74:c6:37:c9:ee:7a:01: f7:2a:83:17:03:d6:b0:15:1b:d0:67:21:f2:0e:43:0e:05:81: 07:b5:27:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjQwNTE3MDQ1NzU4WhcNMjQwNTI0MDQ1NzU4WjAYMRYwFAYD VQQDEw02NjQ2ZTNkNy00ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYHd8fEsoNbCWX564nAnVETcHHPq7TjZZSmq3r6MMLueuZ08BWhqq56u9zfw DTMnHo4FJMgi01ZUMa1okTcRC1r/1QaQmeuYym78uWaiyipcbUslp2JLSoev7kGT SaP8Vr8tTba7HiAjYZUoE+lTASSZ8RV48BRYRrdszO8rcM4b5rverpfPEOdhjwn5 nXz61tQgFPqPpIR+5yHEn2IEeklXxyyX9l87g9sEFdinhWxUrqFqK1LIH1N/TqUJ VSU6HN4e84K42sAh867DXD0/Cm57vxYgFwKS7zDQGaWNnVBVH+BFc+vRNsxcKzpu LF0pj6JYDG6qtkcYIBDWx77i2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/ibP0d MSEj+mrdZx7s5AN3bhbxMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgYvMaYFgbXuXXvxFd8n5LtpA5oRcR1vWBSLD8BTlonRZ4OclbpVFo KG7L5nB6u/JZxUjJDP4RuegfR4YDwQHXXFJSFDh2c1iW4x9HQ/Oxa/5FARxbQNFk H950CgyuZwcZbC+EYniDCht7Eji3aNgFbcblzIuJaPfVZPUaltMBfjeIEJSDWfld dPzqW4VRjUM8u9oh56lrukf6YGaBNJ+NogUhOwtW+8E0AFxThh+AT6QbSeQZJZTM tpJBmWRT/QSbhwjuVWUCGt3STtzpBxEmdcH3QziD182Y8DQBKcsvcCVMPnTGN8nu egH3KoMXA9awFRvQZyHyDkMOBYEHtScM -----END CERTIFICATE-----Generated at Fri May 17 06:18:09 2024 by rpki-client on console-fra.rpki-client.org