$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: 3x0T25cIQkphIWyxVvevATv0gqIxdpxNDcCxVdQOj/8= Subject key identifier: B3:7D:0D:D6:CA:91:3B:DC:8E:86:75:CE:AD:8A:32:ED:69:7E:6F:BB Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1922 Signing time: Thu 02 May 2024 16:55:24 +0000 Manifest this update: Thu 02 May 2024 16:55:24 +0000 Manifest next update: Thu 09 May 2024 16:55:24 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: 6bZNKAljFA6qf2XaHfjiF9S623fzX0guJtFnJvYVu+0=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: /r9L/quFrkZXr3YqN84IxLT9NVKKHI9054i3mJQRoRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6440 (0x1928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: May 2 16:55:24 2024 GMT Not After : May 9 16:55:24 2024 GMT Subject: CN=6633c57c-6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:61:3f:4f:81:06:51:4f:e8:5f:6e:94:ad: c3:e3:b6:64:60:7d:06:3b:6b:85:0c:e5:ae:20:bf: 99:f8:6a:8e:9b:72:19:5f:67:10:2a:36:6a:08:d6: ca:d3:79:9c:eb:93:d4:1f:e4:30:ab:69:0b:5a:bd: f4:84:49:a6:2d:63:02:34:af:46:62:f1:30:63:65: e4:c5:79:5a:f1:fc:68:7a:b4:9f:87:5e:2d:5e:ca: f1:87:5a:d6:8b:44:cb:e7:e9:43:40:ff:6a:77:3c: b4:e1:35:86:06:94:37:2d:a5:18:df:3f:b9:0d:f8: d1:1b:dc:2e:fe:46:52:02:db:ba:c2:dc:61:6c:1d: 3e:2b:f5:ea:d8:6e:3f:63:2c:5f:d8:2f:8c:11:74: 40:88:7c:92:91:f1:0e:fe:ab:5f:a9:6c:44:b3:c4: 80:da:f6:13:1d:0b:5e:a2:5b:36:45:19:c9:67:66: 68:ef:cb:3f:77:c4:c5:da:f8:77:09:23:47:da:46: 64:a9:80:63:f6:38:6c:7e:7a:95:33:1f:58:0a:a9: e3:28:d7:8d:93:b1:15:94:56:4d:31:61:b8:ef:da: b1:30:91:ad:35:40:ad:59:d3:46:ef:e4:70:df:3d: 27:32:7c:49:99:52:f0:fb:98:44:c0:1e:08:d8:1d: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:0D:D6:CA:91:3B:DC:8E:86:75:CE:AD:8A:32:ED:69:7E:6F:BB X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c5:aa:ed:7c:c7:62:cb:72:e6:4c:c0:a8:20:4b:d2:25:ce: 17:7f:41:12:f1:40:13:5e:e8:68:e0:60:77:e8:91:fc:ef:4b: af:ab:b6:ed:cb:4d:1b:99:cc:75:c4:68:8c:83:c1:07:1a:ec: 27:dc:34:49:f4:d9:83:3f:54:f6:a0:1d:98:f2:8c:94:4f:19: c9:de:dd:86:08:2a:35:c4:32:d6:3b:f2:a1:fb:3d:f3:9e:a8: 75:48:b8:d5:c4:a0:48:f8:8d:51:fa:a0:76:65:63:b1:b3:fd: de:24:f1:42:20:53:21:a3:cf:17:85:4b:7e:85:56:86:7c:e8: 78:83:0b:81:e7:1b:0d:02:56:f9:a8:d4:fa:40:3c:62:38:5b: b9:e5:8d:ef:3b:37:06:aa:12:5a:b0:41:43:ac:69:c8:16:d6: c0:b1:93:90:54:45:e4:12:57:74:ee:07:4d:13:c9:ca:8a:6c: c6:8d:3c:67:7b:21:3c:ff:c4:40:c6:39:b3:61:e2:df:ba:42: 01:db:63:dc:ae:e8:5e:0f:9c:a9:3e:8d:b0:28:a6:7b:cf:87: 1a:70:44:9a:1f:54:8d:c7:bb:89:83:17:60:e2:43:0b:2e:bf: 00:d2:06:c1:1d:11:8d:cf:d0:46:1e:3e:a7:a9:7c:71:c0:ee: e6:2f:0a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjQwNTAyMTY1NTI0WhcNMjQwNTA5MTY1NTI0WjAYMRYwFAYD VQQDEw02NjMzYzU3Yy02MDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tJhP0+BBlFP6F9ulK3D47ZkYH0GO2uFDOWuIL+Z+GqOm3IZX2cQKjZqCNbK 03mc65PUH+Qwq2kLWr30hEmmLWMCNK9GYvEwY2XkxXla8fxoerSfh14tXsrxh1rW i0TL5+lDQP9qdzy04TWGBpQ3LaUY3z+5DfjRG9wu/kZSAtu6wtxhbB0+K/Xq2G4/ Yyxf2C+MEXRAiHySkfEO/qtfqWxEs8SA2vYTHQteols2RRnJZ2Zo78s/d8TF2vh3 CSNH2kZkqYBj9jhsfnqVMx9YCqnjKNeNk7EVlFZNMWG479qxMJGtNUCtWdNG7+Rw 3z0nMnxJmVLw+5hEwB4I2B0wNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN9DdbK kTvcjoZ1zq2KMu1pfm+7MB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPxartfMdiy3LmTMCoIEvSJc4Xf0ES8UATXuho4GB36JH870uvq7bt y00bmcx1xGiMg8EHGuwn3DRJ9NmDP1T2oB2Y8oyUTxnJ3t2GCCo1xDLWO/Kh+z3z nqh1SLjVxKBI+I1R+qB2ZWOxs/3eJPFCIFMho88XhUt+hVaGfOh4gwuB5xsNAlb5 qNT6QDxiOFu55Y3vOzcGqhJasEFDrGnIFtbAsZOQVEXkEld07gdNE8nKimzGjTxn eyE8/8RAxjmzYeLfukIB22PcruheD5ypPo2wKKZ7z4cacESaH1SNx7uJgxdg4kML Lr8A0gbBHRGNz9BGHj6nqXxxwO7mLwpo -----END CERTIFICATE-----Generated at Thu May 2 20:04:52 2024 by rpki-client on console-ams.rpki-client.org