$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: 7mIgo0AdiR5qyijWp5uGm+r9xeLKbPlNh+p2KlaXTWc= Subject key identifier: 69:64:C2:F3:31:E6:B1:B3:2C:43:8A:61:37:9C:78:B3:63:77:33:75 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 050E Signing time: Fri 03 May 2024 01:17:44 +0000 Manifest this update: Fri 03 May 2024 01:17:43 +0000 Manifest next update: Fri 10 May 2024 01:17:43 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: WJRapmCyCXEFYhoy41g6fOC7RK+7RNd57aXMnA1VWmM=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: TLnHUhVH0KOT73twr+mVRuDev55uxIikMRggDvPlAps=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: 7pEblDjXCFqPXe8mrERNt0RfmdjR8+fNAGDmM48VvrU=) 4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: ykqiZN/ax0mi80bki6smfLnQDWFc8ZTMpUxvpUWkGPw=) 5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: yfP9++wHphW6I2zCDwhSS31v1ciC2Y7ImO9fEhB5HxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: May 3 01:17:43 2024 GMT Not After : May 10 01:17:43 2024 GMT Subject: CN=66343b38-e44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:a0:81:76:98:c0:e7:90:39:4f:a9:e9:8e: ba:0d:99:d7:90:91:0b:4b:96:d4:bf:18:70:34:83: 90:7b:21:19:03:23:94:ab:f1:51:46:70:ac:28:ff: bc:f2:29:ab:0f:4d:23:78:75:06:41:20:24:b1:9e: e5:25:4d:50:19:c6:d4:91:05:5a:eb:77:d1:aa:27: 6b:1f:78:33:e8:96:7a:62:52:42:2a:b6:24:a9:bf: 1c:f2:05:6e:dd:06:b0:ae:b2:32:11:a8:e9:a4:1d: ca:2d:21:b5:96:6f:5f:1b:4a:63:72:10:3c:b4:dc: eb:7a:7d:26:48:e1:ce:bc:c6:24:42:8c:03:7b:64: d0:8c:8a:62:05:9f:00:fa:a3:9b:c3:c7:8a:12:eb: 16:1d:b2:13:0d:8d:c4:9b:dd:f1:73:52:bc:56:b5: c5:c1:ec:c7:df:a6:08:a4:e3:97:d6:15:92:df:b4: 15:42:de:be:e1:ef:4f:04:30:2f:d4:4b:12:85:93: 14:7f:64:5b:ac:98:2c:3f:11:73:d0:48:8d:d5:8e: b5:56:c7:ab:3e:98:12:aa:4b:77:54:ff:b8:88:35: 78:48:1c:04:29:ad:cf:1a:d3:7e:f8:27:fe:0e:16: 38:f2:c1:bf:4f:65:fc:88:ef:ce:af:f7:0b:b8:c9: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:C2:F3:31:E6:B1:B3:2C:43:8A:61:37:9C:78:B3:63:77:33:75 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:c4:01:e2:57:c9:95:4b:10:7d:f1:00:33:38:83:22:9a: 7c:14:2b:ac:2a:1f:5c:c3:6c:08:84:00:31:25:e2:f7:21:24: 81:35:4f:d8:57:80:3a:e8:e2:53:f5:d6:49:c2:5d:d3:70:d6: 4c:48:9d:3a:e7:2e:2b:63:11:c3:48:09:1a:df:99:1e:dc:d6: ce:2e:a5:68:c9:4a:a5:41:64:64:43:8c:a1:be:63:38:7f:69: 45:1a:32:5d:a2:63:c6:ef:1c:6e:7c:95:06:70:1f:f5:12:ba: 3a:cb:da:94:6c:e0:b6:2a:41:c7:ca:92:15:8c:66:a9:fb:d8: 5b:cc:72:f9:8a:12:c9:f5:d1:be:2f:b8:a9:8a:38:ff:55:47: 49:a3:b9:06:be:12:06:6c:47:3f:de:e9:d8:8d:74:4f:49:8b: 21:56:42:2b:75:b3:d7:5c:22:7d:b9:87:9b:97:00:27:36:88: 86:fd:1a:c0:bd:d5:24:6b:af:32:54:b7:a8:7b:fc:0f:12:2d: 35:91:f8:c3:88:de:19:b3:9a:cd:40:39:f3:b5:4b:cf:eb:ec: 78:cc:95:5c:7b:40:17:1f:80:1d:99:f9:89:dc:43:35:35:e0: 38:80:1c:4c:d9:e6:22:7f:e8:e8:c0:10:a1:8c:f9:95:4d:49: 6c:04:5c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjQwNTAzMDExNzQzWhcNMjQwNTEwMDExNzQzWjAYMRYwFAYD VQQDEw02NjM0M2IzOC1lNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JGggXaYwOeQOU+p6Y66DZnXkJELS5bUvxhwNIOQeyEZAyOUq/FRRnCsKP+8 8imrD00jeHUGQSAksZ7lJU1QGcbUkQVa63fRqidrH3gz6JZ6YlJCKrYkqb8c8gVu 3QawrrIyEajppB3KLSG1lm9fG0pjchA8tNzren0mSOHOvMYkQowDe2TQjIpiBZ8A +qObw8eKEusWHbITDY3Em93xc1K8VrXFwezH36YIpOOX1hWS37QVQt6+4e9PBDAv 1EsShZMUf2RbrJgsPxFz0EiN1Y61VserPpgSqkt3VP+4iDV4SBwEKa3PGtN++Cf+ DhY48sG/T2X8iO/Or/cLuMliFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlkwvMx 5rGzLEOKYTeceLNjdzN1MB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxMQB4lfJlUsQffEAMziDIpp8FCusKh9cw2wIhAAxJeL3ISSBNU/Y V4A66OJT9dZJwl3TcNZMSJ065y4rYxHDSAka35ke3NbOLqVoyUqlQWRkQ4yhvmM4 f2lFGjJdomPG7xxufJUGcB/1Ero6y9qUbOC2KkHHypIVjGap+9hbzHL5ihLJ9dG+ L7ipijj/VUdJo7kGvhIGbEc/3unYjXRPSYshVkIrdbPXXCJ9uYeblwAnNoiG/RrA vdUka68yVLeoe/wPEi01kfjDiN4Zs5rNQDnztUvP6+x4zJVce0AXH4AdmfmJ3EM1 NeA4gBxM2eYif+jowBChjPmVTUlsBFzp -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org