$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: xPcLki7i4m3cDQH5SpQfrWYL05yBx92j+t1QkPU5bE4= Subject key identifier: 65:71:D6:49:F9:15:32:F7:68:AB:57:45:E1:1F:CC:8E:1E:A2:D4:26 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 0F59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 0F47 Signing time: Thu 02 May 2024 18:15:51 +0000 Manifest this update: Thu 02 May 2024 18:15:50 +0000 Manifest next update: Thu 09 May 2024 18:15:50 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: a9qO5feCwcE1bkq52Ygsl9k/w2qplL4EylicE6s8NyQ=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: tN1EHa1UYeXagc4zmtE102yqFtWAzIXQIzUc6GH+XWc=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: WszsRhmHN8MvwoWSP1GLjLxlHlQgLVNtDapzW8cpCCk=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: LIC4JqnhhbZV4DldwBIYZJpNNfHsiprIB69VyfCle0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3929 (0xf59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: May 2 18:15:50 2024 GMT Not After : May 9 18:15:50 2024 GMT Subject: CN=6633d856-922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:15:be:ce:6d:09:90:aa:a8:aa:62:72:5d: 7d:66:b5:48:f6:1c:8d:00:fe:f1:c5:67:2c:4f:ee: ce:38:f1:00:e1:0f:87:60:cd:43:76:b1:72:30:9b: 64:d2:25:19:d2:76:3a:40:b1:1e:1e:eb:10:d1:8b: 94:1c:db:b0:27:50:b9:e3:db:f9:aa:b8:39:41:6e: fb:10:6b:6d:70:eb:e7:9e:a9:49:01:f8:19:02:14: c6:8c:da:20:f7:49:d6:db:bc:0f:fc:08:f2:14:5b: 90:5b:48:ba:e6:78:56:b2:de:3a:33:c9:e8:40:bd: 51:ff:60:4f:43:36:7d:9a:32:c1:01:a9:94:ce:b9: 2f:6b:47:23:ba:61:14:a6:2d:53:19:ee:58:53:3c: bb:6b:52:cf:6f:aa:39:42:78:1c:d2:9e:45:ff:68: 9d:7d:ce:1f:2d:a4:8f:e8:5b:13:82:b8:fb:44:98: 98:de:de:18:ce:e0:57:74:9b:91:a5:9f:27:9e:25: b8:0b:64:88:8b:bb:1b:23:4d:92:d1:2d:24:bb:a0: 3d:6c:a2:5b:62:4d:1d:46:74:d8:d7:4b:ff:99:8f: 60:58:fc:96:38:06:02:8a:4a:52:46:0f:17:9f:a4: 52:f7:6a:45:ca:0e:a4:9b:c5:fb:58:cc:4a:6c:bb: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:D6:49:F9:15:32:F7:68:AB:57:45:E1:1F:CC:8E:1E:A2:D4:26 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:29:54:67:67:29:48:f5:f6:4b:02:1f:03:02:f0:35:64:1a: 29:9d:87:72:0a:fc:e8:8c:13:29:3d:ac:cf:78:06:1e:b8:c3: 89:3b:74:93:b3:47:1e:34:a3:30:c1:24:0f:49:a2:ea:49:47: 6b:83:d6:6d:e0:c1:04:7d:22:7b:55:76:89:3f:c6:1d:d2:2b: e0:0f:77:80:f0:a8:16:1f:4d:30:a6:40:f1:1a:76:12:ce:f2: 7c:9b:fd:cc:d7:06:a5:ee:b6:cd:c5:04:00:b7:04:fe:d8:4b: c0:0a:e9:e1:de:0a:2e:89:94:76:c4:07:84:16:7d:c0:61:e7: 26:bf:9b:67:7b:2b:58:30:1d:6f:31:74:53:b5:84:0e:8d:ef: 81:5d:f5:7a:fc:f2:df:47:33:ef:1c:99:4f:3f:4e:c8:92:22: a9:9c:77:1e:36:11:2c:da:2c:83:76:f1:97:b0:2a:a1:22:78: f6:a1:4b:ed:5b:85:e1:3d:02:31:e1:ef:d0:66:d4:4a:52:b1: 16:36:6a:9b:a1:94:6c:f6:d4:4c:aa:12:20:f4:e1:f5:08:9d: cc:fb:79:64:98:8d:80:6e:21:69:e8:df:86:1c:b3:63:8a:d4: f8:f1:08:61:0f:61:0d:66:6b:70:49:2c:6b:e3:82:62:77:0a: 4e:e4:05:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjQwNTAyMTgxNTUwWhcNMjQwNTA5MTgxNTUwWjAYMRYwFAYD VQQDEw02NjMzZDg1Ni05MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYMVvs5tCZCqqKpicl19ZrVI9hyNAP7xxWcsT+7OOPEA4Q+HYM1DdrFyMJtk 0iUZ0nY6QLEeHusQ0YuUHNuwJ1C549v5qrg5QW77EGttcOvnnqlJAfgZAhTGjNog 90nW27wP/AjyFFuQW0i65nhWst46M8noQL1R/2BPQzZ9mjLBAamUzrkva0cjumEU pi1TGe5YUzy7a1LPb6o5Qngc0p5F/2idfc4fLaSP6FsTgrj7RJiY3t4YzuBXdJuR pZ8nniW4C2SIi7sbI02S0S0ku6A9bKJbYk0dRnTY10v/mY9gWPyWOAYCikpSRg8X n6RS92pFyg6km8X7WMxKbLt9XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVx1kn5 FTL3aKtXReEfzI4eotQmMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpKVRnZylI9fZLAh8DAvA1ZBopnYdyCvzojBMpPazPeAYeuMOJO3ST s0ceNKMwwSQPSaLqSUdrg9Zt4MEEfSJ7VXaJP8Yd0ivgD3eA8KgWH00wpkDxGnYS zvJ8m/3M1wal7rbNxQQAtwT+2EvACunh3gouiZR2xAeEFn3AYecmv5tneytYMB1v MXRTtYQOje+BXfV6/PLfRzPvHJlPP07IkiKpnHceNhEs2iyDdvGXsCqhInj2oUvt W4XhPQIx4e/QZtRKUrEWNmqboZRs9tRMqhIg9OH1CJ3M+3lkmI2AbiFp6N+GHLNj itT48QhhD2ENZmtwSSxr44JidwpO5AUE -----END CERTIFICATE-----Generated at Thu May 2 20:04:53 2024 by rpki-client on console-ams.rpki-client.org