$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: XH1OKnpTPRNxkSQfy0ilnHk55GL1ZJJXw5SRjWMAA44= Subject key identifier: 46:69:CC:F3:03:AC:38:7B:7E:F3:0D:75:6F:01:09:06:DE:B3:07:35 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: EE Signing time: Fri 03 May 2024 05:51:19 +0000 Manifest this update: Fri 03 May 2024 05:51:19 +0000 Manifest next update: Fri 10 May 2024 05:51:19 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: wEIV72NmoRYZhtJ2UkjxpJanoxOhsHOITdUHfNjsL7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: May 3 05:51:19 2024 GMT Not After : May 10 05:51:19 2024 GMT Subject: CN=66347b57-f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:dd:40:2f:f5:77:c3:83:21:d2:67:62:82: 3d:53:9e:b3:ca:27:0e:f1:62:97:55:c9:07:d6:60: 99:83:e2:4a:5f:51:13:9f:cd:51:1f:c5:ca:29:62: 89:3b:96:04:bd:2f:c5:b3:80:7e:25:da:df:6f:32: d8:f8:fe:da:03:4d:fe:6a:ad:21:49:06:5d:2f:11: 2b:e4:b6:b5:04:f9:42:35:fa:d7:0f:9f:ba:f6:7a: e6:4b:09:89:12:d5:47:b5:8a:06:88:35:cc:c7:96: bf:92:ea:0f:d5:18:73:b1:fa:8e:86:99:f4:5e:78: 9e:9a:11:5c:da:5f:27:ef:81:eb:9d:c4:ad:66:85: 4a:8f:d1:a1:4e:39:f6:b1:f9:2f:5f:55:21:9e:5c: da:9c:be:26:96:06:08:0b:87:2c:13:ab:8b:b0:4e: df:e6:7c:9a:0e:d2:fb:cc:fa:78:9a:18:0d:fc:eb: a3:01:6c:74:39:ff:1d:c8:8c:6d:e2:b7:79:1e:ff: 5c:82:01:0d:8b:fe:22:16:45:fb:09:87:16:a5:6d: 7a:4a:50:8c:4b:65:2f:41:1e:f3:90:b1:73:04:d8: 8e:6b:17:6f:1e:40:62:4c:7c:7c:25:cf:fc:43:98: cd:25:42:6d:8a:8d:e5:54:ed:27:e6:a2:42:2f:95: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:69:CC:F3:03:AC:38:7B:7E:F3:0D:75:6F:01:09:06:DE:B3:07:35 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:29:2f:9e:d2:73:2f:31:20:c6:c3:2b:ba:8d:b9:26:af: d7:09:0c:98:c8:e3:a8:10:e9:c3:23:9a:7b:8a:bf:34:04:ad: c2:25:7e:01:a8:10:b6:ba:18:ce:e7:b4:56:c5:06:b3:4e:18: 39:03:d2:cc:3f:ec:7c:9b:7d:83:ba:38:93:f5:79:16:39:b3: 52:fe:1d:94:d2:b2:f0:b0:90:b3:bb:b1:4d:66:a7:f1:b1:62: bc:3c:59:81:25:f4:55:4b:61:b4:d0:d5:9e:9c:15:21:3e:7d: d2:a8:2b:57:06:06:5f:22:8f:65:76:f4:41:79:6d:df:e8:89: c1:ef:5d:1f:a9:8b:3e:12:53:9f:97:48:a9:1f:1c:7b:c4:44: 83:30:81:c1:ed:ba:47:8a:53:44:36:8b:af:c5:ff:12:13:00: 14:9a:b4:d0:69:c6:9f:53:61:c6:d5:42:a7:4f:49:54:c7:46: 95:af:13:14:b3:31:71:87:3a:93:ec:4c:6f:92:90:59:7b:24: 1f:4c:6f:3c:c1:68:2c:c5:de:eb:7a:db:8c:4e:aa:93:f7:74: 78:c9:bc:49:ef:1d:fc:f4:07:6a:75:ec:4c:75:19:e1:58:34: e5:44:ae:ef:77:3a:24:75:6f:db:31:01:04:cf:b7:8f:ef:80: 50:62:21:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjQwNTAzMDU1MTE5WhcNMjQwNTEwMDU1MTE5WjAYMRYwFAYD VQQDEw02NjM0N2I1Ny1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTHdQC/1d8ODIdJnYoI9U56zyicO8WKXVckH1mCZg+JKX1ETn81RH8XKKWKJ O5YEvS/Fs4B+JdrfbzLY+P7aA03+aq0hSQZdLxEr5La1BPlCNfrXD5+69nrmSwmJ EtVHtYoGiDXMx5a/kuoP1RhzsfqOhpn0XniemhFc2l8n74HrncStZoVKj9GhTjn2 sfkvX1UhnlzanL4mlgYIC4csE6uLsE7f5nyaDtL7zPp4mhgN/OujAWx0Of8dyIxt 4rd5Hv9cggENi/4iFkX7CYcWpW16SlCMS2UvQR7zkLFzBNiOaxdvHkBiTHx8Jc/8 Q5jNJUJtio3lVO0n5qJCL5UImwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZpzPMD rDh7fvMNdW8BCQbeswc1MB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADHCkvntJzLzEgxsMruo25Jq/XCQyYyOOoEOnDI5p7ir80BK3CJX4B qBC2uhjO57RWxQazThg5A9LMP+x8m32DujiT9XkWObNS/h2U0rLwsJCzu7FNZqfx sWK8PFmBJfRVS2G00NWenBUhPn3SqCtXBgZfIo9ldvRBeW3f6InB710fqYs+ElOf l0ipHxx7xESDMIHB7bpHilNENouvxf8SEwAUmrTQacafU2HG1UKnT0lUx0aVrxMU szFxhzqT7ExvkpBZeyQfTG88wWgsxd7retuMTqqT93R4ybxJ7x389AdqdexMdRnh WDTlRK7vdzokdW/bMQEEz7eP74BQYiG7 -----END CERTIFICATE-----Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org