$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json) Hash identifier: zhpXDOT+W6GT+2iqGCDo4dpYtDVPdcp2xKOOfqiCYp0= Subject key identifier: E0:69:79:81:02:B2:D0:E7:F2:3D:D7:53:D1:2D:B4:48:69:FB:D7:0D Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft Manifest number: 0529 Signing time: Sun 05 May 2024 01:09:16 +0000 Manifest this update: Sun 05 May 2024 01:09:15 +0000 Manifest next update: Sun 12 May 2024 01:09:15 +0000 Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: RG5vA/2yK1xJLO+qfpbGo9rC/2egpgrs/KF3evsCLw8=) 2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: zYl0L3Pm5XwW00rkJ1HhUpIXTYYJVEp8XPzPWFksfC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Validity Not Before: May 5 01:09:15 2024 GMT Not After : May 12 01:09:15 2024 GMT Subject: CN=6636dc3c-7f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:e3:9a:91:63:61:40:07:86:26:ea:8a:d3: a5:b1:f1:5b:ff:62:25:0e:41:88:cc:cb:e6:6a:17: 4b:cd:2e:73:d1:6a:b2:1f:c2:99:8c:f4:a0:ab:5d: 3f:17:96:1c:a9:10:34:31:42:7c:2a:9b:1c:4b:40: 8e:89:39:98:00:a7:a1:e3:ac:46:08:c0:c1:7d:d2: 1e:71:2b:6a:37:63:84:a3:93:36:90:b6:8a:74:18: a9:0a:ff:a8:f7:44:56:02:1d:67:35:4e:75:08:5a: d4:bc:51:27:40:ee:74:3a:c0:4e:9a:36:bd:e3:26: 92:39:c6:75:9a:9d:1e:a0:ac:14:c7:13:41:7a:79: 15:53:bd:84:ac:f4:5a:3c:c8:de:25:41:8a:32:5d: a0:8f:14:69:1a:95:f9:8d:95:36:ed:ec:f6:37:85: e9:58:f4:01:e1:54:6c:b5:c8:3c:43:1b:9b:cb:ab: ad:3e:c7:e7:b3:3d:62:c6:41:4b:69:13:cb:f7:dc: b0:5f:b3:9c:88:52:09:a1:21:c8:24:ff:17:b9:4a: 7a:bc:83:a3:05:de:cd:7e:be:12:88:9b:cb:23:0c: 72:e3:43:de:f1:41:61:50:6b:cb:37:98:0c:34:1f: 99:74:c0:28:3d:64:79:39:30:77:02:0f:24:cc:51: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:79:81:02:B2:D0:E7:F2:3D:D7:53:D1:2D:B4:48:69:FB:D7:0D X509v3 Authority Key Identifier: keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ad:5b:de:95:d4:fc:8d:8b:ed:53:3a:c7:9e:50:56:1a:4f: 58:b3:f7:d4:4d:e8:e1:34:cb:67:cd:de:5a:f9:b4:4b:d8:86: 9e:78:89:aa:be:da:3d:5e:a2:28:f0:36:59:b3:04:c9:20:fc: cd:57:87:f8:07:5b:cb:8d:37:30:c8:d1:ec:55:54:a8:e3:84: 8f:e6:43:52:79:54:4b:47:8a:d7:d7:b4:c8:ab:e6:cd:2a:ff: 99:e1:b8:92:f8:db:e1:d9:c1:32:6c:58:19:ee:d7:c7:82:ae: 89:62:4e:fc:66:b1:4b:ef:1a:72:25:ff:6e:d4:d6:7c:99:49: e4:eb:b2:49:d4:c4:64:db:ad:47:5d:73:9d:98:12:aa:c5:58: 0f:79:92:f3:a9:c9:d1:d1:03:02:95:f4:c6:1c:30:76:a2:88: 23:e6:36:72:2b:90:4d:11:b6:6d:1c:f1:7b:56:24:81:bd:2c: 48:c3:3e:f3:2b:52:4f:39:f8:5f:ff:23:91:37:8a:c1:ec:6b: 78:5e:9e:ec:83:c5:f1:29:f5:f7:06:cf:8c:9e:c1:d4:32:61: 2d:d3:7b:10:b3:07:4b:4b:db:48:aa:99:64:0c:a5:64:77:d8: 97:3e:da:f6:58:b4:54:27:eb:b2:6f:0a:74:69:a9:b8:31:31: 45:80:e2:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCRTExMTAvBgNVBAUTKEFBMjFCNjkwQzFENjNDQkY0NDFBQTNCRDExN0VEOEI3 ODY4ODIyMjkwHhcNMjQwNTA1MDEwOTE1WhcNMjQwNTEyMDEwOTE1WjAYMRYwFAYD VQQDEw02NjM2ZGMzYy03ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylvjmpFjYUAHhibqitOlsfFb/2IlDkGIzMvmahdLzS5z0WqyH8KZjPSgq10/ F5YcqRA0MUJ8KpscS0COiTmYAKeh46xGCMDBfdIecStqN2OEo5M2kLaKdBipCv+o 90RWAh1nNU51CFrUvFEnQO50OsBOmja94yaSOcZ1mp0eoKwUxxNBenkVU72ErPRa PMjeJUGKMl2gjxRpGpX5jZU27ez2N4XpWPQB4VRstcg8Qxuby6utPsfnsz1ixkFL aRPL99ywX7OciFIJoSHIJP8XuUp6vIOjBd7Nfr4SiJvLIwxy40Pe8UFhUGvLN5gM NB+ZdMAoPWR5OTB3Ag8kzFG08wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBpeYEC stDn8j3XU9EttEhp+9cNMB8GA1UdIwQYMBaAFKohtpDB1jy/RBqjvRF+2LeGiCIp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJFMS9FNDZGRjQ5MEFF MkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BMOUVHcU85RVg3WXQ0YUlJ aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FpRzJrTUhXUEw5RUdxTzlFWDdZdDRhSUlpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJFMS9FNDZGRjQ5MEFFMkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BM OUVHcU85RVg3WXQ0YUlJaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrVveldT8jYvtUzrHnlBWGk9Ys/fUTejhNMtnzd5a+bRL2IaeeImq vto9XqIo8DZZswTJIPzNV4f4B1vLjTcwyNHsVVSo44SP5kNSeVRLR4rX17TIq+bN Kv+Z4biS+Nvh2cEybFgZ7tfHgq6JYk78ZrFL7xpyJf9u1NZ8mUnk67JJ1MRk261H XXOdmBKqxVgPeZLzqcnR0QMClfTGHDB2oogj5jZyK5BNEbZtHPF7ViSBvSxIwz7z K1JPOfhf/yORN4rB7Gt4Xp7sg8XxKfX3Bs+MnsHUMmEt03sQswdLS9tIqplkDKVk d9iXPtr2WLRUJ+uybwp0aam4MTFFgOLN -----END CERTIFICATE-----Generated at Sun May 5 02:33:38 2024 by rpki-client on console-fra.rpki-client.org