$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: txxnbSw6ZyFqZb62Ah7AZ49avZKFOsFyra1nQIZFQ50= Subject key identifier: BA:C2:56:AE:3F:90:B0:04:92:4A:57:D9:CF:F5:74:6A:7C:FD:02:2F Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 0355 Signing time: Mon 29 Apr 2024 02:51:06 +0000 Manifest this update: Mon 29 Apr 2024 02:51:05 +0000 Manifest next update: Mon 06 May 2024 02:51:05 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: rMFfP4qMHqdSYtI6j38fc0hJtJuXdbpt+NGOL0/vTbY=) 2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: AfY7eyTilChMLxapftj7pKmILvuXrf7N5KmO/wXIvzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Apr 29 02:51:05 2024 GMT Not After : May 6 02:51:05 2024 GMT Subject: CN=662f0b1a-0e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:4a:a1:2b:9d:fd:db:ad:ca:e9:93:ab:92: 2a:db:14:64:82:d1:38:1e:0d:2f:3f:1a:0c:d9:1b: 7c:df:8e:8b:18:e5:de:d6:cc:bd:59:9b:0f:ec:41: 9e:2e:99:80:ab:dd:0b:1d:ae:f9:22:6b:d9:9e:0b: ba:c5:97:4e:a6:a1:19:3d:81:21:9d:13:19:9a:d3: bf:c3:31:b9:79:c2:7a:0c:90:d5:e5:23:d8:43:77: 58:a1:2f:69:50:6f:02:9b:bc:ed:7c:cb:53:d1:2b: df:ca:af:c2:dd:15:cb:e3:ac:c1:fc:fc:ae:f6:4d: b1:d8:86:29:8e:62:e7:06:d6:9f:6e:c2:13:2d:ee: 22:78:7a:f5:6b:e7:20:67:79:e3:b6:a2:a7:2f:eb: a9:12:54:55:f8:38:f3:56:5f:c2:d4:c4:5f:86:a8: 17:da:b8:ff:50:43:56:f6:85:e6:1e:d0:32:ea:e9: 4b:1e:54:d3:b6:3a:91:6f:37:66:95:81:b6:c6:8e: 6d:4f:ad:cb:ef:97:f0:6d:67:73:75:20:45:9e:39: 51:1c:aa:c7:cd:90:83:d3:ec:72:4e:bd:b3:1d:f5: c7:89:0a:94:99:a6:53:41:be:67:02:82:b3:c1:36: a6:e9:fc:38:f8:c5:fd:28:73:c1:03:70:e5:3e:c6: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C2:56:AE:3F:90:B0:04:92:4A:57:D9:CF:F5:74:6A:7C:FD:02:2F X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:c5:c6:3e:3e:cc:16:7c:2c:0d:a3:7d:ef:6e:72:53:bd: 62:c6:77:a3:46:39:d5:42:d6:be:0d:f1:19:b6:9e:d4:11:0f: a8:c9:fa:4a:63:aa:61:8a:10:9c:80:8a:de:1b:03:28:04:94: 7d:e9:3a:b9:e8:6c:9c:0a:c0:7f:65:ef:14:58:5d:e0:e0:63: 2e:a0:dc:b3:d9:34:7b:85:96:cb:e5:19:30:fd:dc:6b:27:9f: cb:94:c3:3a:87:43:e3:53:66:a6:ea:38:88:3a:a0:6e:ee:cd: be:36:6c:0f:d5:0c:e5:ea:a6:5b:da:fb:13:a7:20:d3:75:57: 3e:1a:33:76:b8:36:79:c2:0a:05:a2:d0:3c:75:b4:85:55:bd: cb:e4:2c:12:15:bc:40:6a:1d:0d:99:0c:03:22:cc:11:75:b0: 35:32:c0:e3:bb:4d:10:37:96:9a:f2:f4:2c:1d:9f:79:4f:5d: ae:2c:9c:1f:26:96:ac:e2:e5:fa:30:c7:eb:e9:95:fe:9e:33: 5d:d8:a3:b9:87:d1:40:8d:2f:2b:16:c4:1c:31:16:fa:84:f2: e1:5f:75:7d:76:39:4d:d4:22:68:fd:2b:f0:5e:5d:b2:10:2a: 61:d2:59:1c:05:4c:7b:ff:1c:d9:a3:32:b7:78:56:4a:f8:2e: 2a:81:68:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjQwNDI5MDI1MTA1WhcNMjQwNTA2MDI1MTA1WjAYMRYwFAYD VQQDEw02NjJmMGIxYS0wZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD5KoSud/dutyumTq5Iq2xRkgtE4Hg0vPxoM2Rt8346LGOXe1sy9WZsP7EGe LpmAq90LHa75ImvZngu6xZdOpqEZPYEhnRMZmtO/wzG5ecJ6DJDV5SPYQ3dYoS9p UG8Cm7ztfMtT0Svfyq/C3RXL46zB/Pyu9k2x2IYpjmLnBtafbsITLe4ieHr1a+cg Z3njtqKnL+upElRV+DjzVl/C1MRfhqgX2rj/UENW9oXmHtAy6ulLHlTTtjqRbzdm lYG2xo5tT63L75fwbWdzdSBFnjlRHKrHzZCD0+xyTr2zHfXHiQqUmaZTQb5nAoKz wTam6fw4+MX9KHPBA3DlPsaz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrCVq4/ kLAEkkpX2c/1dGp8/QIvMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzsXGPj7MFnwsDaN9725yU71ixnejRjnVQta+DfEZtp7UEQ+oyfpK Y6phihCcgIreGwMoBJR96Tq56GycCsB/Ze8UWF3g4GMuoNyz2TR7hZbL5Rkw/dxr J5/LlMM6h0PjU2am6jiIOqBu7s2+NmwP1Qzl6qZb2vsTpyDTdVc+GjN2uDZ5wgoF otA8dbSFVb3L5CwSFbxAah0NmQwDIswRdbA1MsDju00QN5aa8vQsHZ95T12uLJwf Jpas4uX6MMfr6ZX+njNd2KO5h9FAjS8rFsQcMRb6hPLhX3V9djlN1CJo/SvwXl2y ECph0lkcBUx7/xzZozK3eFZK+C4qgWgc -----END CERTIFICATE-----Generated at Mon Apr 29 03:35:06 2024 by rpki-client on console-fra.rpki-client.org