$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft File: qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json) Hash identifier: OXB7mhdqTLoNoca1T/nfbHXo2gJp2CmY1YxQQFY4hJk= Subject key identifier: 28:50:B1:2C:43:A6:C5:3C:09:BE:11:5F:BD:E9:2E:C8:12:BF:F9:2E Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft Manifest number: 4B Signing time: Wed 15 May 2024 08:08:18 +0000 Manifest this update: Wed 15 May 2024 08:08:18 +0000 Manifest next update: Wed 22 May 2024 08:08:18 +0000 Files and hashes: 1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: EmzE/3XuCxagf8vJsV5rMmQZ9T/EU4YAnQ8W/GZ3670=) 2: 7F574824A93711EEAD42EF0AC4F9AE02.roa (hash: fuygPKOV84AmvT48UlWf4mObJHgdC9DkfPGx+mkRTag=) 3: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: qtbfR0x/5UY4CkSkKuQYQ4omwTLQ4lQFRWPZ9AkPdDA=) 4: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: u8ukqZNe9PLxKJ7FR9jSUyywiMBSCZvKYXnr9ECDY4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F Validity Not Before: May 15 08:08:18 2024 GMT Not After : May 22 08:08:18 2024 GMT Subject: CN=66446d72-3807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:73:00:4f:23:26:1d:ae:ea:b3:14:e9:91: 8a:4f:dc:1d:10:52:fe:19:74:41:a4:39:48:b1:d1: b4:f8:8e:3e:e9:36:b4:41:4e:29:67:ba:5c:05:c0: 29:f0:b4:90:4f:5f:aa:ef:30:42:76:1c:3d:2c:24: b1:63:51:59:36:03:05:1f:89:79:13:82:cc:ac:cf: 0c:b1:d6:c8:3a:0d:67:93:41:9f:f8:d9:76:ef:a2: 36:fb:41:9a:03:fe:6a:bb:c2:97:54:c0:b0:ea:cb: a0:3a:3f:e5:98:97:3c:f2:b7:50:46:d5:12:ff:37: c6:34:25:0d:ba:26:68:4f:0a:67:40:b4:0c:76:fc: 85:d8:65:92:30:db:bd:49:dd:c6:0a:4f:ba:01:48: 9f:07:34:35:c9:e5:66:69:57:85:28:c7:f0:b8:f3: 0f:11:0f:67:49:2f:a3:62:ce:10:a8:5e:17:38:02: 07:14:57:de:bc:1e:5b:cc:d9:04:77:32:03:e9:c4: f2:a0:25:57:ee:fe:7c:8c:8d:2d:e5:32:42:4f:d7: 9b:4f:10:ea:0c:a6:5d:3b:6c:7f:de:2a:7b:b8:75: b6:d2:17:cb:71:42:c5:75:98:2c:19:96:6b:2a:c3: 29:85:c0:0f:5d:be:37:99:76:56:36:62:f8:a7:3d: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:B1:2C:43:A6:C5:3C:09:BE:11:5F:BD:E9:2E:C8:12:BF:F9:2E X509v3 Authority Key Identifier: keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ab:f5:2e:cd:f2:a8:9c:6a:13:0c:99:65:98:74:41:86:eb: 45:eb:81:05:41:78:57:fd:8e:47:52:ec:ce:e9:74:02:56:0e: f6:9d:e6:2e:db:25:ec:04:3f:6e:36:bb:5f:82:24:88:d5:1f: ac:db:bb:f7:57:1c:a4:4b:80:69:8f:43:7b:c6:ce:3e:9b:07: 7d:cc:58:c2:93:e9:38:3a:12:df:44:25:dc:36:38:c6:21:42: 0e:e5:82:b6:7b:eb:eb:b4:ce:cb:ae:cd:60:f6:58:8f:d1:3b: 0c:48:d6:6c:9d:61:03:97:eb:08:21:4f:b1:87:5e:98:7e:98: 34:cb:98:08:ef:db:18:2b:9f:9a:52:2e:2c:37:bf:6f:bd:71: ec:53:e0:3a:b0:4e:57:db:7d:67:10:5a:18:34:59:93:6b:83: c4:6d:eb:7d:53:1c:20:49:6c:ea:9a:a1:3b:ba:bc:fc:47:6f: 97:a4:66:a5:65:e7:2a:ae:c9:ac:89:7f:9d:67:ea:2e:ac:09: e1:9a:c0:39:8e:41:eb:77:95:50:00:c7:35:3b:18:15:0c:7f: 36:a4:0d:3d:d9:e6:54:a9:c9:3e:c2:ee:c0:88:bd:e2:1b:9f: fc:bd:12:98:60:da:d1:05:a5:60:99:d9:80:41:9c:38:25:69: 4d:64:eb:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTc2RDExMC8GA1UEBRMoQUEwMTc4RUE3ODUxMUExNUIxNDcwRUJGQzBDNTcyMUE3 MEUyNzY5RjAeFw0yNDA1MTUwODA4MThaFw0yNDA1MjIwODA4MThaMBgxFjAUBgNV BAMTDTY2NDQ2ZDcyLTM4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6u3MATyMmHa7qsxTpkYpP3B0QUv4ZdEGkOUix0bT4jj7pNrRBTilnulwFwCnw tJBPX6rvMEJ2HD0sJLFjUVk2AwUfiXkTgsyszwyx1sg6DWeTQZ/42Xbvojb7QZoD /mq7wpdUwLDqy6A6P+WYlzzyt1BG1RL/N8Y0JQ26JmhPCmdAtAx2/IXYZZIw271J 3cYKT7oBSJ8HNDXJ5WZpV4Uox/C48w8RD2dJL6NizhCoXhc4AgcUV968HlvM2QR3 MgPpxPKgJVfu/nyMjS3lMkJP15tPEOoMpl07bH/eKnu4dbbSF8txQsV1mCwZlmsq wymFwA9dvjeZdlY2YvinPX/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKFCxLEOm xTwJvhFfvekuyBK/+S4wHwYDVR0jBBgwFoAUqgF46nhRGhWxRw6/wMVyGnDidp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxNzZEL0YwMkEzNUU4QTkx NDExRUVCMjcxMkQzRkM0RjlBRTAyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWdGNDZuaFJHaFd4Unc2X3dNVnlHbkRpZHA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx NzZEL0YwMkEzNUU4QTkxNDExRUVCMjcxMkQzRkM0RjlBRTAyL3FnRjQ2bmhSR2hX eFJ3Nl93TVZ5R25EaWRwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2r9S7N8qicahMMmWWYdEGG60XrgQVBeFf9jkdS7M7pdAJWDvad5i7b JewEP242u1+CJIjVH6zbu/dXHKRLgGmPQ3vGzj6bB33MWMKT6Tg6Et9EJdw2OMYh Qg7lgrZ76+u0zsuuzWD2WI/ROwxI1mydYQOX6wghT7GHXph+mDTLmAjv2xgrn5pS Liw3v2+9cexT4DqwTlfbfWcQWhg0WZNrg8Rt631THCBJbOqaoTu6vPxHb5ekZqVl 5yquyayJf51n6i6sCeGawDmOQet3lVAAxzU7GBUMfzakDT3Z5lSpyT7C7sCIveIb n/y9Ephg2tEFpWCZ2YBBnDglaU1k63g= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org