$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: gp3wxg93Vt7QkuzKGG7vHxrLl1Mq6wNwqu9pWNZB35M= Subject key identifier: 84:48:66:28:ED:D0:BE:90:32:CB:CE:AD:21:B2:EB:55:F1:F6:35:68 Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: B5 Signing time: Tue 07 May 2024 06:27:16 +0000 Manifest this update: Tue 07 May 2024 06:27:15 +0000 Manifest next update: Tue 14 May 2024 06:27:15 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: hm6gcrhsfwxeVfs9Zt3nWcFhEqSFx9Y9MMkU2TvosLI=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: xBqLdGUv1m+5b9KcShykJAgGrAjhZ4SW3mT1bvxCRMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Validity Not Before: May 7 06:27:15 2024 GMT Not After : May 14 06:27:15 2024 GMT Subject: CN=6639c9c3-97ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:56:f2:8b:86:ae:f3:2a:44:c7:ef:b2:e0: 70:20:58:c0:71:c4:97:71:30:14:3c:c0:f2:d8:15: a4:88:2e:c9:8f:04:d8:33:a7:70:bb:b6:6e:13:8a: 1e:f4:23:01:8f:de:c5:c4:1e:8f:ff:99:e1:d6:75: c0:6c:cb:de:e4:19:c1:a8:63:e2:22:d4:a9:df:01: 74:cb:6f:54:31:c6:ac:41:f8:9a:c5:cf:dc:1c:d8: 14:7f:11:40:95:27:0f:8c:be:ca:fc:a0:1f:50:e1: 10:13:00:d0:90:ff:66:6d:e4:2f:e5:62:9a:2d:bb: ca:47:70:94:c8:aa:b7:ac:9f:2d:16:21:d2:b7:19: 50:8b:7a:14:ce:c9:f0:5e:46:af:60:08:7b:74:eb: 4e:c9:a1:fb:19:6a:55:df:a8:4f:ab:92:01:d1:a9: e8:81:19:c5:20:44:af:e4:e7:c6:bb:8b:cb:de:d5: cf:ac:04:9f:51:eb:4f:91:11:f3:b8:7f:16:d9:a9: ab:a2:50:17:9a:2b:e5:bf:f1:f5:2c:bc:03:67:3a: 79:f8:8f:d3:c0:6e:86:7c:b8:ce:6e:14:50:f7:65: b7:8e:f4:f7:1d:c9:bc:3c:ab:4b:14:ee:55:b6:9b: 85:bc:50:51:20:3b:49:66:c3:ea:eb:b0:7d:9d:e8: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:48:66:28:ED:D0:BE:90:32:CB:CE:AD:21:B2:EB:55:F1:F6:35:68 X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:c8:a6:47:71:1e:cb:c4:e6:ac:cc:06:98:35:d7:1b:82: a9:77:14:73:9e:70:eb:99:7c:ac:39:ab:25:f5:3e:f9:ef:56: 75:3b:ed:7e:68:2a:13:c7:f9:2b:ac:c4:31:ae:65:96:1c:af: fc:fc:ba:95:02:37:9b:e8:09:b6:e1:96:b1:ab:91:cb:57:a1: cc:a0:f8:b7:97:b4:94:4a:5d:5f:38:70:ac:83:a1:88:f4:1c: 25:49:a8:a5:b1:fd:7e:8d:23:20:cf:72:b1:70:08:47:d1:3a: fd:74:0e:ed:bf:17:fc:9c:0b:db:8f:5b:a5:52:d0:0d:f6:d2: f1:56:02:d9:c9:99:a8:4a:f9:93:9e:cb:3d:74:0a:b6:c2:13: 28:5e:f5:c5:39:2c:38:ea:3a:64:c1:97:0a:a0:c0:ba:74:85: d7:0e:6a:73:6a:ce:d8:9a:10:38:b2:b8:ab:f5:3e:93:2a:3e: 34:56:5b:25:ab:66:7e:37:7f:f6:90:87:2b:4c:e3:37:3f:ed: e0:56:15:36:84:24:40:88:5f:88:3d:26:4d:73:f3:17:d8:67: 7a:c7:34:b0:e7:2f:5d:2b:5a:a0:7b:91:ee:68:1a:03:a0:57: 8a:00:3b:3f:df:0f:32:09:55:4d:49:5c:59:6f:30:2c:16:2e: 8d:2c:0f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjQwNTA3MDYyNzE1WhcNMjQwNTE0MDYyNzE1WjAYMRYwFAYD VQQDEw02NjM5YzljMy05N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylZW8ouGrvMqRMfvsuBwIFjAccSXcTAUPMDy2BWkiC7JjwTYM6dwu7ZuE4oe 9CMBj97FxB6P/5nh1nXAbMve5BnBqGPiItSp3wF0y29UMcasQfiaxc/cHNgUfxFA lScPjL7K/KAfUOEQEwDQkP9mbeQv5WKaLbvKR3CUyKq3rJ8tFiHStxlQi3oUzsnw XkavYAh7dOtOyaH7GWpV36hPq5IB0anogRnFIESv5OfGu4vL3tXPrASfUetPkRHz uH8W2amrolAXmivlv/H1LLwDZzp5+I/TwG6GfLjObhRQ92W3jvT3Hcm8PKtLFO5V tpuFvFBRIDtJZsPq67B9nej8fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRIZijt 0L6QMsvOrSGy61Xx9jVoMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxdsimR3Eey8TmrMwGmDXXG4KpdxRznnDrmXysOasl9T7571Z1O+1+ aCoTx/krrMQxrmWWHK/8/LqVAjeb6Am24Zaxq5HLV6HMoPi3l7SUSl1fOHCsg6GI 9BwlSailsf1+jSMgz3KxcAhH0Tr9dA7tvxf8nAvbj1ulUtAN9tLxVgLZyZmoSvmT nss9dAq2whMoXvXFOSw46jpkwZcKoMC6dIXXDmpzas7YmhA4srir9T6TKj40Vlsl q2Z+N3/2kIcrTOM3P+3gVhU2hCRAiF+IPSZNc/MX2Gd6xzSw5y9dK1qge5HuaBoD oFeKADs/3w8yCVVNSVxZbzAsFi6NLA9A -----END CERTIFICATE-----Generated at Tue May 7 07:01:24 2024 by rpki-client on console-fra.rpki-client.org