$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: e/5k/B4T1SROn2AV9C+oZbfuG+jPSQWmWW3rUpx6x5M= Subject key identifier: 13:81:7E:6E:26:3F:BA:51:5F:69:94:BB:43:0E:49:C7:72:52:4C:D5 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 2F Signing time: Fri 17 May 2024 08:36:40 +0000 Manifest this update: Fri 17 May 2024 08:36:39 +0000 Manifest next update: Fri 24 May 2024 08:36:39 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: 3gL1udf7PcpdQMCEVaw18V1jG8iKO5FatC9ZCpzRTdo=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: plzQ9RKkqXntAuDKJVzv/zPtJNdUEYF+YoPSopaX7Gw=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: XO1DlFSQ5Y0Zmkfs51mq8oCy55AogtMN5LSdsP8sXrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: May 17 08:36:39 2024 GMT Not After : May 24 08:36:39 2024 GMT Subject: CN=66471717-ebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:4a:aa:10:74:39:27:e2:11:20:f7:1c:f2: 56:fe:b1:f7:22:08:a6:e2:66:a3:05:fc:d1:9e:04: a4:c8:90:e4:ed:2a:b6:60:34:b4:14:99:2b:bf:db: 67:fd:ca:a8:46:80:1e:d0:56:16:ff:c1:4f:7e:ed: 12:3b:38:97:60:5e:90:9c:32:38:fe:7d:b0:f8:5f: cc:8b:95:e6:90:08:53:35:ac:0d:6c:28:d5:7d:77: 0c:36:25:d8:90:74:ee:36:df:ea:57:de:2e:0a:cd: 74:52:aa:87:2c:94:b4:c4:2e:2e:6a:5f:15:b2:9b: fa:28:10:7a:0a:97:1a:c8:68:1b:14:4d:92:71:9b: c9:c8:3b:d6:4c:a4:d0:e0:53:01:0b:43:93:3b:d2: 13:44:3f:1d:5d:00:48:f5:6c:24:78:40:9b:fe:87: 2e:03:83:58:15:6a:30:73:ca:19:fa:0f:58:41:f8: b8:46:be:83:e0:ac:57:31:1f:56:16:46:b7:4d:e8: c5:6c:b4:14:b4:be:9d:bb:83:cb:aa:ed:92:68:01: ac:76:04:ac:8c:75:05:da:6d:3a:98:a5:ed:72:53: 97:ed:08:18:cd:04:46:e0:f6:9f:2b:fd:29:39:8a: 08:3c:49:2f:f4:22:db:22:03:f3:72:70:60:7e:90: d1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:7E:6E:26:3F:BA:51:5F:69:94:BB:43:0E:49:C7:72:52:4C:D5 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bc:ea:07:07:3f:a7:81:b9:49:03:b7:69:aa:7f:ed:89:c3: 85:08:69:3c:53:d9:b1:cd:e6:52:72:79:92:c7:66:8c:62:ec: 46:22:65:e6:96:1d:67:61:44:91:a2:c3:db:80:3a:af:bf:c7: 5c:65:3e:97:f1:dd:a3:b3:15:78:c6:33:99:14:4f:fe:b3:e5: 75:aa:a5:ea:5c:d9:c4:a6:30:49:36:08:64:6d:30:da:84:9d: cb:94:f8:ab:6b:4d:e7:27:a9:ba:85:3a:5e:59:6a:ed:ba:2b: d0:f5:75:7d:c0:60:ed:14:a0:79:95:e5:66:07:f3:cb:81:36: b3:da:c5:cb:8e:00:d5:ad:c4:8d:9a:7e:4f:00:4b:3a:e4:94: 86:13:3a:ad:70:86:7a:1f:c4:d8:a3:15:c2:8c:9f:d0:45:4a: 6c:8c:ff:4b:27:93:4b:f5:52:dd:3e:dd:be:c0:4c:36:cc:57: dc:1a:f0:81:b2:97:ff:92:cc:7f:58:ed:e5:c0:31:0f:0d:f6: 49:7a:18:42:b2:2e:b4:b9:10:79:b6:e5:70:16:5e:4e:08:92: 09:a7:90:b8:7a:ec:8e:0b:38:c8:18:ff:c2:ef:4d:e1:f0:0a: b0:d3:0b:cc:f0:5d:43:a8:f4:78:36:d6:6a:dc:e0:e6:53:d7: 34:20:20:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzA2ODExMC8GA1UEBRMoQUEzNkRFQUEwQjQ4OEQ3NDNEMzA5NkEzNzREM0NFQzMw MzRFNjlEQTAeFw0yNDA1MTcwODM2MzlaFw0yNDA1MjQwODM2MzlaMBgxFjAUBgNV BAMTDTY2NDcxNzE3LWViYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFikqqEHQ5J+IRIPcc8lb+sfciCKbiZqMF/NGeBKTIkOTtKrZgNLQUmSu/22f9 yqhGgB7QVhb/wU9+7RI7OJdgXpCcMjj+fbD4X8yLleaQCFM1rA1sKNV9dww2JdiQ dO423+pX3i4KzXRSqocslLTELi5qXxWym/ooEHoKlxrIaBsUTZJxm8nIO9ZMpNDg UwELQ5M70hNEPx1dAEj1bCR4QJv+hy4Dg1gVajBzyhn6D1hB+LhGvoPgrFcxH1YW RrdN6MVstBS0vp27g8uq7ZJoAax2BKyMdQXabTqYpe1yU5ftCBjNBEbg9p8r/Sk5 igg8SS/0ItsiA/NycGB+kNEnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE4F+biY/ ulFfaZS7Qw5Jx3JSTNUwHwYDVR0jBBgwFoAUqjbeqgtIjXQ9MJajdNPOwwNOadow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMDY4Lzc4MUU3REM0RDUx NjExRUVCMzVFNkE2MEM0RjlBRTAyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWpiZXFndElqWFE5TUphamROUE93d05PYWRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MDY4Lzc4MUU3REM0RDUxNjExRUVCMzVFNkE2MEM0RjlBRTAyL3FqYmVxZ3RJalhR OU1KYWpkTlBPd3dOT2Fkby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALu86gcHP6eBuUkDt2mqf+2Jw4UIaTxT2bHN5lJyeZLHZoxi7EYiZeaW HWdhRJGiw9uAOq+/x1xlPpfx3aOzFXjGM5kUT/6z5XWqpepc2cSmMEk2CGRtMNqE ncuU+KtrTecnqbqFOl5Zau26K9D1dX3AYO0UoHmV5WYH88uBNrPaxcuOANWtxI2a fk8ASzrklIYTOq1whnofxNijFcKMn9BFSmyM/0snk0v1Ut0+3b7ATDbMV9wa8IGy l/+SzH9Y7eXAMQ8N9kl6GEKyLrS5EHm25XAWXk4IkgmnkLh67I4LOMgY/8LvTeHw CrDTC8zwXUOo9Hg21mrc4OZT1zQgIJA= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org