$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: CritECp8+XP4SxccYka5L+iKVhDhgLO7Z7IWVLGV5X0= Subject key identifier: D6:2E:D6:15:71:77:62:19:41:75:89:D7:62:61:EC:5F:57:B0:B0:24 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 33FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 33DD Signing time: Sat 04 May 2024 14:54:06 +0000 Manifest this update: Sat 04 May 2024 14:54:05 +0000 Manifest next update: Sat 11 May 2024 14:54:05 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: yePFBtXWY2zCL/wKEl5CWwaW6dtceUU0NKioZQUKkRM=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: BjFKz6VL6DapjXlLA2xUII7U/DIprQaJlMgnJVxIySM=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: fkSFRa17OQbrrMZVQbgWvfMD84ms7LzhBDUdh/usdYk=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: +wGN3Wjuhjw4Q4VpvH4C2sux09XcSo7oyefpGwMO99A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13309 (0x33fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: May 4 14:54:05 2024 GMT Not After : May 11 14:54:05 2024 GMT Subject: CN=66364c0e-5705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:0a:5e:9e:45:43:7e:4c:d3:3a:91:72:66: cb:73:52:ef:e1:ba:ba:ec:ae:ed:72:72:4b:46:9a: 14:dd:30:e6:52:d3:30:25:be:c8:c4:20:06:93:dd: 82:e3:de:3d:7d:74:f2:0e:65:79:b9:63:d7:7c:c5: fb:8f:38:b8:de:66:9e:38:a5:2a:e1:1d:ab:f5:2b: b9:d5:2f:1a:36:09:33:4d:e2:56:8f:a0:e7:f1:b0: af:62:9d:49:e4:4b:03:df:a7:58:27:1d:a8:27:f9: 2b:51:43:95:95:fd:a9:ea:e2:02:33:f9:8f:fd:24: ba:f5:f6:64:2a:80:cd:c5:b2:f2:21:62:a9:0a:b6: 6c:bb:aa:6a:21:9b:57:44:e4:64:05:14:39:4e:9f: 08:dc:35:1b:02:f7:bb:9e:7b:14:f2:ae:09:68:c4: c6:43:b0:c9:a2:08:c6:23:7f:a4:ef:7e:85:98:62: aa:c1:d3:39:2b:f3:4f:54:62:a2:a0:8f:8c:81:94: 2f:0d:78:f2:4a:7b:ba:f8:c2:6d:ac:6b:ca:77:56: 07:46:c6:4f:cc:d4:b9:84:f2:9b:20:b2:08:af:0d: 06:e3:f9:d4:d7:65:da:18:47:bb:cd:e9:41:08:2f: 44:d9:cc:61:d1:8a:cd:54:55:53:95:89:c9:c8:09: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:D6:15:71:77:62:19:41:75:89:D7:62:61:EC:5F:57:B0:B0:24 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a8:58:e3:b5:c7:82:96:7b:13:d3:37:e8:1a:eb:0a:68:c7: 9e:6e:20:dd:18:20:cb:73:89:30:6f:37:44:b4:46:28:61:18: e0:58:6c:45:3e:e7:8c:94:ac:1f:69:2e:80:ad:36:b3:fa:df: 07:b2:89:ad:a6:59:e0:74:c0:0e:86:8e:f9:e2:66:3d:a3:20: b3:ca:70:d2:97:c5:6b:6f:27:e5:bc:bb:cc:f2:c7:38:95:66: d7:13:c8:5d:33:1a:6d:0a:99:d6:ba:87:29:f1:b8:b2:91:3e: 9d:24:d3:82:05:51:b2:94:84:d6:ac:b5:3c:df:61:ca:8e:28: b2:e8:5c:ea:f1:60:30:03:3c:51:ad:32:05:54:a3:08:13:8c: 66:8b:99:d6:e6:ff:5a:37:2d:c2:2f:6a:b0:de:a9:3b:93:fe: 2d:48:e3:b4:0a:f1:3d:ac:9c:77:e5:bc:66:c1:22:cc:88:f7: 40:53:1e:57:d8:d9:e9:4f:c9:47:6f:fa:7f:20:35:f9:ae:2a: fe:34:d2:d8:2f:a1:ad:30:7a:e9:05:d5:74:50:85:78:6a:49: 06:7d:9f:d2:41:a8:fb:32:ee:83:dc:cd:49:fe:28:19:7b:bd: 27:e1:53:4d:10:09:f0:a0:62:b0:f2:34:1d:28:06:fd:a2:f0: ab:c7:ef:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjQwNTA0MTQ1NDA1WhcNMjQwNTExMTQ1NDA1WjAYMRYwFAYD VQQDEw02NjM2NGMwZS01NzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruQKXp5FQ35M0zqRcmbLc1Lv4bq67K7tcnJLRpoU3TDmUtMwJb7IxCAGk92C 4949fXTyDmV5uWPXfMX7jzi43maeOKUq4R2r9Su51S8aNgkzTeJWj6Dn8bCvYp1J 5EsD36dYJx2oJ/krUUOVlf2p6uICM/mP/SS69fZkKoDNxbLyIWKpCrZsu6pqIZtX RORkBRQ5Tp8I3DUbAve7nnsU8q4JaMTGQ7DJogjGI3+k736FmGKqwdM5K/NPVGKi oI+MgZQvDXjySnu6+MJtrGvKd1YHRsZPzNS5hPKbILIIrw0G4/nU12XaGEe7zelB CC9E2cxh0YrNVFVTlYnJyAlZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYu1hVx d2IZQXWJ12Jh7F9XsLAkMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqFjjtceClnsT0zfoGusKaMeebiDdGCDLc4kwbzdEtEYoYRjgWGxF PueMlKwfaS6ArTaz+t8HsomtplngdMAOho754mY9oyCzynDSl8VrbyflvLvM8sc4 lWbXE8hdMxptCpnWuocp8biykT6dJNOCBVGylITWrLU832HKjiiy6Fzq8WAwAzxR rTIFVKMIE4xmi5nW5v9aNy3CL2qw3qk7k/4tSOO0CvE9rJx35bxmwSLMiPdAUx5X 2NnpT8lHb/p/IDX5rir+NNLYL6GtMHrpBdV0UIV4akkGfZ/SQaj7Mu6D3M1J/igZ e70n4VNNEAnwoGKw8jQdKAb9ovCrx+9a -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org