$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: GDHhOVwBs7YEXDqcyug6JLuXUYUOvLkxn4PGgcd1+pc= Subject key identifier: 68:94:6B:45:F9:4A:30:6E:D0:26:EC:D7:E0:04:EB:BD:DD:76:27:F8 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1D07 Signing time: Sun 02 Jun 2024 16:41:31 +0000 Manifest this update: Sun 02 Jun 2024 16:41:30 +0000 Manifest next update: Sun 09 Jun 2024 16:41:30 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: lPalixliVJ9KIs60pzy5L+ia9xcfZCgaBf2FeMJXTyE=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: vXP4jKoUAOc2qrnaEmUGViJDNj4Qv7pqxjaT1Vkbt9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7439 (0x1d0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Jun 2 16:41:30 2024 GMT Not After : Jun 9 16:41:30 2024 GMT Subject: CN=665ca0bb-2915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:87:03:07:ce:a6:3b:88:9b:1c:08:2b:e4: 82:79:38:00:08:fe:c2:4a:f6:30:44:a4:42:89:de: c1:a8:9f:d1:5a:dd:b8:ff:7a:7c:79:66:05:a3:b0: b3:2f:3c:ea:6f:0e:de:61:1d:86:32:03:fa:52:1b: cf:42:9c:dd:c2:08:8b:c7:95:b0:cb:db:e7:9f:5d: a5:77:27:13:55:ba:dd:31:76:b6:8c:05:4b:15:e8: 0a:5b:21:46:6a:83:9b:79:a5:27:46:29:30:37:24: 58:86:e5:c6:be:64:d1:33:16:df:53:36:40:c1:42: 29:5f:82:67:2d:8c:19:2d:7a:54:85:a0:d8:ba:66: 67:28:07:57:ed:eb:77:15:e9:56:1e:77:ee:9d:22: 05:56:f1:94:c4:b1:3c:ac:51:3d:0c:df:99:1d:80: 62:72:dc:26:fa:1d:d7:2c:39:5d:72:60:4d:1c:68: 6a:e3:f4:38:29:57:01:f5:58:30:08:76:4e:45:95: ff:e5:58:af:e8:d8:a3:b9:49:f9:05:9b:4f:52:5e: 24:53:5c:6d:e8:29:e3:f6:85:9c:47:4c:8a:46:d3: 0b:8f:af:6b:c3:da:a3:61:db:67:a1:d0:c3:da:6c: 6d:ec:d1:6d:4c:9e:0d:a7:f5:10:51:15:f6:34:d9: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:6B:45:F9:4A:30:6E:D0:26:EC:D7:E0:04:EB:BD:DD:76:27:F8 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:10:a5:12:cf:02:33:e1:58:12:da:e4:ee:94:45:f4:4c:d8: fb:c2:05:98:a5:14:0c:72:42:dc:9b:e4:60:76:84:02:7d:79: a4:ae:56:d7:2a:50:dd:9c:74:b8:6c:f7:09:57:86:9b:b1:b7: 71:ef:f8:7f:52:28:a4:09:c8:84:c0:ab:06:0e:80:51:4a:12: e4:cd:13:16:78:ea:0d:70:8a:43:ab:fd:7a:02:10:33:2a:18: 04:4f:b9:32:12:bd:d8:22:cc:07:bb:1e:c5:04:17:c5:10:a1: a0:f2:cf:cf:50:50:81:c2:bd:8b:ec:21:7d:00:fd:f0:7d:9d: c9:68:4c:0c:61:e5:c4:44:f9:a2:44:f1:31:ea:8e:fe:aa:8e: f5:55:e9:dc:0c:00:ff:1e:ac:b0:ec:6c:77:e8:84:39:1a:96: 42:43:c7:dd:d8:74:24:be:11:ad:9e:9d:cf:94:33:ef:0f:86: ff:8c:bc:02:2d:c9:26:b1:d9:20:5d:47:b2:f9:8e:79:be:b8: e3:17:6b:d7:42:24:45:9b:b2:b1:d7:c8:97:f5:87:98:aa:4c: 75:5e:5c:86:f5:f4:d0:9e:4e:a0:ef:a9:d0:ec:21:65:0f:cb: 6e:a7:ad:7b:9c:2c:00:c0:79:66:65:0f:eb:90:0d:e3:dd:df: 84:09:ba:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjQwNjAyMTY0MTMwWhcNMjQwNjA5MTY0MTMwWjAYMRYwFAYD VQQDEw02NjVjYTBiYi0yOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEiHAwfOpjuImxwIK+SCeTgACP7CSvYwRKRCid7BqJ/RWt24/3p8eWYFo7Cz Lzzqbw7eYR2GMgP6UhvPQpzdwgiLx5Wwy9vnn12ldycTVbrdMXa2jAVLFegKWyFG aoObeaUnRikwNyRYhuXGvmTRMxbfUzZAwUIpX4JnLYwZLXpUhaDYumZnKAdX7et3 FelWHnfunSIFVvGUxLE8rFE9DN+ZHYBictwm+h3XLDldcmBNHGhq4/Q4KVcB9Vgw CHZORZX/5Viv6NijuUn5BZtPUl4kU1xt6Cnj9oWcR0yKRtMLj69rw9qjYdtnodDD 2mxt7NFtTJ4Np/UQURX2NNk6xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiUa0X5 SjBu0Cbs1+AE673ddif4MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1EKUSzwIz4VgS2uTulEX0TNj7wgWYpRQMckLcm+RgdoQCfXmkrlbX KlDdnHS4bPcJV4absbdx7/h/UiikCciEwKsGDoBRShLkzRMWeOoNcIpDq/16AhAz KhgET7kyEr3YIswHux7FBBfFEKGg8s/PUFCBwr2L7CF9AP3wfZ3JaEwMYeXERPmi RPEx6o7+qo71VencDAD/Hqyw7Gx36IQ5GpZCQ8fd2HQkvhGtnp3PlDPvD4b/jLwC LckmsdkgXUey+Y55vrjjF2vXQiRFm7Kx18iX9YeYqkx1XlyG9fTQnk6g76nQ7CFl D8tup617nCwAwHlmZQ/rkA3j3d+ECbpy -----END CERTIFICATE-----Generated at Sun Jun 2 17:59:46 2024 by rpki-client on console-fra.rpki-client.org