$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: /ys0GBrZptuP+gwMmFgpgt0H4cLHqLau9smJ7z/MAgE= Subject key identifier: 06:E1:67:C5:E3:3A:BD:F1:61:A5:D0:47:E7:CE:44:1E:B7:7C:AE:AF Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 0639 Signing time: Thu 02 May 2024 23:52:35 +0000 Manifest this update: Thu 02 May 2024 23:52:34 +0000 Manifest next update: Thu 09 May 2024 23:52:34 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: le3eeFqN5kcXh+iltxhhcsyT1IhHdjMwpbyOBzX1s5U=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: nPTnILQ/bgyzA6oyqhNMAYL/1YXBk3jme7zHlP/uFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: May 2 23:52:34 2024 GMT Not After : May 9 23:52:34 2024 GMT Subject: CN=66342743-61e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:65:40:d4:5a:35:c3:e1:ea:90:93:9d:84: d8:51:ea:20:ab:ac:d0:16:4e:15:80:a4:38:3d:e0: e0:6f:c6:6e:30:ea:6f:50:33:62:53:da:48:f9:6f: ba:c7:66:4a:94:6c:54:01:ba:23:dd:48:a8:1a:75: 1e:5f:b1:aa:92:bc:de:2b:91:68:5e:91:a0:73:00: a8:47:92:ab:22:a6:6b:fe:b3:b8:4d:ef:90:e6:de: 73:d5:2e:6c:78:58:da:b0:93:8d:28:4f:49:e0:f8: f0:0e:b9:02:b4:00:dc:d2:ed:ac:b8:68:f4:17:64: 9d:c2:9a:12:83:cb:14:9d:e7:30:75:4a:c6:fd:f2: 6a:76:26:14:7a:8a:98:83:32:33:d9:9b:2a:96:03: a1:5e:6d:75:d4:ec:33:cf:c0:46:d3:65:e9:f1:9c: c2:46:4c:9c:18:7d:0e:c5:e4:17:b9:67:28:ea:17: f6:14:83:2f:38:60:15:69:53:a1:bc:f0:a8:bd:fc: 87:ca:64:52:77:50:99:f2:70:c5:50:5b:b2:69:83: 35:41:86:08:dd:63:09:7f:ef:8d:cc:2e:cb:2f:06: be:a1:61:a7:8e:06:30:48:3f:30:71:69:76:3b:a4: 61:65:e4:df:81:8d:b1:66:95:c9:f4:bc:8a:72:76: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E1:67:C5:E3:3A:BD:F1:61:A5:D0:47:E7:CE:44:1E:B7:7C:AE:AF X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b5:f6:13:c6:f0:c6:59:c4:4b:7d:4f:60:c7:ea:39:3b:8b: c5:c1:73:75:15:a0:e9:9f:3f:0d:cb:43:69:93:9f:e6:18:0e: db:20:78:93:6a:90:f0:35:7d:f7:1e:5d:d8:b1:1a:dd:bb:ea: 3e:c2:ff:e8:ee:1d:6c:f6:f8:e1:fc:d0:68:56:88:a1:e5:50: d9:f2:d5:b5:32:c5:31:81:40:2a:e3:0b:d2:41:5b:f7:98:d9: a4:dd:b2:e7:d3:cd:49:3b:04:62:41:1b:49:7a:a9:54:95:14: 9c:4d:77:a7:a3:95:c6:92:8a:84:35:4b:0b:9c:5b:b1:2c:28: 8a:69:9a:ac:87:a2:09:4d:4d:86:e7:79:92:6f:28:b9:5a:a1: 30:73:33:ae:73:73:bf:d1:ff:1b:84:94:6c:84:a9:93:3c:d3: 7c:15:47:b1:69:a1:52:34:63:68:67:2e:f2:15:dc:ba:77:db: 4a:bc:1a:14:27:ad:29:b2:a3:90:85:29:fc:a3:65:cd:41:83: 75:7c:cd:83:f6:e1:a6:fc:22:8b:bb:e7:ec:77:a5:20:78:a0: 72:36:bd:46:25:06:0b:ec:c6:43:2b:61:da:0d:11:c2:78:7e: b8:5c:c1:18:2c:bd:bb:5c:db:81:d9:66:97:dd:5a:0d:c4:0f: 38:49:99:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjQwNTAyMjM1MjM0WhcNMjQwNTA5MjM1MjM0WjAYMRYwFAYD VQQDEw02NjM0Mjc0My02MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu05lQNRaNcPh6pCTnYTYUeogq6zQFk4VgKQ4PeDgb8ZuMOpvUDNiU9pI+W+6 x2ZKlGxUAboj3UioGnUeX7GqkrzeK5FoXpGgcwCoR5KrIqZr/rO4Te+Q5t5z1S5s eFjasJONKE9J4PjwDrkCtADc0u2suGj0F2SdwpoSg8sUnecwdUrG/fJqdiYUeoqY gzIz2ZsqlgOhXm111Owzz8BG02Xp8ZzCRkycGH0OxeQXuWco6hf2FIMvOGAVaVOh vPCovfyHymRSd1CZ8nDFUFuyaYM1QYYI3WMJf++NzC7LLwa+oWGnjgYwSD8wcWl2 O6RhZeTfgY2xZpXJ9LyKcnY04wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbhZ8Xj Or3xYaXQR+fORB63fK6vMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAItfYTxvDGWcRLfU9gx+o5O4vFwXN1FaDpnz8Ny0Npk5/mGA7bIHiT apDwNX33Hl3YsRrdu+o+wv/o7h1s9vjh/NBoVoih5VDZ8tW1MsUxgUAq4wvSQVv3 mNmk3bLn081JOwRiQRtJeqlUlRScTXeno5XGkoqENUsLnFuxLCiKaZqsh6IJTU2G 53mSbyi5WqEwczOuc3O/0f8bhJRshKmTPNN8FUexaaFSNGNoZy7yFdy6d9tKvBoU J60psqOQhSn8o2XNQYN1fM2D9uGm/CKLu+fsd6UgeKByNr1GJQYL7MZDK2HaDRHC eH64XMEYLL27XNuB2WaX3VoNxA84SZkf -----END CERTIFICATE-----Generated at Fri May 3 00:48:31 2024 by rpki-client on console-ams.rpki-client.org