$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: PLxI7lmgqINHzG+FdQoGArcf5LwkamacxMN0jqCDFEE= Subject key identifier: 63:DC:F7:1B:4A:B0:BF:FE:C8:2E:AD:97:BC:69:E0:00:9A:A1:60:83 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0348 Signing time: Sun 05 May 2024 03:04:53 +0000 Manifest this update: Sun 05 May 2024 03:04:52 +0000 Manifest next update: Sun 12 May 2024 03:04:52 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: UCpVI2SiIrJKJJjgbpKZEaPqK+aFImkKj8oamqIP7ms=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: 2ZcrJfUo8iGbf+zRyErKxf9o0VcsflrpmejeHCyEHtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: May 5 03:04:52 2024 GMT Not After : May 12 03:04:52 2024 GMT Subject: CN=6636f755-cca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:6e:5c:84:49:d7:76:51:99:32:6b:aa:81: cd:ed:cd:2c:04:ac:30:c5:8d:de:e3:6c:3d:58:cd: 43:d3:e6:94:ae:40:4a:14:1b:f2:c0:4c:f6:ed:04: 54:a6:e3:9f:f7:3f:b3:78:5d:d9:da:3b:ab:d4:8b: 62:cd:02:80:06:0f:9b:11:85:01:c0:cd:87:a0:2d: 3c:48:a0:59:94:7d:5f:ac:2e:85:d3:ee:8e:57:a6: 23:ed:7a:d1:1a:08:bd:d6:85:53:84:ee:dd:7e:4b: ee:cb:af:16:55:be:47:67:9d:76:02:cd:9d:29:0b: 3a:3a:1f:2c:d5:29:3d:3a:89:29:3c:51:2d:3c:eb: d5:e4:ae:83:db:c0:74:e7:9d:2a:78:d7:14:2b:f6: 20:66:ad:6d:17:37:d3:c3:9d:86:2b:cd:c6:45:b3: 8b:c3:ab:4f:ec:cb:5e:22:92:68:4c:b6:f7:87:6a: 8c:cd:39:dd:16:a3:8b:1c:d1:ae:e7:0a:40:87:4d: 98:c8:df:82:1e:2f:cd:84:8d:79:6d:bf:09:01:72: 24:bf:b8:df:d5:e0:c6:04:e9:32:c8:64:6a:c9:d3: d5:d7:dd:40:30:38:3d:8e:e7:6f:e1:e2:6e:54:2b: e2:22:7d:9e:6a:22:f8:34:a8:d3:c7:7d:23:11:14: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DC:F7:1B:4A:B0:BF:FE:C8:2E:AD:97:BC:69:E0:00:9A:A1:60:83 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bc:ba:5b:bb:00:f3:23:48:e4:08:21:82:05:ae:55:3e:20: 6c:03:b6:2b:4f:5a:04:4a:e7:a3:ad:a8:af:6c:d2:e1:0c:66: 84:3b:21:ed:01:28:2f:cc:d0:11:c7:83:73:e8:14:8e:9d:32: 42:04:76:ec:f7:ac:d9:ee:3f:aa:15:50:2c:62:60:7d:35:bf: 6b:36:e8:d7:6e:16:ff:26:e2:23:e9:aa:b1:ff:a6:76:8c:ee: 42:26:ba:5b:87:b6:06:7d:ab:2d:7b:ba:63:3f:9f:a7:4e:08: 62:d9:74:0b:dc:21:29:f7:c8:be:02:0c:18:65:06:6d:38:04: 5a:a4:cf:b8:21:1d:df:7a:84:d3:4f:51:a7:ac:b6:83:ec:a4: 9f:b3:5e:36:3f:23:01:84:6f:02:40:c0:42:87:7b:7c:6e:f2: 09:85:e4:b1:f5:a9:03:81:76:59:a2:77:27:3e:d7:06:bc:2f: 66:87:48:1e:4e:46:b5:db:50:c0:c3:41:df:5d:14:37:2a:3a: 37:75:cb:8d:ce:a0:98:6b:35:fc:64:61:9a:2d:ed:a2:46:d4: ed:d2:ca:d7:b7:04:eb:b4:8d:1a:51:45:08:33:6c:41:d6:76: 0b:5a:64:a0:5c:8f:3e:57:c1:2a:8e:af:7f:cb:5b:96:12:49: ad:01:02:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjQwNTA1MDMwNDUyWhcNMjQwNTEyMDMwNDUyWjAYMRYwFAYD VQQDEw02NjM2Zjc1NS1jY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw1uXIRJ13ZRmTJrqoHN7c0sBKwwxY3e42w9WM1D0+aUrkBKFBvywEz27QRU puOf9z+zeF3Z2jur1ItizQKABg+bEYUBwM2HoC08SKBZlH1frC6F0+6OV6Yj7XrR Ggi91oVThO7dfkvuy68WVb5HZ512As2dKQs6Oh8s1Sk9OokpPFEtPOvV5K6D28B0 550qeNcUK/YgZq1tFzfTw52GK83GRbOLw6tP7MteIpJoTLb3h2qMzTndFqOLHNGu 5wpAh02YyN+CHi/NhI15bb8JAXIkv7jf1eDGBOkyyGRqydPV191AMDg9judv4eJu VCviIn2eaiL4NKjTx30jERQd2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPc9xtK sL/+yC6tl7xp4ACaoWCDMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmvLpbuwDzI0jkCCGCBa5VPiBsA7YrT1oESuejraivbNLhDGaEOyHt ASgvzNARx4Nz6BSOnTJCBHbs96zZ7j+qFVAsYmB9Nb9rNujXbhb/JuIj6aqx/6Z2 jO5CJrpbh7YGfaste7pjP5+nTghi2XQL3CEp98i+AgwYZQZtOARapM+4IR3feoTT T1GnrLaD7KSfs142PyMBhG8CQMBCh3t8bvIJheSx9akDgXZZoncnPtcGvC9mh0ge Tka121DAw0HfXRQ3Kjo3dcuNzqCYazX8ZGGaLe2iRtTt0srXtwTrtI0aUUUIM2xB 1nYLWmSgXI8+V8Eqjq9/y1uWEkmtAQJ+ -----END CERTIFICATE-----Generated at Sun May 5 03:47:49 2024 by rpki-client on console-fra.rpki-client.org