$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: 7ZG02XsX25NEH4QQ9PdXecF94B7QsJ79szmMshLPuCA= Subject key identifier: 7F:A4:5E:22:9A:5C:12:E0:AC:C3:4D:62:8A:39:A1:16:CE:17:F3:22 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 33E7 Signing time: Sat 04 May 2024 14:26:47 +0000 Manifest this update: Sat 04 May 2024 14:26:47 +0000 Manifest next update: Sat 11 May 2024 14:26:47 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: JKxdKtXXY4ACLX8iraoB5QhbgnY+Izp4VTtc1nbszNQ=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: v1rV53WzZWmrMzI/ovzC6ZtIEqJ492pcfJCtFraz0gM=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: gjp3o9tIm4VyqLrJwyLfxpBmtpdyfXJMbbExRvAW/uQ=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 7gvulhymoo0memfRg/UTkfWV5Oiq5ExIUWNThD1MND8=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: +gu8WSeEMeEOHevLv3lHmq1TZu30rJs1aHVVDzSTqYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: May 4 14:26:47 2024 GMT Not After : May 11 14:26:47 2024 GMT Subject: CN=663645a7-27f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:08:8a:a6:b2:bc:21:18:f4:c9:f8:ef:19: 0b:0a:d2:ed:74:bf:02:33:84:6a:5e:2d:5c:77:bf: ff:89:8f:ec:b8:07:2b:df:25:d3:97:a8:99:7f:79: 87:6b:5a:91:f4:68:b1:34:8c:28:80:6d:81:f6:7c: 4c:b3:c1:6e:f7:fd:ef:ca:0a:66:37:d1:bb:8b:a6: 1a:32:09:07:18:55:ed:db:c9:99:fe:20:e9:9b:44: 28:3c:21:67:5d:1d:a2:46:4d:32:a7:15:0e:66:56: 97:d2:59:4e:33:6a:ae:fe:99:47:ae:2c:d1:64:b5: 09:df:ab:d0:46:5b:80:cb:ca:5c:74:12:40:e4:86: 14:0c:7a:57:34:29:1b:c3:e7:b3:32:b5:79:d0:c5: b4:1c:dd:33:73:09:0e:4c:88:00:61:21:bf:22:6d: 86:93:39:00:74:e5:11:d9:21:81:d3:b7:a6:95:98: 0f:0e:79:89:28:78:7d:55:90:91:7f:b7:93:6f:00: 2f:d9:73:00:3f:29:99:59:97:b6:4f:ab:55:d5:05: 59:a6:59:a6:fb:1f:2b:df:9d:b6:4a:66:44:61:19: 65:d1:2d:f6:b7:da:f7:dd:5f:2d:14:c8:41:22:4b: 15:86:f2:a8:d5:45:c6:2e:33:ee:07:95:ac:8b:2b: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A4:5E:22:9A:5C:12:E0:AC:C3:4D:62:8A:39:A1:16:CE:17:F3:22 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:54:53:e8:07:0f:9f:19:35:5a:f9:a4:84:79:7d:f3:a1:33: 42:ee:5b:74:9f:a1:6b:2d:43:7d:d7:96:8a:88:ff:32:da:ea: 7c:8f:86:e2:9f:55:0e:a9:9d:d9:a2:6e:0c:46:99:74:97:77: 53:d9:fd:fc:28:6d:c3:67:2c:6f:ec:3a:6f:a9:7f:9a:d5:60: ac:67:d6:6a:dd:85:27:2d:8e:fc:d5:5c:3c:34:c7:de:97:05: 62:5a:3e:55:07:68:47:b2:67:39:a7:71:09:47:36:7a:d3:59: 31:99:8a:06:51:b5:a3:a3:46:5a:ae:8d:94:0b:73:8e:44:5b: 1e:fc:83:f5:32:39:27:bb:32:82:62:07:38:77:8b:78:c1:e8: ab:69:2f:ec:d6:22:58:52:eb:8e:26:81:5d:01:19:30:5e:45: a1:54:28:1d:fa:8d:9b:ec:6d:d2:81:a6:80:b9:cf:dc:58:41: f9:36:81:f0:a0:49:ea:d7:d9:00:3b:51:3e:34:3d:3a:22:b5: 45:08:49:18:6f:23:39:42:78:98:7f:67:60:0c:6c:8e:06:42: f1:10:ff:08:f8:8d:a8:27:b9:b5:92:fc:29:3a:c7:05:9c:73: e9:1f:64:fc:c7:c5:ef:16:3a:66:52:95:fa:6a:bf:09:fe:09: 94:a7:b0:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjQwNTA0MTQyNjQ3WhcNMjQwNTExMTQyNjQ3WjAYMRYwFAYD VQQDEw02NjM2NDVhNy0yN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzasIiqayvCEY9Mn47xkLCtLtdL8CM4RqXi1cd7//iY/suAcr3yXTl6iZf3mH a1qR9GixNIwogG2B9nxMs8Fu9/3vygpmN9G7i6YaMgkHGFXt28mZ/iDpm0QoPCFn XR2iRk0ypxUOZlaX0llOM2qu/plHrizRZLUJ36vQRluAy8pcdBJA5IYUDHpXNCkb w+ezMrV50MW0HN0zcwkOTIgAYSG/Im2GkzkAdOUR2SGB07emlZgPDnmJKHh9VZCR f7eTbwAv2XMAPymZWZe2T6tV1QVZplmm+x8r3522SmZEYRll0S32t9r33V8tFMhB IksVhvKo1UXGLjPuB5WsiytI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+kXiKa XBLgrMNNYoo5oRbOF/MiMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVFPoBw+fGTVa+aSEeX3zoTNC7lt0n6FrLUN915aKiP8y2up8j4bi n1UOqZ3Zom4MRpl0l3dT2f38KG3DZyxv7DpvqX+a1WCsZ9Zq3YUnLY781Vw8NMfe lwViWj5VB2hHsmc5p3EJRzZ601kxmYoGUbWjo0Zaro2UC3OORFse/IP1MjknuzKC Ygc4d4t4weiraS/s1iJYUuuOJoFdARkwXkWhVCgd+o2b7G3SgaaAuc/cWEH5NoHw oEnq19kAO1E+ND06IrVFCEkYbyM5QniYf2dgDGyOBkLxEP8I+I2oJ7m1kvwpOscF nHPpH2T8x8XvFjpmUpX6ar8J/gmUp7Ar -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org