$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: EFrkaU5teNR97oXpGETsuHTlgmlTkucgUqhoejtEGZQ= Subject key identifier: EE:E7:DA:79:FF:70:D9:4F:E5:B2:5A:DB:2D:FD:F5:F9:B5:44:54:59 Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 02F3 Signing time: Sun 05 May 2024 03:24:08 +0000 Manifest this update: Sun 05 May 2024 03:24:08 +0000 Manifest next update: Sun 12 May 2024 03:24:08 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: fj7e1EcIlrzXAX/xUSK2Dw7Fq6VpgtqWo0NEFzETCTA=) 2: CFA920BC8FB811EC92086311C4F9AE02.roa (hash: XgFdyeYNo2CHvxcca0OmG1LVV2gujEhg9dVODYzniK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: May 5 03:24:08 2024 GMT Not After : May 12 03:24:08 2024 GMT Subject: CN=6636fbd8-bb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:5c:e6:ba:3e:92:7c:d2:3b:1d:e7:2a:d1: e4:86:52:f2:2a:f1:08:e2:7c:70:60:66:2b:ce:58: 8d:9e:17:77:18:ca:91:46:c1:40:4f:ef:9f:1d:38: 49:51:b2:ed:72:17:0f:33:ac:39:a8:98:38:87:5a: 40:6d:88:17:75:c9:99:83:89:df:08:94:e6:f0:38: f8:88:77:b4:31:ed:ff:42:87:5a:3b:9d:62:0b:25: 4a:4e:64:da:b8:06:dd:9e:51:69:5e:b3:90:86:e8: cd:d9:89:44:c2:0a:98:67:0b:85:d6:6d:4d:e7:1c: 01:36:0b:cb:da:8a:34:2d:d6:d0:ab:39:95:c4:72: f4:19:c0:c4:47:59:9a:bd:52:f4:15:4b:ad:a3:a7: 7f:bb:52:7a:b7:83:12:d0:41:09:06:ab:98:6c:ff: 01:66:b7:53:55:a7:05:20:9e:b0:b5:08:c7:a0:b6: 3b:63:12:12:e3:1e:7a:c4:ee:25:cc:49:64:c2:08: a7:10:56:ca:85:96:39:c0:5e:96:76:82:1e:b0:71: 39:61:24:3f:ec:06:2c:5c:83:9d:ad:66:09:2c:57: 5f:c8:d1:8d:5b:a8:7f:dd:5b:95:1b:89:d5:6c:6e: d3:9a:5a:46:e7:b2:cb:f3:7b:66:6c:0d:16:d2:8c: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E7:DA:79:FF:70:D9:4F:E5:B2:5A:DB:2D:FD:F5:F9:B5:44:54:59 X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:62:46:7f:57:db:30:10:81:37:23:7c:0d:1c:a8:0f:11:77: 44:0d:a0:5d:3d:ee:65:bf:46:6f:f4:cf:70:5e:37:6d:fe:74: 19:8d:ff:61:37:53:27:96:61:78:65:85:87:75:a5:11:f4:b0: 86:d0:f9:71:1d:76:71:1d:bb:11:95:19:d2:5e:19:96:3f:37: a1:6a:19:10:a2:61:6b:70:a7:fa:fd:e2:5d:30:12:f5:11:32: 77:39:08:26:87:1e:6e:a6:0d:73:3a:b3:e8:a7:4e:72:5f:73: 84:f7:0e:f9:b0:e5:22:32:8f:99:3a:62:e5:bc:07:3c:8c:9d: 99:02:a2:22:78:7f:36:d6:61:2b:ea:8b:ce:35:12:06:27:76: 57:36:7d:55:06:88:25:81:40:b1:ea:ff:92:2b:db:14:d1:d3: f8:33:b2:4a:2e:2c:9c:fb:70:0b:ce:0f:47:08:6a:73:e9:ea: 43:89:9c:e9:78:e5:e4:a3:56:69:f5:b7:86:83:5a:af:3f:2e: 1e:26:57:f9:49:04:de:ed:be:ac:26:96:81:b1:5c:c2:72:96: 03:85:e0:45:30:35:db:8e:02:ed:3d:ab:cc:2b:ac:65:45:e4: 2a:7d:6a:59:44:29:82:a9:54:27:22:3d:56:0a:44:61:25:4d: a9:a0:0b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjQwNTA1MDMyNDA4WhcNMjQwNTEyMDMyNDA4WjAYMRYwFAYD VQQDEw02NjM2ZmJkOC1iYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ1c5ro+knzSOx3nKtHkhlLyKvEI4nxwYGYrzliNnhd3GMqRRsFAT++fHThJ UbLtchcPM6w5qJg4h1pAbYgXdcmZg4nfCJTm8Dj4iHe0Me3/QodaO51iCyVKTmTa uAbdnlFpXrOQhujN2YlEwgqYZwuF1m1N5xwBNgvL2oo0LdbQqzmVxHL0GcDER1ma vVL0FUuto6d/u1J6t4MS0EEJBquYbP8BZrdTVacFIJ6wtQjHoLY7YxIS4x56xO4l zElkwginEFbKhZY5wF6WdoIesHE5YSQ/7AYsXIOdrWYJLFdfyNGNW6h/3VuVG4nV bG7TmlpG57LL83tmbA0W0ozpjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7n2nn/ cNlP5bJa2y399fm1RFRZMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYkZ/V9swEIE3I3wNHKgPEXdEDaBdPe5lv0Zv9M9wXjdt/nQZjf9h N1MnlmF4ZYWHdaUR9LCG0PlxHXZxHbsRlRnSXhmWPzehahkQomFrcKf6/eJdMBL1 ETJ3OQgmhx5upg1zOrPop05yX3OE9w75sOUiMo+ZOmLlvAc8jJ2ZAqIieH821mEr 6ovONRIGJ3ZXNn1VBoglgUCx6v+SK9sU0dP4M7JKLiyc+3ALzg9HCGpz6epDiZzp eOXko1Zp9beGg1qvPy4eJlf5SQTe7b6sJpaBsVzCcpYDheBFMDXbjgLtPavMK6xl ReQqfWpZRCmCqVQnIj1WCkRhJU2poAtU -----END CERTIFICATE-----Generated at Sun May 5 03:52:21 2024 by rpki-client on console-ams.rpki-client.org