$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: daHA/oPkXaqqVo+E0b3ijwq0paw9mIOnvgQzlADfhx4= Subject key identifier: BB:DD:D4:4C:52:BF:2C:A5:0F:AB:36:A0:E3:35:5C:BE:57:1F:2E:5D Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 06CD Signing time: Sat 04 May 2024 23:09:54 +0000 Manifest this update: Sat 04 May 2024 23:09:54 +0000 Manifest next update: Sat 11 May 2024 23:09:54 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: FTgfh7P47OE/hf20WT3N+Pcyq4qqjAS/R8LpxwvocFw=) 2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: a5Oqhzfh+WaBH67r7bDw9PUnq0IPn3kK+b8Kc7vybP4=) 3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: wo4sZk/2tDxvhuf03EBqImJmU7Tr8UCXxl6x1i7v+YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: May 4 23:09:54 2024 GMT Not After : May 11 23:09:54 2024 GMT Subject: CN=6636c042-7b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:00:45:37:30:14:7d:aa:e9:55:9a:52:37: b8:7b:d3:7d:09:25:55:16:8f:5d:9a:8f:04:d6:7e: 81:0b:56:bb:3a:76:3c:fe:83:ca:dd:ad:6a:f6:58: fb:91:36:b9:e1:55:dc:79:f7:9d:61:ce:9b:33:a2: b5:c1:19:2b:89:ae:d9:4c:22:3b:f8:d6:79:59:03: be:c6:40:1e:6b:5b:6a:18:3a:0d:a2:06:92:11:9b: 9e:6d:cb:a4:49:3e:30:15:ae:48:a8:a4:04:86:09: 2c:f2:a7:f5:3b:bf:4a:28:6d:a0:7f:a2:c5:5b:ee: 57:7f:49:a9:04:23:7e:b1:b6:d7:0e:1d:2c:d3:b0: 65:29:94:3a:d7:7d:2d:9b:31:09:f3:52:97:8d:e8: 54:0b:e3:ed:0d:f6:95:b8:85:cf:8c:a6:7b:ff:3d: 75:84:d1:61:97:ab:be:5d:55:33:e9:9a:19:25:6c: 60:d9:91:22:ab:63:78:8d:9e:2c:d6:4f:c0:ee:13: 34:f3:77:cd:79:20:72:a1:38:1f:c0:09:e8:15:b6: 74:4a:4e:b1:d5:89:31:51:13:f0:a9:b4:19:59:16: 75:72:eb:d1:f5:55:80:ab:f0:d0:e4:d6:ab:19:02: 2a:91:e9:15:c4:5b:e4:08:9c:0a:8f:06:c3:ca:18: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DD:D4:4C:52:BF:2C:A5:0F:AB:36:A0:E3:35:5C:BE:57:1F:2E:5D X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:01:60:ad:e8:c8:c9:b3:bf:5d:66:c3:89:a5:3b:86:d5:18: c2:ae:65:82:ce:bc:6b:f9:b9:32:55:42:a8:cc:16:79:da:08: 0c:ce:a7:02:52:f9:47:80:cc:a5:a6:ba:2c:f6:61:43:db:9f: f3:b2:95:dd:7a:77:b9:4f:79:1f:e6:ab:e0:bf:d4:4a:6c:14: f6:dd:b1:29:51:86:c3:83:57:8a:eb:0c:5a:5c:1f:77:a7:93: be:e9:50:d3:18:a2:2c:02:50:ef:7e:53:e6:28:89:37:28:f1: 07:c0:c0:fc:a6:f6:3b:c5:11:01:d5:08:46:0e:e0:eb:54:49: cf:b8:98:9d:3e:a8:14:b0:60:46:ca:51:5e:34:7d:d8:88:cd: 3c:00:17:f2:b2:05:b0:f8:03:a6:ff:ee:b0:a5:94:62:57:a8: 20:28:ad:18:25:1f:80:10:a2:7b:de:1f:df:0a:46:9c:0d:ff: a1:cf:c8:34:fa:a3:22:7b:81:a5:2d:20:a8:00:04:50:87:4d: fa:7d:b0:80:ec:fc:4a:76:08:bc:76:e3:b2:dc:1a:c1:99:5d: 55:c0:5a:d2:50:9e:25:ad:68:a8:36:48:f3:cf:b6:23:af:32: 87:4d:6b:d5:ff:1d:23:75:c9:00:59:6a:72:e7:2c:f0:b1:c0: 24:61:3b:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjQwNTA0MjMwOTU0WhcNMjQwNTExMjMwOTU0WjAYMRYwFAYD VQQDEw02NjM2YzA0Mi03YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8kARTcwFH2q6VWaUje4e9N9CSVVFo9dmo8E1n6BC1a7OnY8/oPK3a1q9lj7 kTa54VXcefedYc6bM6K1wRkria7ZTCI7+NZ5WQO+xkAea1tqGDoNogaSEZuebcuk ST4wFa5IqKQEhgks8qf1O79KKG2gf6LFW+5Xf0mpBCN+sbbXDh0s07BlKZQ6130t mzEJ81KXjehUC+PtDfaVuIXPjKZ7/z11hNFhl6u+XVUz6ZoZJWxg2ZEiq2N4jZ4s 1k/A7hM083fNeSByoTgfwAnoFbZ0Sk6x1YkxURPwqbQZWRZ1cuvR9VWAq/DQ5Nar GQIqkekVxFvkCJwKjwbDyhj9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvd1ExS vyylD6s2oOM1XL5XHy5dMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEAWCt6MjJs79dZsOJpTuG1RjCrmWCzrxr+bkyVUKozBZ52ggMzqcC UvlHgMylpros9mFD25/zspXdene5T3kf5qvgv9RKbBT23bEpUYbDg1eK6wxaXB93 p5O+6VDTGKIsAlDvflPmKIk3KPEHwMD8pvY7xREB1QhGDuDrVEnPuJidPqgUsGBG ylFeNH3YiM08ABfysgWw+AOm/+6wpZRiV6ggKK0YJR+AEKJ73h/fCkacDf+hz8g0 +qMie4GlLSCoAARQh036fbCA7PxKdgi8duOy3BrBmV1VwFrSUJ4lrWioNkjzz7Yj rzKHTWvV/x0jdckAWWpy5yzwscAkYTsA -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org