$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: IWSQKK29SuhPP1whe61P7a/X4fFjhlJUNJSyKHAJ+cU= Subject key identifier: B0:BA:F8:C4:E3:C7:A1:00:18:A5:54:34:B1:E7:4D:F2:E8:FB:72:BC Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 099E Signing time: Tue 30 Apr 2024 21:16:14 +0000 Manifest this update: Tue 30 Apr 2024 21:16:14 +0000 Manifest next update: Tue 07 May 2024 21:16:14 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: LTYeNecfQJWz8I6iNuj0tqtp3UBvPlj5l1SB9Y9ZFv4=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: 7eyQ3NplMfQ7NeH3lqRBvpOppo5UvSFwpAIlHW8sg/M=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: FyzTLc6q4QxjkF8ADy/p1n3nRtCccHutyKoH8IBWzj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Apr 30 21:16:14 2024 GMT Not After : May 7 21:16:14 2024 GMT Subject: CN=66315f9e-3019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:0a:07:06:8a:80:a5:c8:0e:69:3f:c8:cb: 58:fc:95:fc:8e:c9:90:27:27:a7:2e:ce:cb:77:70: 3f:09:a2:0a:53:1d:4b:bd:65:79:11:57:44:0d:d2: d5:fc:de:be:b0:1c:e1:d2:1d:a6:40:e4:51:7b:03: 0a:4b:44:af:17:e3:27:95:e5:d1:8b:f1:a7:6f:34: 48:db:46:ef:3a:d3:58:f1:c5:6d:00:c3:17:3e:f9: 2e:17:44:d5:d6:45:e4:af:45:aa:6b:de:cb:8a:5e: 65:2d:5c:20:b9:31:d2:ad:62:15:ed:5c:ca:98:0f: 57:61:00:92:18:75:c1:ad:05:b8:e1:d3:30:1f:6c: e8:a8:9b:f6:5c:58:56:d4:35:14:91:15:d8:1a:77: 7f:4f:21:ee:50:24:62:89:19:be:a7:51:4d:ce:97: 51:2d:f9:c7:f1:23:45:0e:7c:73:56:9d:ab:65:e6: 87:52:ab:7d:44:0b:f9:57:5c:47:b1:73:71:54:71: 29:8f:af:11:c2:53:88:f1:da:95:6d:e9:b7:37:72: 51:57:93:80:ac:4a:bf:60:9d:6b:23:7f:74:d5:6a: 2b:56:f6:2a:80:45:eb:50:6e:73:f4:bf:1d:8a:bd: 0f:50:71:ef:9e:05:21:5f:ea:6d:a3:26:35:84:df: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:F8:C4:E3:C7:A1:00:18:A5:54:34:B1:E7:4D:F2:E8:FB:72:BC X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:7f:9e:a9:20:3d:69:63:9e:bb:bb:3e:c7:fe:9a:f5:9b:fd: f6:5b:46:45:9f:f2:c2:3e:7b:41:0b:fe:d1:d3:69:23:12:80: fa:9e:0e:77:02:db:16:b1:76:8b:c9:46:b5:76:e4:10:d3:26: b5:52:05:ce:69:ad:5c:6b:56:02:24:80:95:31:e8:96:b3:c9: 3e:39:ee:8a:33:70:4d:7a:d1:69:6c:92:ff:1c:66:7c:5c:95: 70:1f:bc:ff:bb:ff:70:d5:6c:29:35:56:8a:fc:3a:da:d8:b0: 57:5f:94:73:bd:46:b0:9e:92:cd:12:33:b9:9b:ce:32:ba:c8: 2a:21:db:4a:65:04:32:a3:22:e2:cd:d5:ad:67:92:7c:71:73: 37:ed:5e:cd:8c:a8:1d:29:f9:7d:08:1a:99:51:bd:e4:1e:4e: 85:22:2e:28:a8:ac:c9:ea:e8:2a:dd:ae:5f:c8:ce:67:96:8b: 2b:85:b3:92:ff:6a:6a:ba:56:ff:46:3e:c7:db:53:eb:4f:07: d8:ca:e1:c8:b9:5d:34:7a:df:71:65:dd:b1:3c:c6:95:3d:b8: fa:0a:d6:43:39:46:2d:bf:42:ff:4d:66:af:1a:ba:f6:d3:8b: 1f:d7:20:cc:c8:b5:22:3a:8f:46:c2:47:02:ca:1c:fa:b6:3d: 6c:12:c1:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjQwNDMwMjExNjE0WhcNMjQwNTA3MjExNjE0WjAYMRYwFAYD VQQDEw02NjMxNWY5ZS0zMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT8KBwaKgKXIDmk/yMtY/JX8jsmQJyenLs7Ld3A/CaIKUx1LvWV5EVdEDdLV /N6+sBzh0h2mQORRewMKS0SvF+MnleXRi/GnbzRI20bvOtNY8cVtAMMXPvkuF0TV 1kXkr0Wqa97Lil5lLVwguTHSrWIV7VzKmA9XYQCSGHXBrQW44dMwH2zoqJv2XFhW 1DUUkRXYGnd/TyHuUCRiiRm+p1FNzpdRLfnH8SNFDnxzVp2rZeaHUqt9RAv5V1xH sXNxVHEpj68RwlOI8dqVbem3N3JRV5OArEq/YJ1rI3901WorVvYqgEXrUG5z9L8d ir0PUHHvngUhX+ptoyY1hN/jeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC6+MTj x6EAGKVUNLHnTfLo+3K8MB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1f56pID1pY567uz7H/pr1m/32W0ZFn/LCPntBC/7R02kjEoD6ng53 AtsWsXaLyUa1duQQ0ya1UgXOaa1ca1YCJICVMeiWs8k+Oe6KM3BNetFpbJL/HGZ8 XJVwH7z/u/9w1WwpNVaK/Dra2LBXX5RzvUawnpLNEjO5m84yusgqIdtKZQQyoyLi zdWtZ5J8cXM37V7NjKgdKfl9CBqZUb3kHk6FIi4oqKzJ6ugq3a5fyM5nlosrhbOS /2pqulb/Rj7H21PrTwfYyuHIuV00et9xZd2xPMaVPbj6CtZDOUYtv0L/TWavGrr2 04sf1yDMyLUiOo9GwkcCyhz6tj1sEsED -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org