$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: 9GtwUVlPp9Wy7gwJHiGm65qvjMY2rLZIXPJysYv0eoE= Subject key identifier: 56:8E:9D:91:48:F8:3E:BE:1A:1E:BE:00:98:3B:33:1A:16:7E:F2:09 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0CFD Signing time: Sat 04 May 2024 18:55:27 +0000 Manifest this update: Sat 04 May 2024 18:55:27 +0000 Manifest next update: Sat 11 May 2024 18:55:27 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: PrwX5sdlpHCMkmGp8PlhRZU7EVQU8IGiq1DfHDsC6fw=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: ZrIrMlDSIlMDF/NIN+ZyfFl0GWkq9VpF5pX4I1tcxXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: May 4 18:55:27 2024 GMT Not After : May 11 18:55:27 2024 GMT Subject: CN=6636849f-a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:36:28:58:3c:43:4d:e6:43:d6:e2:3c:a1: f8:89:79:be:41:50:73:3d:c7:50:31:c1:8c:72:f4: f1:1a:9b:5e:22:47:84:05:de:78:02:41:b3:5f:35: e1:f6:fd:0c:ab:f9:c1:06:ec:33:3f:c9:44:5e:7e: a8:ab:f1:52:f2:3f:b9:be:b7:00:ba:0a:bb:46:99: 4e:8f:b7:4e:04:29:17:bf:41:77:a8:e5:93:71:6d: 63:29:41:c1:6a:90:cb:f0:37:f7:81:5b:72:05:ac: 3f:fd:c1:d3:cd:fa:fb:c0:76:eb:d0:b9:fa:8d:0a: 40:19:5f:3f:ac:d7:15:ce:c9:82:e0:3e:35:f8:c7: e0:78:45:90:fa:e1:f4:f4:3b:a6:fc:1e:0f:33:f2: 5c:52:ec:7f:f3:0b:47:a1:9f:b8:e3:23:11:e6:a5: 67:8b:4b:e1:e7:a8:e8:0b:e7:d7:c0:cb:68:f8:c1: 70:61:c8:b4:ed:db:91:48:2a:98:f6:35:5d:eb:61: 5b:59:af:b3:9e:3f:09:09:47:c2:fc:06:49:8a:f2: c7:a1:a9:cc:c2:16:e2:f1:f2:e8:4e:96:7b:12:cc: 4a:be:63:01:c6:a0:e9:d7:23:11:bd:b7:24:71:27: 2a:cc:dc:05:f3:20:4b:8f:0b:e9:e0:64:d8:97:d6: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8E:9D:91:48:F8:3E:BE:1A:1E:BE:00:98:3B:33:1A:16:7E:F2:09 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:1e:f0:29:41:17:04:a6:76:92:23:ce:9e:80:ee:a5:02:57: de:a3:da:97:08:3b:30:22:ea:42:ab:8e:e4:18:59:2a:dc:46: ed:e7:bd:78:44:b8:ad:3f:c8:a5:c3:00:a4:9f:a7:49:85:ce: 45:b8:56:6e:b1:aa:f4:29:f5:32:58:32:fc:45:95:cc:bd:64: ec:77:da:a3:15:0d:0a:36:33:68:04:cd:28:0e:b2:3c:26:67: 7c:fe:d7:69:57:5e:d4:ff:1f:5f:b1:3b:08:db:13:4c:ce:28: 23:1c:42:b3:82:19:a8:b1:4a:1a:52:cb:54:7c:4c:71:aa:2a: 2d:d8:8c:fb:27:db:51:65:05:62:2b:42:35:da:83:60:6f:9c: 45:c5:ad:f6:5c:f7:a7:09:8d:d8:e5:03:be:27:34:7b:63:1a: cf:d3:cd:aa:a3:fd:66:57:57:7a:43:70:32:e6:ff:1c:60:4a: db:8f:67:ef:13:45:eb:fd:bf:0c:f0:be:56:38:cf:e8:37:6b: b8:36:0d:2a:8c:a8:4d:7b:9a:bd:e8:42:93:3c:73:56:9a:44: b2:89:08:84:4d:3f:a7:3f:72:84:b8:57:4f:d6:27:4f:36:6d: e4:b3:cc:c2:60:bf:c9:e3:04:80:db:9f:d7:15:cb:1c:fd:76: 61:53:dd:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjQwNTA0MTg1NTI3WhcNMjQwNTExMTg1NTI3WjAYMRYwFAYD VQQDEw02NjM2ODQ5Zi1hNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh42KFg8Q03mQ9biPKH4iXm+QVBzPcdQMcGMcvTxGpteIkeEBd54AkGzXzXh 9v0Mq/nBBuwzP8lEXn6oq/FS8j+5vrcAugq7RplOj7dOBCkXv0F3qOWTcW1jKUHB apDL8Df3gVtyBaw//cHTzfr7wHbr0Ln6jQpAGV8/rNcVzsmC4D41+MfgeEWQ+uH0 9Dum/B4PM/JcUux/8wtHoZ+44yMR5qVni0vh56joC+fXwMto+MFwYci07duRSCqY 9jVd62FbWa+znj8JCUfC/AZJivLHoanMwhbi8fLoTpZ7EsxKvmMBxqDp1yMRvbck cScqzNwF8yBLjwvp4GTYl9aawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaOnZFI +D6+Gh6+AJg7MxoWfvIJMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqHvApQRcEpnaSI86egO6lAlfeo9qXCDswIupCq47kGFkq3Ebt5714 RLitP8ilwwCkn6dJhc5FuFZusar0KfUyWDL8RZXMvWTsd9qjFQ0KNjNoBM0oDrI8 Jmd8/tdpV17U/x9fsTsI2xNMzigjHEKzghmosUoaUstUfExxqiot2Iz7J9tRZQVi K0I12oNgb5xFxa32XPenCY3Y5QO+JzR7YxrP082qo/1mV1d6Q3Ay5v8cYErbj2fv E0Xr/b8M8L5WOM/oN2u4Ng0qjKhNe5q96EKTPHNWmkSyiQiETT+nP3KEuFdP1idP Nm3ks8zCYL/J4wSA25/XFcsc/XZhU934 -----END CERTIFICATE-----Generated at Sat May 4 19:58:46 2024 by rpki-client on console-ams.rpki-client.org