$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: zK+BtANRhLQpKhqxas7PfMTWO8VIYOl8un5yJMGLZVo= Subject key identifier: 5D:B9:29:20:C5:9F:AB:E9:1C:F2:60:D3:D9:CA:06:4F:25:BF:E9:F5 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0374 Signing time: Fri 03 May 2024 02:51:49 +0000 Manifest this update: Fri 03 May 2024 02:51:48 +0000 Manifest next update: Fri 10 May 2024 02:51:48 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 379RK3UkRBFds6jdfzRK051Y5dSkpnJIRP4xvd2syCg=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: Q2iy243agdSDjEa884LDfciYzMpoalViChCS9O74Bsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: May 3 02:51:48 2024 GMT Not After : May 10 02:51:48 2024 GMT Subject: CN=66345145-5b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:c9:22:16:60:c4:f1:0e:4f:58:7c:d1:18: be:9a:01:7c:39:be:43:f3:2f:ac:e0:71:f0:15:b5: 64:b5:45:92:f6:56:42:24:57:65:a9:77:0a:2c:92: 06:c5:bc:e8:f0:bb:b1:be:3b:4f:ed:94:84:06:9a: 62:ba:57:af:db:f7:99:56:17:20:76:d7:83:72:2c: 29:ff:46:49:56:b8:64:57:4e:e7:78:ee:34:a6:bb: 1b:6f:f4:78:0f:05:fe:fa:ff:af:e9:20:01:10:36: 98:5e:75:6a:50:d7:81:b1:60:a1:16:00:4b:b2:1f: ea:29:23:3a:a9:00:d7:a9:e9:de:f0:23:00:2e:1f: 1e:08:2e:67:6b:c8:71:32:7e:48:ea:03:bf:36:76: fb:06:1c:d7:1a:2f:61:ef:d8:53:4f:d7:95:3c:ee: bc:74:78:2d:1d:20:d1:fd:b0:33:f5:4d:77:71:54: 21:e5:c5:7a:e8:dd:3e:70:be:90:31:03:1b:40:f1: 84:4f:6a:3a:d7:03:57:10:45:e5:21:f4:a1:ab:3c: 97:39:ff:49:23:5b:33:85:71:2f:de:f9:28:f8:45: 78:92:bb:c8:62:c1:d1:27:9e:6e:25:67:1a:c5:ae: f7:2b:d8:e3:5e:63:f7:45:d9:43:31:e6:66:bd:1f: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B9:29:20:C5:9F:AB:E9:1C:F2:60:D3:D9:CA:06:4F:25:BF:E9:F5 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:cf:de:d5:94:0a:7c:97:67:de:c6:35:2d:e2:92:22:14:7d: c5:82:1e:c3:57:56:59:f7:60:1b:24:78:c1:2d:fe:1e:27:6a: 76:dd:21:fa:c6:64:92:6c:8c:cd:9e:d9:58:53:27:96:6e:e8: e4:9d:ae:b0:ad:a2:15:e9:c9:75:17:6e:14:48:9f:de:8a:ca: 93:3e:e9:2d:2e:41:e3:e8:33:88:be:d9:f5:dd:b5:73:8c:f3: ea:cb:3c:bf:72:cc:28:9c:60:1a:5e:8f:64:a6:7c:0c:af:c8: 28:a3:2c:2b:8d:ee:fc:76:08:ac:72:cb:b6:9b:74:f9:e4:db: c4:b7:6e:90:4d:4d:39:a5:fa:b8:cc:6b:f3:82:fa:dd:7e:60: d6:36:27:fb:06:03:a7:03:d6:61:5a:51:56:46:02:f2:9c:03: 9e:5b:a9:40:db:ec:3d:aa:5f:ac:7c:a9:22:dd:88:61:7e:e6: 92:28:d1:fb:73:4d:5e:9b:ca:d1:0d:49:6e:84:e7:b8:24:e8: ec:c0:19:c7:46:c2:59:da:3c:9a:5d:c7:4f:5a:63:93:4c:34: 9d:a7:fa:bc:8f:64:3c:8e:09:4d:78:ce:bb:f1:3d:03:a4:96: ab:4c:62:92:7d:50:18:41:60:05:a1:e9:6e:3d:c8:1c:cb:9d: 3c:ea:15:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjQwNTAzMDI1MTQ4WhcNMjQwNTEwMDI1MTQ4WjAYMRYwFAYD VQQDEw02NjM0NTE0NS01YjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydDJIhZgxPEOT1h80Ri+mgF8Ob5D8y+s4HHwFbVktUWS9lZCJFdlqXcKLJIG xbzo8LuxvjtP7ZSEBppiulev2/eZVhcgdteDciwp/0ZJVrhkV07neO40prsbb/R4 DwX++v+v6SABEDaYXnVqUNeBsWChFgBLsh/qKSM6qQDXqene8CMALh8eCC5na8hx Mn5I6gO/Nnb7BhzXGi9h79hTT9eVPO68dHgtHSDR/bAz9U13cVQh5cV66N0+cL6Q MQMbQPGET2o61wNXEEXlIfShqzyXOf9JI1szhXEv3vko+EV4krvIYsHRJ55uJWca xa73K9jjXmP3RdlDMeZmvR+nowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF25KSDF n6vpHPJg09nKBk8lv+n1MB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZz97VlAp8l2fexjUt4pIiFH3Fgh7DV1ZZ92AbJHjBLf4eJ2p23SH6 xmSSbIzNntlYUyeWbujkna6wraIV6cl1F24USJ/eisqTPuktLkHj6DOIvtn13bVz jPPqyzy/cswonGAaXo9kpnwMr8gooywrje78dgiscsu2m3T55NvEt26QTU05pfq4 zGvzgvrdfmDWNif7BgOnA9ZhWlFWRgLynAOeW6lA2+w9ql+sfKki3YhhfuaSKNH7 c01em8rRDUluhOe4JOjswBnHRsJZ2jyaXcdPWmOTTDSdp/q8j2Q8jglNeM678T0D pJarTGKSfVAYQWAFoeluPcgcy5086hWM -----END CERTIFICATE-----Generated at Fri May 3 04:36:55 2024 by rpki-client on console-ams.rpki-client.org