$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: MAvR7F/fnkzinx6wUiMdZ2dwJ6dPhU3YWdKWtc0uvkk= Subject key identifier: 1E:26:BD:CA:0F:C2:47:6A:60:BE:F3:F1:1E:F9:70:14:76:39:E6:92 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 02F4 Signing time: Sun 05 May 2024 03:22:36 +0000 Manifest this update: Sun 05 May 2024 03:22:35 +0000 Manifest next update: Sun 12 May 2024 03:22:35 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: hKsLhZsIiB/8nb109sHybm9c4jUneVM9e/qrXHRVVeY=) 2: AE4DE13E8E3F11ECBB20E316C4F9AE02.roa (hash: zvKQL1omnofz1f+BInkRSZkW1yJ1BmcqdSBhJH8cp5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: May 5 03:22:35 2024 GMT Not After : May 12 03:22:35 2024 GMT Subject: CN=6636fb7c-1472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:41:92:c3:5b:b7:e5:e3:ad:97:bc:2d:85: fe:ed:e3:7b:d4:40:b4:0b:7e:74:ad:4a:67:99:9d: 1e:77:01:dc:04:a5:80:19:d3:1c:77:c4:f8:28:22: 4a:81:f2:ea:a7:8e:3f:7b:43:06:0f:f5:7b:75:7a: 7e:80:c6:8a:0c:9f:6d:d1:ad:f4:d8:d9:5d:13:6d: df:6e:9c:58:7c:8b:21:78:3c:20:4c:09:20:87:1e: 07:81:6c:98:0e:49:6b:00:db:ed:fa:36:52:9b:34: 32:68:20:6b:41:1c:97:04:51:0d:42:9c:fb:a4:bb: 0f:24:6c:98:ad:24:0d:28:fa:8b:29:3c:55:fc:e8: a6:fc:d2:46:4a:cd:a7:f3:b6:a9:07:64:37:71:34: d6:fd:65:f1:97:ed:9f:ef:df:a7:8f:c5:dc:4e:6b: 86:b2:6d:51:25:92:1a:95:05:cf:13:1e:9e:87:de: 0a:81:bc:a8:17:cf:64:0b:92:70:f0:ae:03:00:ca: c1:15:84:89:15:21:83:df:bb:69:13:1c:4e:15:d6: 30:a8:5a:2c:c5:c3:05:e9:b1:08:8d:06:45:89:92: 34:fd:20:2c:b6:cc:43:43:af:ed:a8:aa:56:5c:aa: 99:25:bc:10:b6:b9:3d:1c:f5:29:5d:82:63:f8:0c: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:BD:CA:0F:C2:47:6A:60:BE:F3:F1:1E:F9:70:14:76:39:E6:92 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ef:cf:1d:92:89:08:2a:5f:6b:b0:93:c3:36:ae:db:4b:ca: d9:9f:e0:48:56:00:ca:cd:eb:59:f0:fd:9b:6d:ce:4b:ca:d5: 48:04:d3:30:cd:61:7d:a4:cd:8f:42:0d:90:3f:0b:c9:53:86: 37:aa:2d:05:a0:23:1a:f2:dc:e5:f1:20:d9:80:a9:24:24:1f: fe:93:1a:24:e3:74:85:9a:ec:ec:2d:dd:fd:6c:1b:4a:67:08: e3:a6:12:8c:3d:94:e0:63:2d:30:ca:df:26:b2:41:79:c6:a2: 29:c0:36:b9:62:cb:3e:8d:20:2b:74:5f:95:1b:77:7a:5b:03: 8d:ee:0d:3f:68:23:3f:35:8d:7b:cb:55:9e:ce:c6:dc:cb:30: dd:f5:ed:1d:54:2f:b9:9e:37:1d:26:27:5c:e2:00:a0:75:a7: 14:f9:22:39:37:90:a6:08:b8:6f:23:a1:30:ff:57:ec:b2:72: 05:f0:87:a1:c9:da:f2:fa:c0:42:52:be:b5:46:a3:e2:13:3d: b3:d1:25:cc:08:f8:ff:da:ab:6d:bc:cd:d2:d0:05:f4:3b:0d: 40:af:97:e4:b3:02:9a:a5:89:41:df:b1:cc:c2:06:3c:ef:65: 21:a4:83:6d:cd:51:aa:35:d1:62:5f:ad:24:fa:10:8d:75:c3: 1c:aa:5f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjQwNTA1MDMyMjM1WhcNMjQwNTEyMDMyMjM1WjAYMRYwFAYD VQQDEw02NjM2ZmI3Yy0xNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYxBksNbt+XjrZe8LYX+7eN71EC0C350rUpnmZ0edwHcBKWAGdMcd8T4KCJK gfLqp44/e0MGD/V7dXp+gMaKDJ9t0a302NldE23fbpxYfIsheDwgTAkghx4HgWyY DklrANvt+jZSmzQyaCBrQRyXBFENQpz7pLsPJGyYrSQNKPqLKTxV/Oim/NJGSs2n 87apB2Q3cTTW/WXxl+2f79+nj8XcTmuGsm1RJZIalQXPEx6eh94KgbyoF89kC5Jw 8K4DAMrBFYSJFSGD37tpExxOFdYwqFosxcMF6bEIjQZFiZI0/SAstsxDQ6/tqKpW XKqZJbwQtrk9HPUpXYJj+AyMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4mvcoP wkdqYL7z8R75cBR2OeaSMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3788dkokIKl9rsJPDNq7bS8rZn+BIVgDKzetZ8P2bbc5LytVIBNMw zWF9pM2PQg2QPwvJU4Y3qi0FoCMa8tzl8SDZgKkkJB/+kxok43SFmuzsLd39bBtK ZwjjphKMPZTgYy0wyt8mskF5xqIpwDa5Yss+jSArdF+VG3d6WwON7g0/aCM/NY17 y1WezsbcyzDd9e0dVC+5njcdJidc4gCgdacU+SI5N5CmCLhvI6Ew/1fssnIF8Ieh ydry+sBCUr61RqPiEz2z0SXMCPj/2qttvM3S0AX0Ow1Ar5fkswKapYlB37HMwgY8 72UhpINtzVGqNdFiX60k+hCNdcMcql+Z -----END CERTIFICATE-----Generated at Sun May 5 03:52:21 2024 by rpki-client on console-ams.rpki-client.org