$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: ym5Vu8tjH4dvj8vZNMTWjJCSgIsHvkXdGwet9FSZt+A= Subject key identifier: A9:25:45:55:3A:88:AE:D0:45:C9:A9:9C:1A:62:D3:BC:DC:85:AE:04 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: D7 Signing time: Sat 04 May 2024 16:21:24 +0000 Manifest this update: Sat 04 May 2024 16:21:23 +0000 Manifest next update: Sat 11 May 2024 16:21:23 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: GHovyK4J2q8QoHQmqMTkaJLweo7PJykXk/VL3z0YvBA=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: wIUEQO5NPMHqkpPnW+KqLQoOshirDHVVKlc8ye6IXNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: May 4 16:21:23 2024 GMT Not After : May 11 16:21:23 2024 GMT Subject: CN=66366083-3c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:d1:0f:4e:47:4c:12:1a:3b:64:f7:90:09: 6b:76:07:1e:41:c7:4c:db:7d:3e:5f:84:25:a7:cc: 94:70:61:c2:8b:96:64:c2:f9:1a:ac:72:5a:b6:3b: a0:a0:30:9f:1c:4c:83:d2:5e:f7:b3:6b:c1:23:34: 19:db:4d:9b:42:e7:a6:95:a4:3a:e3:43:b8:38:ce: cb:49:96:a3:9b:42:27:51:38:47:32:b3:1e:4f:58: 6a:24:88:81:ad:06:ec:50:53:1f:6d:21:ce:33:70: 5a:a2:65:4f:83:72:1a:95:19:e4:1f:29:21:0b:22: 49:c1:54:c3:70:26:28:65:d0:94:24:75:eb:94:57: 33:f2:dc:e9:a5:80:00:cd:c1:6c:9f:13:f3:a5:dc: 7a:64:57:82:e0:31:26:30:11:0d:8a:31:fd:47:17: 6d:6d:79:f1:e4:32:a0:60:3a:7c:05:10:eb:d8:65: aa:8c:e6:48:ab:e1:95:be:13:cc:cd:79:fd:f2:cf: fc:5d:50:13:3a:4f:d7:6e:74:17:67:62:52:3b:89: ab:28:0d:25:9d:df:a3:db:ae:96:37:ce:ba:e3:a8: 5a:07:1e:58:39:1a:40:71:4b:56:15:9d:bf:4b:dd: 00:d6:0c:87:02:cd:c5:9a:88:10:2c:8d:fd:3b:7d: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:45:55:3A:88:AE:D0:45:C9:A9:9C:1A:62:D3:BC:DC:85:AE:04 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c6:c6:c5:78:c5:65:59:0d:c4:66:a4:cf:91:bc:86:e5:f0: b0:8b:dd:ef:91:d5:49:15:20:b6:79:2f:35:dc:74:df:cf:d3: 7c:38:3e:60:b2:9f:12:ce:52:e1:e2:ae:f4:09:c7:5e:0e:b5: fa:0d:a7:0e:6b:4e:17:82:0f:74:11:3f:ba:99:50:e2:01:cf: e0:cf:e0:9b:a7:92:9c:d4:0f:93:78:fb:00:4f:5f:e2:ff:7f: 62:d3:3f:32:48:52:d0:65:18:3b:7c:aa:d5:02:5e:a7:a6:1f: bc:66:be:57:1d:a3:e8:eb:2f:db:29:28:4b:8c:15:0f:ef:d4: 36:87:d6:51:b7:71:4d:4c:66:db:67:52:2e:fd:ed:62:ab:a3: 48:76:c2:63:6f:33:63:96:64:5e:a4:3c:b5:ff:d9:d8:c7:b1: fe:74:8c:a7:0f:02:c3:f6:0e:42:ed:e8:64:d3:71:d0:53:2f: c0:52:7d:5f:37:dc:b1:b9:4f:86:e8:e6:f6:c8:eb:5c:0a:ac: e0:cb:4a:96:69:ac:b2:cc:80:a1:f0:0f:4d:80:f1:06:41:45: 79:1b:86:d6:c2:29:3d:91:81:3d:51:79:1d:59:f6:fc:ee:33: bd:2e:fb:aa:26:9a:ce:33:b9:a8:29:1f:bd:0c:2f:93:7d:f7: a5:0e:e4:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjQwNTA0MTYyMTIzWhcNMjQwNTExMTYyMTIzWjAYMRYwFAYD VQQDEw02NjM2NjA4My0zYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EnRD05HTBIaO2T3kAlrdgceQcdM230+X4Qlp8yUcGHCi5ZkwvkarHJatjug oDCfHEyD0l73s2vBIzQZ202bQuemlaQ640O4OM7LSZajm0InUThHMrMeT1hqJIiB rQbsUFMfbSHOM3BaomVPg3IalRnkHykhCyJJwVTDcCYoZdCUJHXrlFcz8tzppYAA zcFsnxPzpdx6ZFeC4DEmMBENijH9RxdtbXnx5DKgYDp8BRDr2GWqjOZIq+GVvhPM zXn98s/8XVATOk/XbnQXZ2JSO4mrKA0lnd+j266WN86646haBx5YORpAcUtWFZ2/ S90A1gyHAs3FmogQLI39O32iywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKklRVU6 iK7QRcmpnBpi07zcha4EMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwxsbFeMVlWQ3EZqTPkbyG5fCwi93vkdVJFSC2eS813HTfz9N8OD5g sp8SzlLh4q70CcdeDrX6DacOa04Xgg90ET+6mVDiAc/gz+Cbp5Kc1A+TePsAT1/i /39i0z8ySFLQZRg7fKrVAl6nph+8Zr5XHaPo6y/bKShLjBUP79Q2h9ZRt3FNTGbb Z1Iu/e1iq6NIdsJjbzNjlmRepDy1/9nYx7H+dIynDwLD9g5C7ehk03HQUy/AUn1f N9yxuU+G6Ob2yOtcCqzgy0qWaayyzICh8A9NgPEGQUV5G4bWwik9kYE9UXkdWfb8 7jO9LvuqJprOM7moKR+9DC+TffelDuRF -----END CERTIFICATE-----Generated at Sat May 4 17:19:51 2024 by rpki-client on console-fra.rpki-client.org