$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: qhJ1xtHw7gegNdb1hpgLbfnAp81gDOy8aMx1jsWChPI= Subject key identifier: 9A:A1:E1:38:6D:81:78:C0:38:8F:AF:54:5C:05:38:AE:2A:DC:3E:0B Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 08FA Signing time: Fri 31 May 2024 22:01:57 +0000 Manifest this update: Fri 31 May 2024 22:01:56 +0000 Manifest next update: Fri 07 Jun 2024 22:01:56 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: uf8GETsZ9b7uwg3ADIMBGP3ND8FOuksLQsho+feTKE0=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: Zy1GynMb02lEFndk3/8ZEzW8mxwp5i2kpGslOdi1Vh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: May 31 22:01:56 2024 GMT Not After : Jun 7 22:01:56 2024 GMT Subject: CN=665a48d5-18d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:3b:e3:b5:9c:a9:55:ce:e6:0d:19:73:20: 73:fd:47:cc:99:ba:97:3b:c9:9e:2e:55:a2:63:28: c3:77:98:b4:bf:e7:24:88:0c:f1:ae:77:3d:f2:b4: d0:16:5a:90:05:8c:a2:50:13:b5:b4:ed:ac:b5:d1: ee:46:65:78:01:5d:1e:3a:34:1d:15:fa:0b:f2:46: f9:60:fa:89:a6:44:2c:6b:a5:66:26:48:07:23:7c: dd:da:27:b4:70:3d:fd:7c:46:7f:ff:28:ed:de:2e: 07:71:54:a6:d0:46:c8:33:4c:0e:ca:76:0a:b8:20: 84:06:fa:3b:cc:44:8a:11:28:92:ed:08:f7:ba:17: c7:61:2b:36:54:7d:d5:1e:d7:2d:0f:ce:88:44:61: 6e:2a:cc:95:7e:fc:56:eb:97:0a:46:9e:d1:16:14: 8c:2b:b4:38:e4:0b:a3:ac:c8:86:0c:95:4e:77:14: e5:c0:bb:15:1b:f2:96:e8:25:f9:a6:4d:3f:e5:5b: 82:0c:85:bf:1f:c2:69:c2:2f:70:b2:0c:c3:1b:05: c8:ea:5c:f7:93:d9:56:4b:1c:3c:ad:7f:c1:08:38: fe:ce:cd:b6:13:e7:31:e8:93:6a:8a:be:b9:d2:17: 6d:3e:16:4b:c5:e5:48:45:50:10:88:5d:37:cc:1c: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:E1:38:6D:81:78:C0:38:8F:AF:54:5C:05:38:AE:2A:DC:3E:0B X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1f:dc:2f:6b:1e:82:cf:72:fb:05:62:8b:a6:2d:df:09:60: d2:7a:57:b3:d3:ca:90:ae:a0:47:eb:9a:e1:01:78:e1:74:dd: 36:2e:81:9c:c0:1f:4a:52:2e:90:e4:8b:3a:38:9b:c5:ab:6b: 88:bd:69:ed:bc:44:2f:16:e0:38:6a:19:1e:1a:71:40:29:46: 87:2d:56:ad:92:dc:24:fd:21:77:24:30:41:f4:50:f6:f9:44: 46:e8:23:aa:36:58:11:13:98:19:13:32:40:83:d2:9e:1b:8f: b4:cf:cd:ed:9a:e7:9c:a1:73:29:81:af:43:db:89:31:e6:cf: 20:8a:71:0d:73:5c:ac:76:fd:49:e5:f0:98:b7:1e:2f:06:9d: 34:de:7e:c5:49:b0:2d:8c:eb:c1:3c:fe:3e:ab:2a:6d:1c:a5: ef:4f:12:24:df:bc:78:7c:0e:7c:2f:f4:da:44:e0:c3:e7:1c: c3:62:e9:8b:32:8e:df:b2:29:ab:4e:67:ce:53:f3:8f:a0:7c: 60:c8:56:1c:7f:48:f1:dd:ac:4f:75:21:1c:95:34:7e:b0:6a: e5:d0:b5:1f:7c:8e:cc:da:63:e8:48:73:46:50:d9:f2:f2:fa: 16:a5:c6:34:be:91:c4:10:b9:50:e2:bd:c3:2c:7d:cd:cb:1b: ab:a1:e3:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjQwNTMxMjIwMTU2WhcNMjQwNjA3MjIwMTU2WjAYMRYwFAYD VQQDEw02NjVhNDhkNS0xOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8Y747WcqVXO5g0ZcyBz/UfMmbqXO8meLlWiYyjDd5i0v+ckiAzxrnc98rTQ FlqQBYyiUBO1tO2stdHuRmV4AV0eOjQdFfoL8kb5YPqJpkQsa6VmJkgHI3zd2ie0 cD39fEZ//yjt3i4HcVSm0EbIM0wOynYKuCCEBvo7zESKESiS7Qj3uhfHYSs2VH3V HtctD86IRGFuKsyVfvxW65cKRp7RFhSMK7Q45AujrMiGDJVOdxTlwLsVG/KW6CX5 pk0/5VuCDIW/H8Jpwi9wsgzDGwXI6lz3k9lWSxw8rX/BCDj+zs22E+cx6JNqir65 0hdtPhZLxeVIRVAQiF03zBzyzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqh4Tht gXjAOI+vVFwFOK4q3D4LMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCH9wvax6Cz3L7BWKLpi3fCWDSelez08qQrqBH65rhAXjhdN02LoGc wB9KUi6Q5Is6OJvFq2uIvWntvEQvFuA4ahkeGnFAKUaHLVatktwk/SF3JDBB9FD2 +URG6COqNlgRE5gZEzJAg9KeG4+0z83tmuecoXMpga9D24kx5s8ginENc1ysdv1J 5fCYtx4vBp003n7FSbAtjOvBPP4+qyptHKXvTxIk37x4fA58L/TaRODD5xzDYumL Mo7fsimrTmfOU/OPoHxgyFYcf0jx3axPdSEclTR+sGrl0LUffI7M2mPoSHNGUNny 8voWpcY0vpHEELlQ4r3DLH3NyxuroePP -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org