$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: gAAlovjJrdGzKujhXX5vPWxJstEDcUKhHs8RoG9UaMM= Subject key identifier: 28:36:FB:0D:DC:22:12:87:7C:CF:86:98:2D:55:0D:10:07:92:C7:B6 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 0528 Signing time: Sun 19 May 2024 00:59:36 +0000 Manifest this update: Sun 19 May 2024 00:59:35 +0000 Manifest next update: Sun 26 May 2024 00:59:35 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: W0d6+Ba9VyKmgZ0+0uYdnDBcDkivZW1ycQigcdOZiGc=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: Yh+8D/3vqYU74CRhoju4o2CyoopC1VR+hs5+3He8ecI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: May 19 00:59:35 2024 GMT Not After : May 26 00:59:35 2024 GMT Subject: CN=66494ef8-df59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:7d:d4:ee:2a:50:da:29:65:c6:b2:e3:26: f8:a6:7a:ec:11:e9:54:bf:f2:f0:00:68:8a:65:b5: 33:b4:65:98:7f:f6:fd:ca:33:f8:8e:49:21:6f:34: ed:a9:b3:d4:13:fd:02:aa:80:55:b2:4e:15:f8:ae: 01:7b:b7:e8:fe:b2:a4:dc:fd:ee:7f:3a:16:f0:26: 6b:c1:81:04:83:3c:d7:4c:e1:a6:f9:84:03:60:f8: 86:4a:3a:95:0c:d4:dc:f6:10:7a:e2:82:bc:d7:fe: 64:d2:00:68:e0:5d:dc:dd:35:27:a6:67:1b:f2:03: 21:a5:39:55:fd:bc:c5:80:ed:29:b5:28:19:1a:54: 5c:30:9b:b2:5e:cb:b7:8c:0f:4c:71:c8:b2:ee:4b: 6e:55:34:27:0a:f0:6d:16:b3:16:b6:59:d8:22:f8: 98:df:25:0e:de:e7:bd:2c:e9:11:50:61:67:58:19: 51:af:01:e6:27:00:d3:82:15:6a:8b:bc:fa:e6:12: bb:9f:d4:cf:d4:07:9a:3d:1e:ca:25:d9:aa:b8:f1: ff:70:25:30:8c:7d:dd:88:20:63:aa:46:9f:f9:c3: 0c:0c:88:78:0a:80:73:c3:fe:63:f5:b2:e0:58:db: a0:67:9a:e6:e8:25:ea:67:65:01:6c:20:1a:e7:4e: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:FB:0D:DC:22:12:87:7C:CF:86:98:2D:55:0D:10:07:92:C7:B6 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:54:4f:e2:ca:f4:52:97:19:2a:f0:d9:aa:d5:51:81:08:2d: 3a:51:5e:ca:2e:2c:e2:36:99:db:c5:97:4e:c4:cb:9d:7e:6f: 49:ca:91:92:2a:31:3e:91:47:7a:b8:24:ec:76:82:38:03:71: 5a:24:1e:58:36:18:e3:81:53:b5:a8:43:49:11:8d:ab:5c:82: af:03:1e:e3:bd:f7:6a:0d:73:a1:f6:48:36:ae:c6:ed:a9:1e: 22:95:36:38:63:3b:fb:47:40:41:f6:45:3b:1a:ff:ac:43:4a: 4c:51:be:2c:de:7f:fc:c1:6a:6c:11:de:f8:18:eb:61:e8:f4: e2:96:7b:03:35:f1:d9:c4:f2:85:65:65:e0:75:7d:ae:b4:22: bb:54:42:a5:dc:89:8f:b8:29:12:eb:15:9d:e8:bc:ea:05:f4: 8d:f7:44:24:4d:db:bd:ed:63:06:ca:30:e0:4a:81:de:9e:8a: 81:fa:cc:d6:2a:08:22:98:e9:6c:56:30:a2:c0:c9:56:6c:a1: 82:73:fc:72:2a:76:d4:5e:49:eb:31:a7:5b:96:cc:10:c9:60: 01:c8:e5:12:9e:d5:d7:b3:72:89:a4:f2:de:15:dd:0d:d0:19: f6:2a:8b:0d:13:39:8a:eb:d8:e0:9a:48:9a:cc:a0:76:0e:a3: 28:d3:ad:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjQwNTE5MDA1OTM1WhcNMjQwNTI2MDA1OTM1WjAYMRYwFAYD VQQDEw02NjQ5NGVmOC1kZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7191O4qUNopZcay4yb4pnrsEelUv/LwAGiKZbUztGWYf/b9yjP4jkkhbzTt qbPUE/0CqoBVsk4V+K4Be7fo/rKk3P3ufzoW8CZrwYEEgzzXTOGm+YQDYPiGSjqV DNTc9hB64oK81/5k0gBo4F3c3TUnpmcb8gMhpTlV/bzFgO0ptSgZGlRcMJuyXsu3 jA9Mcciy7ktuVTQnCvBtFrMWtlnYIviY3yUO3ue9LOkRUGFnWBlRrwHmJwDTghVq i7z65hK7n9TP1AeaPR7KJdmquPH/cCUwjH3diCBjqkaf+cMMDIh4CoBzw/5j9bLg WNugZ5rm6CXqZ2UBbCAa504OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg2+w3c IhKHfM+GmC1VDRAHkse2MB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWVE/iyvRSlxkq8Nmq1VGBCC06UV7KLiziNpnbxZdOxMudfm9JypGS KjE+kUd6uCTsdoI4A3FaJB5YNhjjgVO1qENJEY2rXIKvAx7jvfdqDXOh9kg2rsbt qR4ilTY4Yzv7R0BB9kU7Gv+sQ0pMUb4s3n/8wWpsEd74GOth6PTilnsDNfHZxPKF ZWXgdX2utCK7VEKl3ImPuCkS6xWd6LzqBfSN90QkTdu97WMGyjDgSoHenoqB+szW KggimOlsVjCiwMlWbKGCc/xyKnbUXknrMadblswQyWAByOUSntXXs3KJpPLeFd0N 0Bn2KosNEzmK69jgmkiazKB2DqMo063o -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org