$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: hx+6uLiLJeUzeIeu2aaifbwFGEcNYxOhIl5bVQj3ThU= Subject key identifier: 2D:A1:AF:D7:F9:22:DF:D7:5A:B8:BF:AC:1C:F4:98:B4:D4:A9:F6:9D Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0675 Signing time: Sat 18 May 2024 23:30:23 +0000 Manifest this update: Sat 18 May 2024 23:30:23 +0000 Manifest next update: Sat 25 May 2024 23:30:23 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: h6E4oPVuv4XprBZfF3frRcY39jg1PAEg8svZZRhn3Pk=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: Lcu+kV+oiFNO8o5DUiWJ1nnjdCvMx3S981oDbealKG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: May 18 23:30:23 2024 GMT Not After : May 25 23:30:23 2024 GMT Subject: CN=66493a0f-a58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b0:a1:58:67:54:70:ce:11:78:29:39:67:e0: 1d:72:5e:1f:7e:9f:c9:7f:78:f0:d2:85:54:bc:da: e8:66:ed:4a:0d:31:2c:3d:7e:b5:65:45:7b:21:8d: 52:43:f1:20:d0:2e:86:30:a7:9d:8c:2a:cd:17:ae: 08:cd:e2:b4:22:d2:91:0b:b0:c1:7a:5c:d2:30:91: d7:d5:94:b3:cc:a9:84:b8:9d:33:1d:c9:10:ef:3b: 8b:e5:55:7a:78:34:e1:b7:c4:ee:fc:19:64:4b:4d: 3c:dd:1e:98:69:0c:30:1d:be:9b:81:a4:10:19:d3: dd:9e:65:25:48:0b:3a:6d:82:17:38:99:4e:dc:91: ac:cf:3d:5a:a9:0b:76:f8:7f:9a:44:07:e3:2f:5e: ae:d7:0f:7f:d0:e0:f4:c5:24:57:3d:a2:d5:8d:fa: 0c:55:76:ca:8f:a3:81:c1:8c:2a:32:26:eb:25:60: ff:be:7f:95:ef:2a:9b:34:39:c1:c8:64:b3:f9:23: 44:fd:a7:e2:be:1e:e9:0e:f0:12:3e:44:fc:b3:06: b7:64:40:07:ea:f5:01:45:3f:80:ee:2f:5c:08:6c: d0:e1:26:d3:25:97:27:a3:32:30:f1:e7:4d:60:68: 88:8b:c2:42:15:c1:72:bb:53:8c:85:31:87:68:6d: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:AF:D7:F9:22:DF:D7:5A:B8:BF:AC:1C:F4:98:B4:D4:A9:F6:9D X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:bc:ba:78:0b:7b:a0:dd:1e:24:ca:b3:4e:91:f6:77:8b: 4a:47:49:be:af:c9:c8:f9:62:2a:b8:75:b7:4c:7d:e6:87:fd: 65:c8:22:af:00:5e:b0:c8:87:b4:33:12:86:f0:16:e1:0f:c0: 66:08:c8:d2:5f:c0:39:a6:97:e3:b1:ba:4f:61:e5:12:89:9a: df:49:77:be:40:17:a7:76:cb:08:bd:72:77:22:d0:6c:50:72: 3c:67:77:b1:3e:0f:f7:94:4b:b7:47:49:b9:3e:e8:c6:75:d1: 96:df:ea:e7:25:7b:ab:ac:ca:ed:9d:1c:6a:fd:9d:e1:da:ba: 8b:0c:70:4a:08:f3:f4:c8:7f:4d:e4:f8:be:95:53:80:0a:d5: df:65:23:3f:40:c7:0e:a1:81:b4:e0:bb:8f:e7:db:62:69:a8: 29:8a:1a:78:9d:dd:4c:dc:e0:99:fc:22:80:40:02:5a:df:7c: bd:ae:4d:c0:9d:28:2e:4a:94:52:4b:6d:51:3e:cf:78:dc:f2: 81:2a:8b:f2:0e:82:39:f9:02:c5:6f:b7:cb:3b:af:c9:b1:0d: c9:83:b3:d5:f4:72:2f:ff:0d:2f:f6:d0:00:b0:02:2e:c6:53: a2:ba:f4:04:03:b2:95:a1:e8:2f:3c:90:b2:da:56:fa:3d:75: 99:dc:ac:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjQwNTE4MjMzMDIzWhcNMjQwNTI1MjMzMDIzWjAYMRYwFAYD VQQDEw02NjQ5M2EwZi1hNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LChWGdUcM4ReCk5Z+Adcl4ffp/Jf3jw0oVUvNroZu1KDTEsPX61ZUV7IY1S Q/Eg0C6GMKedjCrNF64IzeK0ItKRC7DBelzSMJHX1ZSzzKmEuJ0zHckQ7zuL5VV6 eDTht8Tu/BlkS0083R6YaQwwHb6bgaQQGdPdnmUlSAs6bYIXOJlO3JGszz1aqQt2 +H+aRAfjL16u1w9/0OD0xSRXPaLVjfoMVXbKj6OBwYwqMibrJWD/vn+V7yqbNDnB yGSz+SNE/afivh7pDvASPkT8swa3ZEAH6vUBRT+A7i9cCGzQ4SbTJZcnozIw8edN YGiIi8JCFcFyu1OMhTGHaG0MnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2hr9f5 It/XWri/rBz0mLTUqfadMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq/7y6eAt7oN0eJMqzTpH2d4tKR0m+r8nI+WIquHW3TH3mh/1lyCKv AF6wyIe0MxKG8BbhD8BmCMjSX8A5ppfjsbpPYeUSiZrfSXe+QBendssIvXJ3ItBs UHI8Z3exPg/3lEu3R0m5PujGddGW3+rnJXurrMrtnRxq/Z3h2rqLDHBKCPP0yH9N 5Pi+lVOACtXfZSM/QMcOoYG04LuP59tiaagpihp4nd1M3OCZ/CKAQAJa33y9rk3A nSguSpRSS21RPs943PKBKovyDoI5+QLFb7fLO6/JsQ3Jg7PV9HIv/w0v9tAAsAIu xlOiuvQEA7KVoegvPJCy2lb6PXWZ3KzX -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org