$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: FP9WaexVCmstqgtQvRaxJL3Norfi0M47Xgmoi8Ps6SE= Subject key identifier: 10:FD:4E:0A:A0:93:D1:1B:8C:03:01:FF:CD:95:97:80:14:B7:D9:24 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 0170 Signing time: Sun 19 May 2024 04:48:32 +0000 Manifest this update: Sun 19 May 2024 04:48:31 +0000 Manifest next update: Sun 26 May 2024 04:48:31 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: vlfui9u7aC/OzpDq5QpGUq8KTr/C561/3cliy+M195w=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: k8sue4z932VpOTiNEz+RdtYyUsgzHef0FAYbvlEv5yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: May 19 04:48:31 2024 GMT Not After : May 26 04:48:31 2024 GMT Subject: CN=664984a0-5afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:66:3f:02:61:7d:03:a0:a2:09:b2:95:ee: 9c:cc:cf:d6:ea:19:7e:61:71:de:51:ad:3b:31:0d: 34:48:f5:59:3d:a4:da:07:c5:6c:53:0d:76:f2:f5: 21:b7:5c:06:98:30:24:1d:36:fe:7c:3a:5a:04:0a: 48:e0:1f:c3:fc:b3:cb:4c:bb:67:6e:c0:62:4a:9b: ca:e0:3a:fa:ff:60:d5:aa:9e:fe:87:45:22:f3:04: a9:c8:60:a3:8c:96:77:b1:53:fc:1f:23:a7:3f:74: e4:8d:1c:28:db:9e:df:4b:d3:b9:15:dc:f4:65:93: 71:c3:f4:1b:8d:5c:02:16:0a:02:c0:ea:eb:4e:0b: 7b:61:a9:cc:b8:36:21:a3:ee:d9:d1:a2:08:40:48: df:41:a2:9c:99:f3:35:02:c9:52:aa:f5:a9:ee:54: c6:9b:99:0a:90:50:da:2d:86:37:9c:08:dd:4f:b0: 67:1a:71:9c:a9:fb:ef:3c:5f:44:55:5a:ee:b5:7e: 48:46:fe:77:47:ad:52:b1:95:5c:b2:b3:ef:5e:1b: 29:60:e1:ef:88:b1:40:42:71:c5:a4:8d:d6:97:5e: 39:55:bc:8a:dc:61:89:aa:7f:78:b1:ee:0f:ff:e0: 5a:7a:97:20:f2:3e:8d:cb:d6:32:70:2b:b5:54:be: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:4E:0A:A0:93:D1:1B:8C:03:01:FF:CD:95:97:80:14:B7:D9:24 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:4d:cf:0c:2a:a2:4b:44:af:55:40:e3:98:cb:7b:47:e5:2a: fa:06:f6:e1:24:fe:8d:22:3d:cf:59:7d:b4:23:97:da:95:a2: 95:dd:43:7a:d5:df:53:a8:af:b4:eb:f6:49:8e:ce:05:90:1c: 83:19:47:ce:39:c0:dd:24:1a:01:8e:a2:ba:c0:03:19:26:63: 00:88:32:f9:f9:31:b1:e4:19:ee:25:d9:54:fa:61:8e:87:41: bd:9d:fa:e6:31:bb:1d:ba:c5:59:b3:05:31:b6:82:99:8d:e7: 6a:11:21:94:de:04:d8:b1:6b:e8:a6:20:79:3b:12:25:f2:3c: 50:23:8c:7c:62:eb:ba:17:ac:c7:29:8a:9d:fb:5e:5f:07:d5: f8:73:ae:45:fa:3c:54:5b:1a:df:83:42:f7:89:c2:c8:4b:4f: 91:8f:dc:31:a4:c6:2d:65:bb:c9:63:92:f3:ae:eb:a8:66:36: e3:a6:8b:2f:ea:f3:85:bd:51:f2:50:dd:42:c8:d5:d8:f7:6b: e7:34:94:c2:a6:00:f5:da:ac:b4:79:b7:73:51:4d:ce:da:b5: 88:1d:7b:9e:64:9b:69:c8:db:2a:44:2c:10:81:3f:49:40:8a: 4f:63:3b:19:f9:e5:be:ed:2a:4b:07:9f:ce:2d:5a:59:4a:2c: 79:85:74:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjQwNTE5MDQ0ODMxWhcNMjQwNTI2MDQ0ODMxWjAYMRYwFAYD VQQDEw02NjQ5ODRhMC01YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+FmPwJhfQOgogmyle6czM/W6hl+YXHeUa07MQ00SPVZPaTaB8VsUw128vUh t1wGmDAkHTb+fDpaBApI4B/D/LPLTLtnbsBiSpvK4Dr6/2DVqp7+h0Ui8wSpyGCj jJZ3sVP8HyOnP3TkjRwo257fS9O5Fdz0ZZNxw/QbjVwCFgoCwOrrTgt7YanMuDYh o+7Z0aIIQEjfQaKcmfM1AslSqvWp7lTGm5kKkFDaLYY3nAjdT7BnGnGcqfvvPF9E VVrutX5IRv53R61SsZVcsrPvXhspYOHviLFAQnHFpI3Wl145VbyK3GGJqn94se4P /+Baepcg8j6Ny9YycCu1VL5FWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD9Tgqg k9EbjAMB/82Vl4AUt9kkMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDATc8MKqJLRK9VQOOYy3tH5Sr6BvbhJP6NIj3PWX20I5falaKV3UN6 1d9TqK+06/ZJjs4FkByDGUfOOcDdJBoBjqK6wAMZJmMAiDL5+TGx5BnuJdlU+mGO h0G9nfrmMbsdusVZswUxtoKZjedqESGU3gTYsWvopiB5OxIl8jxQI4x8Yuu6F6zH KYqd+15fB9X4c65F+jxUWxrfg0L3icLIS0+Rj9wxpMYtZbvJY5LzruuoZjbjposv 6vOFvVHyUN1CyNXY92vnNJTCpgD12qy0ebdzUU3O2rWIHXueZJtpyNsqRCwQgT9J QIpPYzsZ+eW+7SpLB5/OLVpZSix5hXRQ -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org