$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: 8NEFIn5+AiMIRPxROi8g4wE6S+KDqcjjE/QpMP41++Y= Subject key identifier: DC:8D:E1:03:28:98:04:CA:EE:1C:80:0C:40:73:54:89:67:11:40:66 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 10D5 Signing time: Sat 18 May 2024 17:52:34 +0000 Manifest this update: Sat 18 May 2024 17:52:33 +0000 Manifest next update: Sat 25 May 2024 17:52:33 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: 3Nh9EHqdfGu2XOkbHxT+q46I7Gv2nR2b8p/CLczbiSU=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: I2zgpdt6UDGrD97rg+2dAIvR4q5Nta9FbrvBpFUiSa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: May 18 17:52:33 2024 GMT Not After : May 25 17:52:33 2024 GMT Subject: CN=6648eae2-8444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:12:63:89:39:8f:2f:c3:78:4e:8b:71:ce: e7:be:7d:28:b5:91:71:b3:c9:40:94:34:f2:3b:ff: 61:47:2c:49:7e:1f:dc:a0:c9:c7:05:9f:4a:65:3b: ad:4c:9e:08:63:f5:26:ad:6d:6c:f9:cc:c9:50:9c: 50:c8:ad:79:c2:ff:4a:13:e7:38:18:f1:65:86:17: fe:dc:e9:31:bb:81:a0:9e:23:97:68:b9:68:17:ef: df:92:55:c9:ac:3d:e1:cd:db:91:55:f7:d9:a0:3d: ff:c0:58:76:32:f2:da:42:c5:b6:e2:ff:3f:29:18: be:45:c8:95:75:0a:c6:7f:96:d0:93:56:e3:57:54: ae:39:ec:71:97:98:1b:5a:e1:12:86:d3:be:91:1f: db:8b:80:2a:f8:fb:9c:d9:51:56:e2:da:63:38:3d: 00:02:7c:5a:8a:c2:75:28:63:8e:c5:cb:2a:84:0e: 77:9a:1b:fe:0b:4f:b1:eb:03:a1:34:83:f1:f6:a7: 07:14:e2:c9:19:7f:bc:38:c9:bf:56:d2:a1:ce:26: f1:40:c7:45:e0:40:cb:4c:59:cf:81:e1:41:b0:b4: 26:ea:73:7e:44:d9:94:c1:de:ab:b3:60:d4:fe:80: 70:0f:05:cb:db:aa:d3:fe:8f:b5:e2:a4:ad:f5:c7: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:E1:03:28:98:04:CA:EE:1C:80:0C:40:73:54:89:67:11:40:66 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3f:d7:bb:64:cb:6a:a0:19:1e:65:91:3e:da:18:2a:5d:5d: 16:40:9a:2e:d6:b9:cc:a2:1e:54:4d:68:95:4a:05:5e:be:d2: 6b:43:05:f6:71:68:64:6a:f3:3f:85:b6:92:4a:74:e6:69:08: 13:ac:57:2f:76:da:ff:fe:a0:0b:a1:89:15:ec:34:d0:e8:ff: 55:5e:e9:fd:d5:0f:c6:dd:e2:d8:13:d4:7b:bc:f0:5f:22:40: b2:c7:fe:25:4c:0b:bc:d0:fb:48:51:96:ad:cb:de:4f:94:a8: a1:ff:75:3f:24:b8:ec:5e:9a:65:33:7f:cd:76:8b:54:96:43: 85:b8:00:db:f3:f9:60:47:79:5c:a0:da:79:b3:ab:fb:be:c5: 2a:81:d3:9d:e0:70:61:3e:35:10:d9:64:8b:b9:e7:8d:a2:b5: b3:9c:c6:03:87:54:c7:60:f7:a6:f0:1a:d3:c7:d0:83:51:95: 54:3b:1c:01:6f:3b:14:04:ee:bc:ca:1f:26:fd:52:2f:eb:97: be:ed:4a:4e:09:2d:8e:dc:ad:19:d4:b7:0c:ec:bf:93:3a:4d: 54:75:96:62:45:f3:fe:fb:69:d4:06:76:d8:8d:1c:7c:da:6e: 08:5f:71:ee:d6:c0:cf:7d:5a:3b:01:29:c0:6e:73:1d:d4:09: 6e:9a:d6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjQwNTE4MTc1MjMzWhcNMjQwNTI1MTc1MjMzWjAYMRYwFAYD VQQDEw02NjQ4ZWFlMi04NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEoSY4k5jy/DeE6Lcc7nvn0otZFxs8lAlDTyO/9hRyxJfh/coMnHBZ9KZTut TJ4IY/UmrW1s+czJUJxQyK15wv9KE+c4GPFlhhf+3Okxu4GgniOXaLloF+/fklXJ rD3hzduRVffZoD3/wFh2MvLaQsW24v8/KRi+RciVdQrGf5bQk1bjV1SuOexxl5gb WuEShtO+kR/bi4Aq+Puc2VFW4tpjOD0AAnxaisJ1KGOOxcsqhA53mhv+C0+x6wOh NIPx9qcHFOLJGX+8OMm/VtKhzibxQMdF4EDLTFnPgeFBsLQm6nN+RNmUwd6rs2DU /oBwDwXL26rT/o+14qSt9cfLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyN4QMo mATK7hyADEBzVIlnEUBmMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEP9e7ZMtqoBkeZZE+2hgqXV0WQJou1rnMoh5UTWiVSgVevtJrQwX2 cWhkavM/hbaSSnTmaQgTrFcvdtr//qALoYkV7DTQ6P9VXun91Q/G3eLYE9R7vPBf IkCyx/4lTAu80PtIUZaty95PlKih/3U/JLjsXpplM3/NdotUlkOFuADb8/lgR3lc oNp5s6v7vsUqgdOd4HBhPjUQ2WSLueeNorWznMYDh1THYPem8BrTx9CDUZVUOxwB bzsUBO68yh8m/VIv65e+7UpOCS2O3K0Z1LcM7L+TOk1UdZZiRfP++2nUBnbYjRx8 2m4IX3Hu1sDPfVo7ASnAbnMd1AlumtbW -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org