$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: GyuY5/mK56WN4DvMJvqnvFNhnb39HwbERI4nTiAoWq4= Subject key identifier: 15:53:5A:D2:04:34:FB:00:F1:51:8D:C8:47:0E:65:F8:98:69:54:F2 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 24F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 1965 Signing time: Tue 30 Apr 2024 18:43:34 +0000 Manifest this update: Tue 30 Apr 2024 18:43:33 +0000 Manifest next update: Tue 07 May 2024 18:43:33 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: DtbS8wvU34SSq0EDGbZd0zS2LESgnTtzQk5mBUUU43s=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: X+4Hk4a7KWZB8hLpQ9G/KTOvp7uPa3IIE7DPvOb1X8A=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: zwbI1yA7de3PAPW7z3x71kwuVXOdAV32j9+8TdNCSXM=) 4: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: FjyEpzcjP1PBYPlxtefJUvEooVdC9DWyB8xqCU57zyU=) 5: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: L0qGCHV3frmEdEmU/eDr87aj11bj+aPIWqcH45aNDVs=) 6: B53FD334575411ECAA094876C4F9AE02.roa (hash: FJuRXpwGCOMSct+wg+XFPN6ZNe64CjfcGYvfrUOqKd0=) 7: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: GJAQ9MEUh7G5uGIsjHksGPuV93cJQS0krnTLHeNqCus=) 8: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: RTVHW0PDLwCPVWSoPW6Z/r4J73lbK4na1Qev6shkvSM=) 9: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: LsHvxok8qWiypYp/jO7Qvx/f19chs0osRZfya4SpTWc=) 10: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: VC28Lal4CEsa3kS58iTnk8qShznnipA6wDZ5+/CZmEQ=) 11: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: 69Z2B8oCmDqpRIdSPOly7aAWq4ZbBrw2QS40bBNDFhs=) 12: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: SLXhqcH0+eY5P7a7Ugwrcuj5dGZJ47BHFJvVvaC/ZFk=) 13: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: 9I4eh2/Gv1Y6RhyOHLVhGV1kHhZP/5i1Nvlh/e0jhQM=) 14: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: y+tp6ijh1PPTEVmwyn3nM4X89K8xHSORUDDLGVTfrqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9456 (0x24f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Apr 30 18:43:33 2024 GMT Not After : May 7 18:43:33 2024 GMT Subject: CN=66313bd6-ab7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:3c:7d:67:c3:dd:e9:e3:92:66:bb:9a:51: 62:fd:fe:cc:46:38:ad:95:9b:7f:88:96:67:2c:f9: 2b:77:94:91:20:a2:4b:de:bc:72:3c:c6:ef:90:af: 77:11:a1:90:8a:b4:66:bf:7d:3e:0b:cd:81:1e:34: 6c:e7:2f:e9:a9:4e:60:3d:77:23:a6:3f:72:d3:5a: 13:d6:31:60:7c:04:de:ff:7f:e6:9b:58:c1:54:22: 1b:fa:13:82:81:ac:82:2a:1f:5e:e6:b2:4a:99:dc: 3f:df:10:18:78:78:d2:40:cd:ea:d4:49:59:5a:fe: 55:17:5f:66:39:91:f1:17:f9:56:e8:ec:b9:72:93: d8:37:c8:2d:5e:9e:8f:3b:31:4c:57:94:a1:bc:c5: 23:ac:de:a9:0d:51:53:bb:d0:5c:2c:23:c3:d4:c9: cd:72:c0:71:e0:55:95:37:03:3e:bf:a2:cd:79:95: 44:4c:43:ad:f2:36:c7:98:86:66:99:d6:80:dc:2d: 5a:69:0b:5c:86:04:5e:aa:31:1f:48:22:95:fd:4f: e0:50:08:1b:89:f7:6e:c7:4d:f1:bf:7b:6d:7c:2d: 64:3b:dc:5f:f6:7a:b6:fb:f1:3d:8f:9d:fc:c7:f3: 06:bf:97:9c:8e:a5:8e:27:5f:c5:61:e8:98:da:92: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:5A:D2:04:34:FB:00:F1:51:8D:C8:47:0E:65:F8:98:69:54:F2 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2d:d4:88:85:3e:27:e3:b5:bd:f1:75:81:04:e8:4d:8e:62: 05:c2:d6:46:1e:92:ff:09:e4:3b:75:62:b2:42:fa:a6:62:1f: 26:92:73:28:28:fd:c7:fd:01:02:01:8c:68:8a:34:8a:86:dd: aa:b7:fb:b2:30:b9:79:35:21:98:8d:ba:5e:02:13:97:f7:d9: bd:37:ed:9d:83:54:68:95:0f:05:0d:d0:1d:f2:59:dc:6c:b4: 7b:fb:79:72:c3:4e:69:1e:64:8e:5a:4b:3c:58:aa:0b:ae:d0: 23:84:c1:49:38:f4:92:42:5e:2e:62:8b:c6:5a:1a:23:05:ba: 55:bf:62:ab:d2:34:ca:6d:1b:79:34:35:d0:e6:ff:3e:29:59: 77:b2:82:0a:3a:97:ef:db:d9:79:13:96:6d:2f:f6:87:91:d8: 45:9f:3b:05:e1:6f:57:01:f2:10:ed:95:98:5d:ce:5f:91:a3: f0:42:eb:9f:fb:ee:e5:17:f7:39:1d:0f:ef:cb:a9:e1:19:13: ad:05:c6:c0:c4:1a:fa:3e:17:77:78:82:21:af:b0:5d:2b:17: 9c:48:8a:52:9a:8a:d5:d1:70:1b:0f:ff:a3:ef:be:b2:f4:b4: d5:76:16:37:6c:ac:df:b0:86:59:b8:a8:33:ba:c8:b4:d0:69: 66:79:f5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQwNDMwMTg0MzMzWhcNMjQwNTA3MTg0MzMzWjAYMRYwFAYD VQQDEw02NjMxM2JkNi1hYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq748fWfD3enjkma7mlFi/f7MRjitlZt/iJZnLPkrd5SRIKJL3rxyPMbvkK93 EaGQirRmv30+C82BHjRs5y/pqU5gPXcjpj9y01oT1jFgfATe/3/mm1jBVCIb+hOC gayCKh9e5rJKmdw/3xAYeHjSQM3q1ElZWv5VF19mOZHxF/lW6Oy5cpPYN8gtXp6P OzFMV5ShvMUjrN6pDVFTu9BcLCPD1MnNcsBx4FWVNwM+v6LNeZVETEOt8jbHmIZm mdaA3C1aaQtchgReqjEfSCKV/U/gUAgbifdux03xv3ttfC1kO9xf9nq2+/E9j538 x/MGv5ecjqWOJ1/FYeiY2pIP3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVTWtIE NPsA8VGNyEcOZfiYaVTyMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLdSIhT4n47W98XWBBOhNjmIFwtZGHpL/CeQ7dWKyQvqmYh8mknMo KP3H/QECAYxoijSKht2qt/uyMLl5NSGYjbpeAhOX99m9N+2dg1RolQ8FDdAd8lnc bLR7+3lyw05pHmSOWks8WKoLrtAjhMFJOPSSQl4uYovGWhojBbpVv2Kr0jTKbRt5 NDXQ5v8+KVl3soIKOpfv29l5E5ZtL/aHkdhFnzsF4W9XAfIQ7ZWYXc5fkaPwQuuf ++7lF/c5HQ/vy6nhGROtBcbAxBr6Phd3eIIhr7BdKxecSIpSmorV0XAbD/+j776y 9LTVdhY3bKzfsIZZuKgzusi00GlmefWH -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:55 2024 by rpki-client on console-fra.rpki-client.org