$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: 9GjhujAZRW951ydJZTaNdyrtJA/lgXzb3qMGXQTV2eg= Subject key identifier: 32:1F:03:E3:F4:47:37:61:29:E3:C0:37:AA:91:2F:77:2C:37:28:13 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 88 Signing time: Fri 31 May 2024 07:59:53 +0000 Manifest this update: Fri 31 May 2024 07:59:53 +0000 Manifest next update: Fri 07 Jun 2024 07:59:53 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: zvd/k0D9/6zWuFFu78AZEA+oiezApLsouO/n1WrMGLQ=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: Q8NxuOuKJ+veMKJky9ZNwKElU9d3kEf3ESfKXVOaTxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: May 31 07:59:53 2024 GMT Not After : Jun 7 07:59:53 2024 GMT Subject: CN=66598379-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:62:de:7a:27:03:a5:8f:5d:2b:9c:37:74: 50:47:d4:db:d0:7b:32:fd:6a:88:0a:1c:29:c5:63: c7:ae:af:f7:b3:e2:b8:fc:03:1e:ea:0b:62:ce:9a: e4:47:62:36:e8:27:9c:04:10:e9:f3:60:85:4c:a5: d2:b0:92:12:10:6c:53:3c:f6:c0:c4:1a:f5:91:98: 81:e2:f3:1b:67:e8:dc:21:b7:03:3a:6c:5e:7d:0e: 26:3c:76:42:2e:0c:1f:47:21:32:98:dd:3d:b2:9e: 1e:44:2e:89:35:33:55:0c:a1:5d:2b:1e:2a:18:f0: 1a:f9:96:f5:ad:f4:30:67:a1:ce:e6:3f:5d:05:ff: 1f:d9:92:a3:e8:8a:1e:45:23:55:03:b0:9c:68:11: b2:29:2d:d8:94:3b:a7:7c:a6:0d:81:51:41:dc:a5: 63:a2:8c:bc:3f:6c:0f:99:25:75:20:78:e1:7c:26: 0c:f8:7e:4d:81:d3:be:1d:48:47:01:13:f2:e9:f3: e9:1e:25:aa:31:82:15:25:2c:6a:d2:c6:34:1d:06: e6:dc:76:67:da:06:27:92:ab:e7:e7:ce:38:ec:a8: 64:4a:b4:46:5b:da:fd:63:5e:a8:3d:bf:7d:59:78: 07:f9:b1:ca:b3:27:e6:aa:f8:ae:1a:f7:23:4a:e0: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:03:E3:F4:47:37:61:29:E3:C0:37:AA:91:2F:77:2C:37:28:13 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e2:f8:87:ee:21:ab:a7:98:b2:b7:ef:a2:de:c7:32:ff:c1: d2:ab:31:41:89:86:fe:58:82:9a:4d:45:e3:48:2b:3f:62:32: cf:b6:21:a6:a3:f9:ed:a8:b8:1b:3c:af:2b:ea:85:5e:10:f3: ed:55:24:56:9e:9d:66:ab:d1:f5:4c:4d:6f:bf:36:bc:ab:e4: 88:be:48:38:fe:24:a8:cf:e4:47:81:14:e6:43:45:ca:d5:4c: ff:1c:6f:42:4b:8a:13:dd:f4:ff:3f:6f:2b:8d:98:b0:c0:7b: 4f:af:a6:84:07:3d:e2:99:ba:83:2a:1c:33:0c:10:37:bc:a2: 70:5f:71:e0:04:d9:3e:f2:fc:cb:ae:33:6a:9b:b3:ce:01:10: 8e:d1:08:ef:76:46:87:0a:4b:e5:d6:1e:5b:68:dd:0e:74:51: f9:d0:eb:1f:83:45:57:83:c4:7f:4d:d6:c7:85:a8:ea:5c:fb: 77:ce:6a:71:2d:34:a9:b8:57:0b:0a:43:ee:73:f7:04:8b:f5: 3a:99:18:93:c1:3d:0d:25:44:40:07:05:6d:dc:e6:5f:1a:fe: ef:e8:3c:46:de:91:df:13:7b:4f:12:05:b2:28:0f:d1:31:e5: 1d:a7:38:03:94:b5:ad:a3:c5:f2:59:17:8d:da:c0:23:bd:a7: bd:26:7e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjQwNTMxMDc1OTUzWhcNMjQwNjA3MDc1OTUzWjAYMRYwFAYD VQQDEw02NjU5ODM3OS1mNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArP9i3nonA6WPXSucN3RQR9Tb0Hsy/WqIChwpxWPHrq/3s+K4/AMe6gtizprk R2I26CecBBDp82CFTKXSsJISEGxTPPbAxBr1kZiB4vMbZ+jcIbcDOmxefQ4mPHZC LgwfRyEymN09sp4eRC6JNTNVDKFdKx4qGPAa+Zb1rfQwZ6HO5j9dBf8f2ZKj6Ioe RSNVA7CcaBGyKS3YlDunfKYNgVFB3KVjooy8P2wPmSV1IHjhfCYM+H5NgdO+HUhH ARPy6fPpHiWqMYIVJSxq0sY0HQbm3HZn2gYnkqvn58447KhkSrRGW9r9Y16oPb99 WXgH+bHKsyfmqviuGvcjSuAe7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIfA+P0 RzdhKePAN6qRL3csNygTMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg4viH7iGrp5iyt++i3scy/8HSqzFBiYb+WIKaTUXjSCs/YjLPtiGm o/ntqLgbPK8r6oVeEPPtVSRWnp1mq9H1TE1vvza8q+SIvkg4/iSoz+RHgRTmQ0XK 1Uz/HG9CS4oT3fT/P28rjZiwwHtPr6aEBz3imbqDKhwzDBA3vKJwX3HgBNk+8vzL rjNqm7POARCO0QjvdkaHCkvl1h5baN0OdFH50Osfg0VXg8R/TdbHhajqXPt3zmpx LTSpuFcLCkPuc/cEi/U6mRiTwT0NJURABwVt3OZfGv7v6DxG3pHfE3tPEgWyKA/R MeUdpzgDlLWto8XyWReN2sAjvae9Jn7s -----END CERTIFICATE-----Generated at Fri May 31 10:01:42 2024 by rpki-client on console-ams.rpki-client.org