$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: aXK/KEX9xQezXCVF0jTempp4UE1UsAU5uIdiT2SLRqk= Subject key identifier: F5:D8:18:46:D6:9B:65:CA:1D:82:5C:40:6A:52:D2:7A:C4:BA:DB:73 Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 09FA Signing time: Sat 18 May 2024 20:43:06 +0000 Manifest this update: Sat 18 May 2024 20:43:05 +0000 Manifest next update: Sat 25 May 2024 20:43:05 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: UUG6Z8AR42L3BmQBvwr1gVOS/gd8/wl3EJaEiBdt1ok=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: NT/eIPYnVSHpCL1VUGjxlJQLQnrtnvZboPiK6CUlFl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: May 18 20:43:05 2024 GMT Not After : May 25 20:43:05 2024 GMT Subject: CN=664912da-0b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:f3:30:db:9b:3b:5b:c7:d5:b2:49:9f:13: 39:fe:c9:05:48:b8:f9:ac:c5:08:45:2f:54:8d:48: 0e:6e:43:28:cc:b8:60:2c:6d:67:81:8c:f6:86:49: 03:d3:f5:7f:13:8e:6d:46:26:28:70:bf:94:fa:06: dd:0b:68:6c:78:7a:de:8d:58:5f:8c:a5:01:23:f8: 27:08:9b:72:b9:b6:42:9a:f9:42:2d:ce:53:1b:b6: ec:2a:4f:c0:40:75:86:09:31:b3:b8:e6:55:9a:4c: 90:1f:24:7f:7c:a2:e2:2a:f9:ac:73:e6:8d:82:2f: fd:b4:81:9d:a5:ed:5c:92:0d:50:e9:db:78:8f:84: 5f:5f:d4:fc:51:a6:57:40:ac:d5:9f:da:97:b3:86: 24:68:6f:69:57:96:09:d7:69:11:71:6d:f4:ff:9c: 77:40:61:e8:36:dc:5a:f6:80:66:dd:bf:79:bb:ee: 90:88:be:1e:24:ac:bc:c3:80:60:e2:2e:c8:a3:59: 8b:f3:90:f1:2b:de:45:bc:3e:01:8a:53:90:f7:b4: 6c:3d:8b:7e:1c:85:63:e5:d1:05:b1:91:48:da:7c: a4:7c:57:ee:5d:d9:ec:e8:fd:42:b0:ec:28:2c:50: 85:54:8e:18:26:b1:0c:64:db:2d:36:a6:a1:60:02: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D8:18:46:D6:9B:65:CA:1D:82:5C:40:6A:52:D2:7A:C4:BA:DB:73 X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f3:64:de:a5:c4:a1:1f:6a:f3:ba:27:59:98:69:ae:c5:c5: bc:35:82:67:de:02:4c:2f:0d:b7:5b:7c:40:73:75:fe:07:8e: c7:68:0e:08:26:a8:82:a8:e5:19:b2:e3:9c:c3:65:d5:11:1b: bf:a3:48:22:14:a0:b8:0d:35:07:78:df:98:78:ce:6c:ca:23: 7e:f9:99:55:1d:28:01:95:ca:8e:25:69:e6:3b:be:77:54:a6: 18:85:4a:0f:50:fc:62:6b:ca:19:3e:2b:94:ab:d2:f7:07:6e: be:6d:5c:df:93:d1:f1:c5:82:57:c4:af:cf:22:bb:d9:b6:cd: 4b:e2:01:92:81:e9:be:37:99:71:35:be:36:e1:73:07:a1:f3: 8f:a2:38:c6:54:27:97:dc:32:d1:75:5d:4b:79:4a:08:4f:b3: 46:36:da:86:97:7d:a1:18:77:46:35:af:47:36:84:af:e2:ac: 48:cd:c7:83:7e:10:f6:87:ad:94:2b:88:ff:03:ab:6e:8b:46: 24:b8:5f:3c:fe:0d:bd:d7:47:80:e8:2c:37:ce:51:d6:79:e5: 8c:8b:ab:6c:3e:c9:cc:76:b3:ab:9e:6f:5c:79:8c:0a:79:f0: d9:a4:c0:a1:0d:c9:87:ce:83:6e:6a:08:bb:f7:dc:dd:1b:a7: 0c:ca:52:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjQwNTE4MjA0MzA1WhcNMjQwNTI1MjA0MzA1WjAYMRYwFAYD VQQDEw02NjQ5MTJkYS0wYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeTzMNubO1vH1bJJnxM5/skFSLj5rMUIRS9UjUgObkMozLhgLG1ngYz2hkkD 0/V/E45tRiYocL+U+gbdC2hseHrejVhfjKUBI/gnCJtyubZCmvlCLc5TG7bsKk/A QHWGCTGzuOZVmkyQHyR/fKLiKvmsc+aNgi/9tIGdpe1ckg1Q6dt4j4RfX9T8UaZX QKzVn9qXs4YkaG9pV5YJ12kRcW30/5x3QGHoNtxa9oBm3b95u+6QiL4eJKy8w4Bg 4i7Io1mL85DxK95FvD4BilOQ97RsPYt+HIVj5dEFsZFI2nykfFfuXdns6P1CsOwo LFCFVI4YJrEMZNstNqahYAKh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXYGEbW m2XKHYJcQGpS0nrEuttzMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX82TepcShH2rzuidZmGmuxcW8NYJn3gJMLw23W3xAc3X+B47HaA4I JqiCqOUZsuOcw2XVERu/o0giFKC4DTUHeN+YeM5syiN++ZlVHSgBlcqOJWnmO753 VKYYhUoPUPxia8oZPiuUq9L3B26+bVzfk9HxxYJXxK/PIrvZts1L4gGSgem+N5lx Nb424XMHofOPojjGVCeX3DLRdV1LeUoIT7NGNtqGl32hGHdGNa9HNoSv4qxIzceD fhD2h62UK4j/A6tui0YkuF88/g2910eA6Cw3zlHWeeWMi6tsPsnMdrOrnm9ceYwK efDZpMChDcmHzoNuagi799zdG6cMylJ+ -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org