$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: kaWqJXFDHpij/Yj1Nd88PxNbkvbr41wK4fcKNaj22g0= Subject key identifier: F5:CE:F7:B5:1E:5C:88:16:74:48:88:A2:EE:EF:A2:4B:06:D5:0C:DA Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 0553 Signing time: Sun 19 May 2024 00:50:36 +0000 Manifest this update: Sun 19 May 2024 00:50:36 +0000 Manifest next update: Sun 26 May 2024 00:50:36 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: VUqHLszO7ElA8ez/I5ZY622wIvF7lB0fSVNNOHbB90o=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: iyBr9siLV3Raf1cSIO0jcjTwdqjbJf25bUYaGgnFBqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: May 19 00:50:36 2024 GMT Not After : May 26 00:50:36 2024 GMT Subject: CN=66494cdc-aecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:63:26:af:e9:68:df:50:8b:cb:bc:a1:8d: 79:4b:f8:5a:7c:f9:3f:8e:8c:dc:73:7a:22:c5:f9: db:04:99:ab:80:bb:63:7a:0c:ac:2c:48:48:f0:44: b3:e1:55:75:f3:7b:e3:37:ae:04:06:09:5a:84:a3: cd:53:28:2d:96:be:a7:e0:ca:7c:d6:57:a5:7d:a9: 1c:83:13:da:83:46:6d:5f:2e:5f:43:8f:6d:e3:ff: d5:3b:89:19:f8:25:3e:78:1c:a4:f5:ee:6a:c0:f5: f2:d7:a9:c2:d7:19:6b:bd:3a:d5:bd:ab:37:73:54: 47:f3:80:a5:77:46:a2:41:e5:e3:8d:48:40:b1:55: 7d:88:24:0a:c7:ba:af:73:e6:d3:76:79:7a:70:a5: 94:ff:fd:6c:96:3d:90:01:9d:93:6d:33:1e:6c:db: 0c:0b:3d:0e:fc:8a:33:06:ac:a4:cb:b5:64:a8:1e: 30:48:5c:d7:8a:17:df:aa:06:cf:98:23:60:55:69: 08:2f:1b:99:35:97:1f:7a:f2:fb:bc:d8:77:29:c0: b7:51:9b:a4:53:88:6b:6c:df:c7:95:6e:fa:9c:4c: 87:70:1f:81:a2:49:ed:6a:22:ee:1f:20:a7:88:c4: 40:63:85:6e:25:b8:54:d1:dd:e8:29:5d:a1:9f:fa: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:F7:B5:1E:5C:88:16:74:48:88:A2:EE:EF:A2:4B:06:D5:0C:DA X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:ea:2f:54:1a:cb:1a:d8:2c:a8:b6:fc:de:1c:2d:c1:76: d5:df:1a:20:0e:f2:3d:40:d9:75:a6:e6:0a:c5:74:d0:08:64: 4d:0e:6e:08:c6:22:43:ab:ad:56:c1:04:0d:d6:3f:e1:95:46: 49:e3:bc:4a:63:5a:ea:03:7d:d8:1b:31:ed:2b:5b:0f:fd:69: dd:5b:19:21:25:22:ec:3c:5a:2c:c4:b4:02:2a:ef:fb:68:03: 48:04:44:f3:b2:c8:f6:f8:21:94:cd:46:9a:42:ae:ce:3c:ee: 16:e7:c2:cd:3c:b2:de:e8:44:dd:b1:20:32:36:81:d9:07:ea: f9:74:70:81:ac:61:76:4e:f3:19:3d:e7:f7:e3:79:a9:45:2d: 5a:20:83:fb:75:60:3d:52:c6:a6:00:6e:36:75:09:05:d9:7f: 12:e2:ef:9b:c7:92:dd:12:ac:33:27:0d:40:b5:f6:72:dd:0c: 60:2a:ac:a5:b6:b5:a5:70:90:39:1e:b5:c3:51:f9:e9:ae:41: e7:b3:d2:e0:a1:f1:37:c9:4f:8d:6f:a8:07:e8:cd:8c:0c:d7: e8:85:53:13:fd:df:9d:f6:f6:7f:e2:e8:01:64:a5:d1:8b:51: f5:47:8f:39:0c:36:fe:3f:77:fd:20:cb:73:00:10:71:16:dd: 9a:96:97:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjQwNTE5MDA1MDM2WhcNMjQwNTI2MDA1MDM2WjAYMRYwFAYD VQQDEw02NjQ5NGNkYy1hZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovRjJq/paN9Qi8u8oY15S/hafPk/jozcc3oixfnbBJmrgLtjegysLEhI8ESz 4VV183vjN64EBglahKPNUygtlr6n4Mp81lelfakcgxPag0ZtXy5fQ49t4//VO4kZ +CU+eByk9e5qwPXy16nC1xlrvTrVvas3c1RH84Cld0aiQeXjjUhAsVV9iCQKx7qv c+bTdnl6cKWU//1slj2QAZ2TbTMebNsMCz0O/IozBqyky7VkqB4wSFzXihffqgbP mCNgVWkILxuZNZcfevL7vNh3KcC3UZukU4hrbN/HlW76nEyHcB+BokntaiLuHyCn iMRAY4VuJbhU0d3oKV2hn/plzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXO97Ue XIgWdEiIou7voksG1QzaMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApbuovVBrLGtgsqLb83hwtwXbV3xogDvI9QNl1puYKxXTQCGRNDm4I xiJDq61WwQQN1j/hlUZJ47xKY1rqA33YGzHtK1sP/WndWxkhJSLsPFosxLQCKu/7 aANIBETzssj2+CGUzUaaQq7OPO4W58LNPLLe6ETdsSAyNoHZB+r5dHCBrGF2TvMZ Pef343mpRS1aIIP7dWA9UsamAG42dQkF2X8S4u+bx5LdEqwzJw1AtfZy3QxgKqyl trWlcJA5HrXDUfnprkHns9LgofE3yU+Nb6gH6M2MDNfohVMT/d+d9vZ/4ugBZKXR i1H1R485DDb+P3f9IMtzABBxFt2alpfG -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org