$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: pC/N0lOXwTjIk7wVyjMW8mSuXy8X3RhENUx6qg1J2pw= Subject key identifier: 5E:B7:95:AC:47:F6:BB:C9:70:B4:96:97:14:3E:F3:CF:6C:AF:C4:EF Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0120 Signing time: Sun 19 May 2024 05:10:14 +0000 Manifest this update: Sun 19 May 2024 05:10:14 +0000 Manifest next update: Sun 26 May 2024 05:10:14 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: cWu9X5cm85aHmK/yTNDtIvEGDy1SeKQCpKAkSGhI+K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: May 19 05:10:14 2024 GMT Not After : May 26 05:10:14 2024 GMT Subject: CN=664989b6-8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1c:38:da:9b:b7:3a:e2:c5:4d:3f:f1:be:ae: d9:d0:45:36:ee:1c:84:7e:b7:be:3e:af:06:42:0c: 4a:f3:84:27:d1:e2:48:42:d9:3b:9a:40:3a:fb:5b: e9:63:88:3b:1b:b9:b9:dc:8a:40:36:b8:29:46:6b: 0e:8e:8c:cb:b1:74:9b:fb:c1:42:7d:ce:b2:7c:f2: 2c:c3:11:19:44:45:37:35:af:15:53:05:7c:20:df: 80:f9:12:fb:5d:01:e8:61:d5:5c:e9:03:0e:c6:33: af:2d:5b:cb:ba:75:58:5b:01:18:20:c2:11:7b:73: 49:72:75:49:5d:eb:07:76:ee:47:ba:f3:e8:aa:4e: ec:ac:49:9b:28:f7:76:5a:3e:a8:b6:c4:a4:dd:b7: dc:79:d2:fa:6a:2d:58:6a:ba:e3:4c:47:82:51:88: 84:a5:a9:7d:9b:95:6f:6b:b1:4e:07:e9:4e:b5:a1: 81:2f:82:70:6b:7b:68:ed:7d:ae:9a:41:26:7b:f4: 3b:23:f8:9a:9f:db:ea:9f:5a:cf:39:e8:98:f7:4d: 05:39:67:d7:37:d4:ff:66:fd:00:f5:e7:17:64:e3: 39:af:ff:35:37:ff:b8:68:d3:3b:05:c2:de:a1:a9: f9:82:b2:72:15:b2:6b:7f:09:3a:3c:c5:03:5d:ce: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B7:95:AC:47:F6:BB:C9:70:B4:96:97:14:3E:F3:CF:6C:AF:C4:EF X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:49:3d:0a:c0:b0:1e:34:2a:e1:f8:27:a0:fa:71:51:2f:ca: 0c:de:b6:ae:a6:d4:a9:59:04:32:c6:a9:41:da:e9:a1:de:67: ac:7b:33:da:d9:4a:55:57:a1:6c:16:bf:17:56:ac:4c:a3:ea: 19:39:61:1a:b0:c6:9e:68:7e:f4:92:21:a2:34:3c:0d:79:0f: a5:9a:fe:71:fe:6c:15:de:ff:32:6e:da:0e:3c:49:b9:03:ba: 15:92:08:d8:5b:77:a7:6f:79:64:9b:da:b2:84:92:f2:06:4f: 4d:38:8c:ed:ec:a7:17:50:61:b8:97:3b:98:76:07:a2:d8:06: 37:8e:37:e0:4e:c0:41:ee:62:f3:c1:d7:b4:ff:86:33:40:21: 84:4f:63:f3:5f:31:7b:1c:a7:7d:13:74:f2:c9:40:92:d5:c8: 44:df:46:23:50:53:e9:1d:5e:37:4e:87:06:c9:fd:fa:0b:00: a4:31:0f:e8:de:25:3e:72:67:ac:bf:a8:9e:03:fd:83:eb:fa: 08:93:4a:3b:ff:15:98:db:92:e2:16:97:ba:81:1f:f1:af:9e: 4c:aa:9c:cd:23:a2:24:cf:e8:23:ed:61:81:bf:49:bf:e8:d1: c5:4a:a2:73:0f:08:b6:15:ff:98:0f:11:bd:75:37:49:be:0e: d9:d9:1b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjQwNTE5MDUxMDE0WhcNMjQwNTI2MDUxMDE0WjAYMRYwFAYD VQQDEw02NjQ5ODliNi04NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hw42pu3OuLFTT/xvq7Z0EU27hyEfre+Pq8GQgxK84Qn0eJIQtk7mkA6+1vp Y4g7G7m53IpANrgpRmsOjozLsXSb+8FCfc6yfPIswxEZREU3Na8VUwV8IN+A+RL7 XQHoYdVc6QMOxjOvLVvLunVYWwEYIMIRe3NJcnVJXesHdu5HuvPoqk7srEmbKPd2 Wj6otsSk3bfcedL6ai1YarrjTEeCUYiEpal9m5Vva7FOB+lOtaGBL4Jwa3to7X2u mkEme/Q7I/ian9vqn1rPOeiY900FOWfXN9T/Zv0A9ecXZOM5r/81N/+4aNM7BcLe oan5grJyFbJrfwk6PMUDXc6WPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF63laxH 9rvJcLSWlxQ+889sr8TvMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArST0KwLAeNCrh+Ceg+nFRL8oM3rauptSpWQQyxqlB2umh3mesezPa 2UpVV6FsFr8XVqxMo+oZOWEasMaeaH70kiGiNDwNeQ+lmv5x/mwV3v8ybtoOPEm5 A7oVkgjYW3enb3lkm9qyhJLyBk9NOIzt7KcXUGG4lzuYdgei2AY3jjfgTsBB7mLz wde0/4YzQCGET2PzXzF7HKd9E3TyyUCS1chE30YjUFPpHV43TocGyf36CwCkMQ/o 3iU+cmesv6ieA/2D6/oIk0o7/xWY25LiFpe6gR/xr55MqpzNI6Ikz+gj7WGBv0m/ 6NHFSqJzDwi2Ff+YDxG9dTdJvg7Z2RuX -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org