$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: pgQYXtCPWu8RozBLFBxfznPdXLLIV8NR8rfpanPL8Oc= Subject key identifier: E0:58:C4:5D:A9:BB:D8:0F:A8:30:79:C1:90:FD:A4:0F:8D:50:7B:A7 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 19DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 19CC Signing time: Sat 18 May 2024 15:57:29 +0000 Manifest this update: Sat 18 May 2024 15:57:28 +0000 Manifest next update: Sat 25 May 2024 15:57:28 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: UdclgL/BftJEPnfZANgJfwRaobNF/0MxDQ5HZFal1Kc=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: ttLFwjEhNzZVnfyoPhVIHQRZuOsybetLySd0OOG9Z5E=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: STN3pgVQud0+F36KkKDZbeRN9W6sMKUFG6huwdN4TWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6621 (0x19dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: May 18 15:57:28 2024 GMT Not After : May 25 15:57:28 2024 GMT Subject: CN=6648cfe8-f14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:30:eb:3f:2d:1d:ab:da:5e:72:62:73:46: e7:8f:79:60:33:bb:cc:bf:bb:24:65:0c:a5:ea:e7: 72:b0:25:04:e9:0d:70:d2:46:a0:89:32:eb:36:51: 10:40:36:86:1d:f5:42:ca:90:29:9e:e9:9a:51:86: fe:95:b1:11:00:e2:9a:d7:80:23:ea:38:09:7b:ec: f8:c3:05:97:6a:b0:f3:96:81:5f:bf:7f:5b:61:75: 37:a1:16:03:35:ac:45:63:7b:49:55:f9:1e:16:de: 2c:1b:69:e9:a1:0d:04:88:e2:4c:ea:a6:07:6c:d9: 6d:d0:b6:38:2d:b1:05:f3:b2:90:6e:6a:5a:04:c0: e9:83:d9:3e:9f:52:c3:94:92:97:94:e5:cc:e4:b6: d9:9f:f5:5f:5b:e2:ea:4b:f2:62:fe:b2:4c:8f:0b: f3:57:27:93:1c:80:cd:c0:77:41:eb:d0:f1:c6:a4: a9:1d:f5:b0:bb:1e:cf:24:54:ec:7a:bc:ee:80:04: f5:61:c2:82:ae:ea:7a:c7:26:a8:78:a6:8b:33:a3: 59:bc:ab:90:ea:35:4c:9d:dd:c1:38:1a:f2:b2:d6: 6d:9b:1e:8c:6e:00:a9:43:25:5b:64:e6:f8:14:51: 8d:9e:9f:f0:a3:e7:dc:18:da:6a:78:3d:98:f5:19: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:58:C4:5D:A9:BB:D8:0F:A8:30:79:C1:90:FD:A4:0F:8D:50:7B:A7 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:b9:c9:c4:ef:71:3e:73:a3:66:55:22:ec:ba:c0:c3:9c: 30:b8:b6:52:6c:93:ff:c3:1f:65:aa:7e:37:79:3b:03:0f:6e: d0:9b:81:53:db:b5:f4:2a:ec:c5:eb:03:f6:b7:2f:c5:52:c1: 3a:4c:2c:0d:56:85:32:d7:b6:9d:d0:99:d9:60:26:6f:0f:89: 3e:ff:ce:da:a0:69:bc:72:bb:e9:94:c7:5f:7f:25:29:d7:16: 29:07:cf:ef:14:9e:27:d8:95:05:e9:5d:a9:42:aa:05:80:36: ea:f8:8a:f4:d9:b0:01:08:ca:af:0e:e5:51:5a:ec:d8:ff:0b: d0:fe:0d:c9:74:f0:4c:22:1d:1f:fa:60:d8:0c:ab:43:2f:66: 54:ba:7b:6d:0b:aa:38:3c:55:06:53:af:49:e2:79:57:58:bd: 08:cd:e5:21:8a:6b:32:e1:0c:68:8b:e1:fc:cb:e0:9c:3e:39: 4e:29:27:10:06:92:e5:15:55:98:9b:49:bb:2e:cd:5a:10:d5: 65:d4:ea:0e:fd:3b:80:bf:83:8e:88:2d:a2:32:d0:8f:0e:70: e1:b6:13:70:f1:7f:77:8f:28:4c:41:a0:9c:d6:64:18:7c:e3: bf:c8:7e:e6:04:69:78:a2:7b:62:39:5a:b6:90:ed:76:47:33: 9c:59:2b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjQwNTE4MTU1NzI4WhcNMjQwNTI1MTU1NzI4WjAYMRYwFAYD VQQDEw02NjQ4Y2ZlOC1mMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dww6z8tHavaXnJic0bnj3lgM7vMv7skZQyl6udysCUE6Q1w0kagiTLrNlEQ QDaGHfVCypApnumaUYb+lbERAOKa14Aj6jgJe+z4wwWXarDzloFfv39bYXU3oRYD NaxFY3tJVfkeFt4sG2npoQ0EiOJM6qYHbNlt0LY4LbEF87KQbmpaBMDpg9k+n1LD lJKXlOXM5LbZn/VfW+LqS/Ji/rJMjwvzVyeTHIDNwHdB69DxxqSpHfWwux7PJFTs erzugAT1YcKCrup6xyaoeKaLM6NZvKuQ6jVMnd3BOBrystZtmx6MbgCpQyVbZOb4 FFGNnp/wo+fcGNpqeD2Y9RmePQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBYxF2p u9gPqDB5wZD9pA+NUHunMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuL7nJxO9xPnOjZlUi7LrAw5wwuLZSbJP/wx9lqn43eTsDD27Qm4FT 27X0KuzF6wP2ty/FUsE6TCwNVoUy17ad0JnZYCZvD4k+/87aoGm8crvplMdffyUp 1xYpB8/vFJ4n2JUF6V2pQqoFgDbq+Ir02bABCMqvDuVRWuzY/wvQ/g3JdPBMIh0f +mDYDKtDL2ZUunttC6o4PFUGU69J4nlXWL0IzeUhimsy4Qxoi+H8y+CcPjlOKScQ BpLlFVWYm0m7Ls1aENVl1OoO/TuAv4OOiC2iMtCPDnDhthNw8X93jyhMQaCc1mQY fOO/yH7mBGl4ontiOVq2kO12RzOcWSuk -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org