$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: TGnJFp6Kyk/AvhfN1vXsGpkxqA/9Y7mibmUFvZeqtLI= Subject key identifier: 9F:EE:6D:2C:72:E4:66:17:D1:40:87:1A:E3:7D:66:CD:38:A2:CD:6E Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 06C5 Signing time: Sat 18 May 2024 23:02:06 +0000 Manifest this update: Sat 18 May 2024 23:02:06 +0000 Manifest next update: Sat 25 May 2024 23:02:06 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: Ib5HhIMUzPaSDZwJWWSwts5BxUWMsCjUh4VGOWeQ3wU=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: pQKtdpCIXPQXEJuUNBTn18+ZC87Dv47jIb/GBvl5ETc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: May 18 23:02:06 2024 GMT Not After : May 25 23:02:06 2024 GMT Subject: CN=6649336e-d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:b4:5f:4c:89:3d:64:38:5f:3f:bb:eb:c9: d6:e9:ec:a4:2f:35:30:71:c3:1a:3f:f3:d0:f5:d3: 34:6c:93:2f:2c:64:0c:46:99:9f:e2:a0:34:80:7b: 86:71:a0:8f:e6:e5:00:1a:d5:86:4d:60:a9:00:db: 29:3f:1c:bd:f6:c9:54:25:a2:40:02:3d:53:80:2d: ad:f7:9c:77:04:0e:ca:7b:87:1c:d4:96:50:b8:ad: 4e:46:77:bd:f5:07:b4:f9:66:50:13:76:9e:0a:69: 34:58:60:fe:10:e0:4e:aa:82:e8:33:07:4a:fb:82: 34:54:d7:50:ab:0f:22:27:66:b2:14:64:98:e9:bd: 4f:97:1f:db:1b:6f:5d:77:eb:1b:a0:18:8b:2b:96: 4f:aa:04:ae:e6:06:05:da:9c:8d:f4:c3:e7:4d:e8: b1:ce:d7:95:d4:0f:c4:fa:e1:cc:83:af:14:7a:be: cf:db:b5:b0:72:5a:7b:01:77:fb:6e:3b:cd:bc:62: c0:3b:bf:a8:79:84:e4:2c:4d:b1:5b:84:b5:80:e7: 14:78:ac:e6:8c:ee:9a:89:62:0e:fe:c2:aa:2b:7a: 48:e1:32:4d:a2:68:ff:f1:bb:09:27:c2:de:f9:0a: 13:3b:fe:b1:f2:d6:73:08:da:07:ca:9d:f2:1b:e1: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EE:6D:2C:72:E4:66:17:D1:40:87:1A:E3:7D:66:CD:38:A2:CD:6E X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:f1:73:38:85:7a:d1:60:c5:80:f0:43:43:f2:74:b2:6f: 03:64:94:d9:52:cb:84:a8:54:d8:92:f2:3d:a6:8b:fc:2e:b5: e9:83:fa:16:65:b4:fa:96:14:03:6d:de:41:34:6e:d8:f4:08: 25:f2:12:5a:8b:27:24:d5:e3:d8:d8:3b:5e:26:48:b7:21:e1: 57:14:0f:0e:72:ae:32:3b:bc:19:51:45:04:7d:78:6c:ab:3c: 1d:5f:4c:db:2b:0e:f8:17:4b:91:96:64:8d:f4:8b:15:9b:a8: 56:77:43:69:25:63:50:78:ef:3e:e1:2d:a0:0d:38:38:08:98: 6b:50:ac:c7:63:79:71:9c:2b:35:17:54:5c:42:16:e2:00:bd: ef:c5:c0:18:2a:fa:54:21:f1:99:8c:8b:b9:41:ce:07:d3:9f: bf:09:77:de:00:10:9f:d5:c1:3d:f1:f7:5c:13:5d:d3:ce:5e: 5d:a8:bc:39:70:7a:35:23:58:0d:3c:5a:5f:7c:5d:d5:de:67: 01:32:78:5f:7f:f4:37:b6:23:b5:b4:b8:e3:f1:98:2a:64:cb: 89:b7:27:58:c6:b8:6f:87:d8:a4:4f:19:a7:ab:94:11:53:24: 52:3e:8f:78:b3:d8:81:e5:16:35:03:87:45:ad:2e:ab:b8:52: e4:dd:6b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjQwNTE4MjMwMjA2WhcNMjQwNTI1MjMwMjA2WjAYMRYwFAYD VQQDEw02NjQ5MzM2ZS1kMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7m0X0yJPWQ4Xz+768nW6eykLzUwccMaP/PQ9dM0bJMvLGQMRpmf4qA0gHuG caCP5uUAGtWGTWCpANspPxy99slUJaJAAj1TgC2t95x3BA7Ke4cc1JZQuK1ORne9 9Qe0+WZQE3aeCmk0WGD+EOBOqoLoMwdK+4I0VNdQqw8iJ2ayFGSY6b1Plx/bG29d d+sboBiLK5ZPqgSu5gYF2pyN9MPnTeixzteV1A/E+uHMg68Uer7P27Wwclp7AXf7 bjvNvGLAO7+oeYTkLE2xW4S1gOcUeKzmjO6aiWIO/sKqK3pI4TJNomj/8bsJJ8Le +QoTO/6x8tZzCNoHyp3yG+FbLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/ubSxy 5GYX0UCHGuN9Zs04os1uMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWzPFzOIV60WDFgPBDQ/J0sm8DZJTZUsuEqFTYkvI9pov8LrXpg/oW ZbT6lhQDbd5BNG7Y9Agl8hJaiyck1ePY2DteJki3IeFXFA8Ocq4yO7wZUUUEfXhs qzwdX0zbKw74F0uRlmSN9IsVm6hWd0NpJWNQeO8+4S2gDTg4CJhrUKzHY3lxnCs1 F1RcQhbiAL3vxcAYKvpUIfGZjIu5Qc4H05+/CXfeABCf1cE98fdcE13Tzl5dqLw5 cHo1I1gNPFpffF3V3mcBMnhff/Q3tiO1tLjj8ZgqZMuJtydYxrhvh9ikTxmnq5QR UyRSPo94s9iB5RY1A4dFrS6ruFLk3WvP -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org