$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: c5ImCiw9jxFPvd5Q+XrTM/3WkUEAo/Wnuw2UKLRF4jA= Subject key identifier: F5:18:BF:40:9F:1B:A8:52:C2:0E:CC:D3:DD:AC:A6:AC:F9:68:C4:E3 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2D34 Signing time: Sat 18 May 2024 15:45:18 +0000 Manifest this update: Sat 18 May 2024 15:45:17 +0000 Manifest next update: Sat 25 May 2024 15:45:17 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: BjNIYUP7YfgRLPPQBjyoyfdKOPn8iMU5O47+wKwelKU=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: 4qg1E+TnIoenTzgBqqm/HlPUXooGymJJP0y02zxoY1Q=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: 2dhOoogqsGMcb3UWzSv3/UObiADQhWvZAnQF3lZBRxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11583 (0x2d3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: May 18 15:45:17 2024 GMT Not After : May 25 15:45:17 2024 GMT Subject: CN=6648cd0d-94a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:b8:13:43:d0:8f:24:3e:7d:cb:11:0e:fb: b6:fb:ff:6c:e4:ef:3d:23:9b:b9:e8:7e:dc:78:01: ab:54:c7:56:f0:c0:67:d8:28:c3:3d:cc:f1:9d:9e: 6d:a6:74:c8:64:9e:32:68:bf:61:42:a8:3e:17:dc: fd:0b:9f:f1:fb:76:05:b2:ed:7e:59:0e:8f:87:65: 61:bd:ce:55:10:5e:a7:3f:a3:1c:ba:ab:ee:25:08: 99:bc:41:95:f2:14:ad:3a:e8:3f:4a:af:c9:62:6a: af:f2:63:81:0a:4f:0b:dc:02:30:08:b6:08:98:96: e4:eb:00:da:5e:7e:75:01:7e:26:cd:64:f1:52:e9: 66:dd:05:55:24:22:29:b1:56:5a:47:ab:52:13:e3: 1e:30:47:bb:22:01:78:17:9a:9d:86:85:62:1a:81: c2:eb:3f:21:e9:53:49:87:57:52:f0:9d:f7:d5:a4: db:47:92:d4:a1:6a:18:be:a7:48:cf:3b:87:b0:b3: b9:98:0c:40:47:0f:77:43:f6:9c:9e:9a:15:ba:3b: 0d:e6:c5:98:08:f0:fb:00:96:9d:7d:63:8b:a1:24: bf:28:9f:e2:59:de:74:eb:17:21:10:fe:d2:59:02: 60:11:f1:55:9c:b3:c7:fe:89:1a:9a:92:3d:73:71: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:18:BF:40:9F:1B:A8:52:C2:0E:CC:D3:DD:AC:A6:AC:F9:68:C4:E3 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a6:59:91:11:0b:69:31:23:22:cd:61:f2:e5:73:37:1a:46: d6:82:d2:a9:69:80:08:e4:ae:90:3e:96:18:f1:69:6a:03:0f: 7b:4c:d1:93:b0:56:d4:4b:c2:8d:bc:ed:95:0d:86:92:7c:ab: a8:9b:01:51:73:ca:c6:60:53:58:7a:d6:96:64:05:e5:be:f7: a6:02:89:8a:2d:74:48:2d:31:45:03:cd:34:1e:80:dd:02:d5: d6:a3:96:82:c6:d1:bb:24:0c:7f:20:bc:c5:88:94:f4:0c:9e: c2:ed:8f:e8:ef:9b:90:77:12:9c:b8:4b:c8:92:b2:98:87:d9: bc:43:6d:5b:cf:84:8e:7d:3b:64:e2:76:f2:a0:d4:f8:19:6e: 54:81:fe:7c:26:96:f0:f6:85:f9:75:b5:77:82:3b:d8:8d:78: 6d:de:ed:e3:82:f5:a7:06:db:52:83:70:02:65:83:f9:41:81: 0d:0b:9f:69:6d:ba:be:8d:e9:95:73:4b:1e:e9:d8:28:38:83: 2b:61:87:cb:fc:e6:e5:9d:7a:ff:6f:8d:2f:75:f7:dd:71:e8: 0a:68:6c:3a:55:f4:bd:d5:32:65:e6:50:dd:ab:b4:95:b5:32: c8:9d:2f:7c:b7:fb:12:a8:fd:d3:f0:50:03:4a:60:7f:4a:da: df:c1:ea:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjQwNTE4MTU0NTE3WhcNMjQwNTI1MTU0NTE3WjAYMRYwFAYD VQQDEw02NjQ4Y2QwZC05NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyi4E0PQjyQ+fcsRDvu2+/9s5O89I5u56H7ceAGrVMdW8MBn2CjDPczxnZ5t pnTIZJ4yaL9hQqg+F9z9C5/x+3YFsu1+WQ6Ph2Vhvc5VEF6nP6McuqvuJQiZvEGV 8hStOug/Sq/JYmqv8mOBCk8L3AIwCLYImJbk6wDaXn51AX4mzWTxUulm3QVVJCIp sVZaR6tSE+MeMEe7IgF4F5qdhoViGoHC6z8h6VNJh1dS8J331aTbR5LUoWoYvqdI zzuHsLO5mAxARw93Q/acnpoVujsN5sWYCPD7AJadfWOLoSS/KJ/iWd506xchEP7S WQJgEfFVnLPH/okampI9c3HdJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUYv0Cf G6hSwg7M092spqz5aMTjMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3plmREQtpMSMizWHy5XM3GkbWgtKpaYAI5K6QPpYY8WlqAw97TNGT sFbUS8KNvO2VDYaSfKuomwFRc8rGYFNYetaWZAXlvvemAomKLXRILTFFA800HoDd AtXWo5aCxtG7JAx/ILzFiJT0DJ7C7Y/o75uQdxKcuEvIkrKYh9m8Q21bz4SOfTtk 4nbyoNT4GW5Ugf58Jpbw9oX5dbV3gjvYjXht3u3jgvWnBttSg3ACZYP5QYENC59p bbq+jemVc0se6dgoOIMrYYfL/OblnXr/b40vdffdcegKaGw6VfS91TJl5lDdq7SV tTLInS98t/sSqP3T8FADSmB/StrfwepO -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org