$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: 1TS1tU2AoA3a/gvBJ5GKxA+Y8gloqdsa3tQ1E13LqKk= Subject key identifier: 17:8E:0A:92:1B:54:D2:02:E3:7B:CE:47:9C:0F:65:B0:04:52:CD:AC Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 05BA Signing time: Fri 31 May 2024 01:38:37 +0000 Manifest this update: Fri 31 May 2024 01:38:37 +0000 Manifest next update: Fri 07 Jun 2024 01:38:37 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 50lNNUy0voiNJWqlrUDSXOI/uIGEjUvMhsuOGhGV6l8=) 2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: j9p/vcA9o9VzipBj0MMgcHuMnlUR90tv7MO4kCKow5M=) 3: 5AB6E29E5D3E11EE93D0E174C4F9AE02.roa (hash: dl7ycnHR0qiY7iMbTfjI1Uitou1dMB+CBEDoGL3xi50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: May 31 01:38:37 2024 GMT Not After : Jun 7 01:38:37 2024 GMT Subject: CN=66592a1d-af24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:a6:1a:2b:3e:4a:c0:3a:39:2e:42:c7:2c: d8:e7:f7:a8:3d:13:d0:97:28:bc:b4:31:75:b5:67: e0:1f:c7:b3:c3:ff:a6:ff:22:4c:e3:a2:b7:5c:1e: b4:99:6b:5a:8d:f2:89:59:85:91:e2:cc:db:08:a7: c3:16:15:27:f8:be:fb:52:93:52:0c:56:5d:38:fe: 28:c2:78:1d:66:ae:cb:9f:c5:7f:e6:c1:16:29:38: 76:ea:b3:df:94:6a:3d:6a:6b:68:d3:97:8f:1d:9d: 2a:d5:02:5d:f8:b3:a1:fa:bc:2a:ad:04:20:d8:73: 84:c5:e8:cd:69:d5:ad:62:01:b3:85:27:f4:6a:91: af:70:ef:47:eb:35:4e:83:21:91:92:cb:e4:a4:e0: c3:cd:28:93:e2:f6:26:af:78:73:59:a7:de:ed:db: 3f:16:b4:65:76:0e:5e:e5:65:e7:80:98:61:b6:15: f9:df:17:2d:b8:7c:ae:ad:cb:14:9e:98:32:21:9c: 3e:bd:34:91:25:9e:75:f3:de:6a:54:13:80:95:f4: 97:97:e9:71:28:84:0b:ea:3a:11:b1:13:ce:60:b8: 03:80:63:c3:21:71:a0:42:2d:32:cb:61:39:fe:12: 8d:27:4f:10:bd:13:50:d9:f4:25:c5:e5:79:0a:ee: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8E:0A:92:1B:54:D2:02:E3:7B:CE:47:9C:0F:65:B0:04:52:CD:AC X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4e:22:58:72:7a:a9:89:a1:37:6c:75:f9:66:3c:63:1e:2d: d7:df:e3:1c:ef:2a:a6:39:20:43:ac:0a:5c:9f:c7:80:5e:8a: 67:4d:7e:32:f8:ef:08:a4:7f:25:f0:87:23:88:ee:16:19:ce: 27:7c:4d:ef:47:f5:9c:c5:9b:76:12:4a:b2:12:33:46:8f:26: 1c:05:1b:1a:d9:e0:1d:83:e6:30:24:7c:1a:e4:16:32:a8:3e: c4:62:b9:8e:9a:54:fd:43:89:2c:ce:f5:f8:a7:4f:3f:73:23: f3:15:5f:ac:35:49:df:e7:c6:8c:06:f5:ba:ff:55:7e:80:c5: 98:64:d3:13:81:4a:55:53:54:4c:f9:ac:73:49:b0:c8:94:65: cc:24:1d:b6:19:36:33:73:c4:8c:d6:9e:7f:d7:e0:d8:45:29: 84:0a:52:c6:86:9f:e5:25:9e:10:a9:68:a0:9f:55:73:71:d7: 94:53:c5:f1:da:35:dc:eb:42:f3:ba:0f:c3:2b:c1:80:cd:27: 50:72:c6:b9:45:eb:29:0e:ec:9b:27:61:82:e6:a0:7b:34:e9: ec:d2:65:95:2f:84:18:85:7e:3c:24:b3:79:e8:4f:32:a0:9e: 52:aa:83:d5:b6:7b:76:d4:ff:82:d9:15:f3:fb:7a:50:b9:96: 66:2b:63:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjQwNTMxMDEzODM3WhcNMjQwNjA3MDEzODM3WjAYMRYwFAYD VQQDEw02NjU5MmExZC1hZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PGmGis+SsA6OS5CxyzY5/eoPRPQlyi8tDF1tWfgH8ezw/+m/yJM46K3XB60 mWtajfKJWYWR4szbCKfDFhUn+L77UpNSDFZdOP4owngdZq7Ln8V/5sEWKTh26rPf lGo9amto05ePHZ0q1QJd+LOh+rwqrQQg2HOExejNadWtYgGzhSf0apGvcO9H6zVO gyGRksvkpODDzSiT4vYmr3hzWafe7ds/FrRldg5e5WXngJhhthX53xctuHyurcsU npgyIZw+vTSRJZ51895qVBOAlfSXl+lxKIQL6joRsRPOYLgDgGPDIXGgQi0yy2E5 /hKNJ08QvRNQ2fQlxeV5Cu5dHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeOCpIb VNIC43vOR5wPZbAEUs2sMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8TiJYcnqpiaE3bHX5ZjxjHi3X3+Mc7yqmOSBDrApcn8eAXopnTX4y +O8IpH8l8IcjiO4WGc4nfE3vR/WcxZt2EkqyEjNGjyYcBRsa2eAdg+YwJHwa5BYy qD7EYrmOmlT9Q4kszvX4p08/cyPzFV+sNUnf58aMBvW6/1V+gMWYZNMTgUpVU1RM +axzSbDIlGXMJB22GTYzc8SM1p5/1+DYRSmEClLGhp/lJZ4QqWign1VzcdeUU8Xx 2jXc60Lzug/DK8GAzSdQcsa5RespDuybJ2GC5qB7NOns0mWVL4QYhX48JLN56E8y oJ5SqoPVtnt21P+C2RXz+3pQuZZmK2O0 -----END CERTIFICATE-----Generated at Fri May 31 02:50:45 2024 by rpki-client on console-fra.rpki-client.org