$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: xOIWhOoP88D/45RoRhthgDtj0Hvs+8GXmoUItlBxPKU= Subject key identifier: A3:7E:58:99:A4:49:3F:88:AC:A7:32:41:A9:AA:A6:C0:BC:FD:B9:23 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 02C0 Signing time: Sat 01 Jun 2024 04:39:43 +0000 Manifest this update: Sat 01 Jun 2024 04:39:43 +0000 Manifest next update: Sat 08 Jun 2024 04:39:43 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: hubKp60NTJUmloi3i3MkJjtfxkADy+8PrvwXCXUeroY=) 2: 14C46870AC2711EC9977D033C4F9AE02.roa (hash: 33FnBakoRexDzsMRHSuSOVEGleMMnDW66uVT94J5oPA=) 3: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: 4ZihWaiz0zd8ffyeV14cgNX7er0MJTfGdRltrv8K/dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Jun 1 04:39:43 2024 GMT Not After : Jun 8 04:39:43 2024 GMT Subject: CN=665aa60f-fe9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:f8:52:de:0a:fb:01:29:d0:25:79:e4:a0: 4f:68:f1:2a:eb:d4:d8:2c:33:0e:89:de:a7:1f:38: 22:a1:3a:fc:10:98:88:6b:70:13:cb:51:6a:ac:d6: 86:50:94:50:0b:72:37:f5:40:d1:a8:82:15:3c:4e: c1:3f:f0:7b:08:d8:7a:78:15:85:7f:39:13:61:92: 6d:a4:7d:76:ec:09:4e:75:25:29:d6:8d:2e:6d:2c: dc:d3:4b:89:3a:d6:8b:a1:ca:6d:28:bc:c6:7b:c5: c7:86:45:5f:f9:83:c3:d6:5b:96:80:c5:a6:8d:33: 3c:14:fb:b9:aa:39:40:e1:65:14:f7:38:ba:d4:e7: c4:ac:05:92:0f:c1:12:d4:eb:e4:ff:49:91:54:b7: 89:db:0a:9d:03:4b:9e:9d:fb:cf:34:8d:76:e9:a7: 0c:94:e7:43:1f:90:fb:14:13:26:28:0f:66:3b:df: 96:15:f6:09:06:0c:ef:a6:3c:63:a1:de:7a:96:e6: 7d:db:40:e3:75:9a:94:72:bb:c7:c2:eb:34:50:f4: 10:2a:a2:ac:6f:e5:cf:5a:fa:4c:4d:6b:22:9a:a0: bf:10:ff:ea:ac:9a:88:98:8c:48:4f:85:6e:ee:be: e7:cd:c9:75:5f:d0:c5:df:33:97:9c:c8:92:03:7d: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7E:58:99:A4:49:3F:88:AC:A7:32:41:A9:AA:A6:C0:BC:FD:B9:23 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:68:d2:ab:0f:24:d5:92:9e:0e:84:e6:95:c4:4c:65:be:c1: 56:f0:bd:ae:c5:71:61:76:93:66:82:7b:54:40:cb:f5:97:98: 42:96:d8:8c:39:6d:80:dc:ed:2a:96:74:51:43:79:cc:15:87: f4:a6:2e:e0:00:fe:47:3a:fe:24:42:ed:cc:37:87:39:57:00: 1b:e2:67:15:48:74:ab:ad:91:f7:fc:da:2f:d3:24:df:25:af: 7a:23:fd:de:89:20:eb:6c:c3:94:bc:16:74:e7:d1:4f:83:cb: 2d:a1:f3:34:7a:76:d0:c2:42:6a:6a:2a:2f:4d:1e:45:e9:e4: df:4c:e6:b5:9d:81:6c:03:b8:9b:59:5f:b9:1b:41:d1:6b:b2: e8:10:21:80:ec:56:6c:7a:b8:4a:3e:e4:c9:f6:e9:09:31:0e: f4:10:9b:76:6e:36:58:a9:12:83:92:37:39:27:10:6c:5b:5c: af:58:f3:ad:50:a8:da:6c:62:56:6c:d6:d4:f3:5c:5d:fb:bd: 8c:08:94:6b:13:88:bd:c7:af:1d:29:aa:42:27:32:c6:89:01: c2:74:d1:12:8a:24:57:0a:ea:dc:a5:1b:d2:90:d0:86:d5:0f: b1:be:37:ec:e0:be:a9:9b:9d:2d:57:66:8b:69:1c:9d:72:24: ec:07:37:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjQwNjAxMDQzOTQzWhcNMjQwNjA4MDQzOTQzWjAYMRYwFAYD VQQDEw02NjVhYTYwZi1mZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx634Ut4K+wEp0CV55KBPaPEq69TYLDMOid6nHzgioTr8EJiIa3ATy1FqrNaG UJRQC3I39UDRqIIVPE7BP/B7CNh6eBWFfzkTYZJtpH127AlOdSUp1o0ubSzc00uJ OtaLocptKLzGe8XHhkVf+YPD1luWgMWmjTM8FPu5qjlA4WUU9zi61OfErAWSD8ES 1Ovk/0mRVLeJ2wqdA0uenfvPNI126acMlOdDH5D7FBMmKA9mO9+WFfYJBgzvpjxj od56luZ920DjdZqUcrvHwus0UPQQKqKsb+XPWvpMTWsimqC/EP/qrJqImIxIT4Vu 7r7nzcl1X9DF3zOXnMiSA31KuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN+WJmk ST+IrKcyQamqpsC8/bkjMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaNKrDyTVkp4OhOaVxExlvsFW8L2uxXFhdpNmgntUQMv1l5hCltiM OW2A3O0qlnRRQ3nMFYf0pi7gAP5HOv4kQu3MN4c5VwAb4mcVSHSrrZH3/Nov0yTf Ja96I/3eiSDrbMOUvBZ059FPg8stofM0enbQwkJqaiovTR5F6eTfTOa1nYFsA7ib WV+5G0HRa7LoECGA7FZserhKPuTJ9ukJMQ70EJt2bjZYqRKDkjc5JxBsW1yvWPOt UKjabGJWbNbU81xd+72MCJRrE4i9x68dKapCJzLGiQHCdNESiiRXCurcpRvSkNCG 1Q+xvjfs4L6pm50tV2aLaRydciTsBzdp -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org