$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: xLaXpee1kWrhQQ7c2oId8MBipEb/MqQlGGnGnTCp/mY= Subject key identifier: DA:A8:C5:6F:0E:F6:5C:5E:B8:81:E6:96:7D:3F:CD:FE:74:D2:67:AE Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 075D Signing time: Sat 18 May 2024 22:18:17 +0000 Manifest this update: Sat 18 May 2024 22:18:17 +0000 Manifest next update: Sat 25 May 2024 22:18:17 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: YXD0pNTwdFXvOqRU7m7e9oMLu5OW0Q0c068zMmwmqlM=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: XgD24201nYGGWIPhAWXOM6yau57LLbr5Mjm1/Cxhbmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Validity Not Before: May 18 22:18:17 2024 GMT Not After : May 25 22:18:17 2024 GMT Subject: CN=66492929-5535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:39:68:ac:b3:c3:64:5e:4b:d3:4b:99:b2: a5:2a:0b:45:56:92:cd:c0:47:a9:a8:bb:1c:2c:d1: 9e:fc:96:a5:95:a8:ff:07:0b:41:c0:58:a9:56:dc: 4c:58:eb:5d:0a:d5:a9:2b:29:a2:8d:f3:b7:1e:08: 51:f3:66:28:ac:a2:04:40:ed:04:72:ae:e4:b0:c5: 1d:d2:11:7f:cc:3b:be:e2:f4:12:31:f0:02:b0:c4: a7:aa:c8:ee:4e:f4:e7:c2:92:ef:ac:93:70:6b:7c: fa:01:57:ba:cf:c6:16:cc:5d:af:18:7e:7e:79:d6: 27:00:f5:fc:d7:d1:8a:28:c5:60:3e:b9:0f:a2:d2: 3b:c6:aa:50:15:9e:bc:55:ba:0a:1d:bc:8b:16:db: 50:02:94:2c:c1:1e:f4:4e:0b:c5:12:8a:d5:3f:cf: 21:1a:36:1a:16:1d:f7:1b:1d:45:27:da:2d:d9:1e: b0:79:6d:7d:51:94:76:8c:af:5d:be:20:62:e5:53: 7b:b8:72:c8:57:99:33:9e:bc:f5:42:86:c4:7d:fd: 97:dc:9f:ea:05:ee:57:b9:af:5a:a8:b3:24:32:66: 37:e9:76:06:32:6e:74:ec:dc:a5:c2:f1:5c:bf:cd: 37:e0:a6:bf:71:e1:93:b2:85:73:50:14:c2:19:28: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:C5:6F:0E:F6:5C:5E:B8:81:E6:96:7D:3F:CD:FE:74:D2:67:AE X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f7:a5:98:95:b1:1b:0b:c2:65:97:ea:94:cf:bf:2f:5f:aa: 8a:99:50:82:e9:e2:30:bf:e9:1e:8d:ab:72:ff:e8:15:8a:48: 1e:d4:40:66:3b:16:91:a7:0f:13:a8:6e:08:f9:10:44:a3:75: c5:40:43:24:29:7a:23:4f:6a:93:2e:25:b5:b4:d9:4c:59:ef: 76:30:8d:5e:96:4f:c7:74:c4:38:09:f3:19:3c:6e:75:d9:9a: 4f:6b:04:86:8d:4f:56:f4:ac:fe:47:94:6f:45:7a:2e:60:70: 2e:f3:e8:28:ac:57:75:af:03:76:3a:89:5f:82:e6:ef:4a:de: 83:ba:33:12:d5:38:f2:52:f6:a3:19:84:84:28:12:41:76:15: a2:ce:35:8c:d4:de:d6:ad:8d:f5:f9:78:22:19:c4:bf:2e:4d: 1a:78:80:40:fe:0a:80:bb:02:39:b8:24:27:fb:ba:5a:07:26: 21:64:ad:bb:83:1a:4b:6d:f3:e8:90:28:8a:33:c5:04:6c:12: 4a:12:7e:64:8d:e5:21:9c:84:f7:8e:ea:8a:8f:c2:94:e6:90: ed:6e:ad:82:9b:c8:b3:55:1f:18:85:61:34:dc:89:4d:37:05: c8:b0:f8:42:a7:1d:83:e8:a7:53:5a:37:2f:4e:83:bd:a7:03: 3d:14:24:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjQwNTE4MjIxODE3WhcNMjQwNTI1MjIxODE3WjAYMRYwFAYD VQQDEw02NjQ5MjkyOS01NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fo5aKyzw2ReS9NLmbKlKgtFVpLNwEepqLscLNGe/Jallaj/BwtBwFipVtxM WOtdCtWpKymijfO3HghR82YorKIEQO0Ecq7ksMUd0hF/zDu+4vQSMfACsMSnqsju TvTnwpLvrJNwa3z6AVe6z8YWzF2vGH5+edYnAPX819GKKMVgPrkPotI7xqpQFZ68 VboKHbyLFttQApQswR70TgvFEorVP88hGjYaFh33Gx1FJ9ot2R6weW19UZR2jK9d viBi5VN7uHLIV5kznrz1QobEff2X3J/qBe5Xua9aqLMkMmY36XYGMm507NylwvFc v8034Ka/ceGTsoVzUBTCGSj2AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqoxW8O 9lxeuIHmln0/zf500meuMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs96WYlbEbC8Jll+qUz78vX6qKmVCC6eIwv+kejaty/+gVikge1EBm OxaRpw8TqG4I+RBEo3XFQEMkKXojT2qTLiW1tNlMWe92MI1elk/HdMQ4CfMZPG51 2ZpPawSGjU9W9Kz+R5RvRXouYHAu8+gorFd1rwN2OolfgubvSt6DujMS1TjyUvaj GYSEKBJBdhWizjWM1N7WrY31+XgiGcS/Lk0aeIBA/gqAuwI5uCQn+7paByYhZK27 gxpLbfPokCiKM8UEbBJKEn5kjeUhnIT3juqKj8KU5pDtbq2Cm8izVR8YhWE03IlN NwXIsPhCpx2D6KdTWjcvToO9pwM9FCTy -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org