$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json) Hash identifier: DwD97vdBXnksOybexkLifk23tm2E6izxxav302sIbeE= Subject key identifier: 55:C5:F5:4A:08:A0:B6:CC:1C:DB:24:21:46:F8:9F:F8:E8:87:24:12 Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft Manifest number: 10CF Signing time: Sat 18 May 2024 20:19:18 +0000 Manifest this update: Sat 18 May 2024 20:19:18 +0000 Manifest next update: Sat 25 May 2024 20:19:18 +0000 Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: RrRp+379JVDmvTA/evH9AcIMzGHtNE/Hdh88ndZaUV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Validity Not Before: May 18 20:19:18 2024 GMT Not After : May 25 20:19:18 2024 GMT Subject: CN=66490d46-17ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:81:09:1c:97:f1:16:c2:f8:d6:64:a3:1a: 56:14:8a:95:12:37:8e:f9:26:a7:36:69:6a:f6:0a: 81:0c:0a:28:0c:66:a6:f2:c6:bb:29:a6:02:c1:02: 38:5a:7c:95:d3:da:1e:af:3c:a3:4c:4b:24:18:8b: b0:a8:19:7d:36:2b:d7:41:e5:4a:a0:93:3a:2d:92: 73:e3:45:a2:6a:02:40:c0:62:22:9e:67:bd:ea:57: b3:60:4c:e4:e7:b7:2b:f5:f0:f8:01:59:65:82:f8: d2:f3:42:b3:9c:50:40:46:e8:31:cd:3c:f7:82:96: 75:ac:b5:3f:bb:66:55:d6:ab:e9:76:89:a7:b4:14: 77:f7:0b:44:cd:84:47:dd:d4:e0:af:a5:2f:b3:59: 88:f5:69:18:b5:a4:a0:11:db:93:04:e3:af:b0:4b: 76:25:77:be:81:f6:34:ec:23:b6:c6:a4:bf:2a:b9: 1c:ee:1a:7b:44:17:42:19:7c:78:c9:56:c1:8c:7e: 39:87:66:3c:8d:00:bd:dc:96:b0:8e:e8:7d:18:52: 15:21:31:16:58:18:80:4e:b7:d8:a9:d6:17:4c:7b: 28:aa:7d:42:eb:90:e8:1f:33:1e:ca:96:87:b6:9f: 49:75:3c:a9:42:ef:82:11:56:e5:13:0f:43:ca:67: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C5:F5:4A:08:A0:B6:CC:1C:DB:24:21:46:F8:9F:F8:E8:87:24:12 X509v3 Authority Key Identifier: keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c3:ac:cf:37:db:a2:5f:de:e6:d7:c0:9e:2b:5a:4b:83:f8: 61:31:f9:a2:ae:1d:b9:58:d5:a3:c9:20:7e:eb:a5:94:c8:9a: 03:fb:48:ed:46:50:cc:3a:e9:28:12:06:a3:fc:ab:9e:ab:4b: 62:1f:36:38:11:a5:83:f8:5a:89:7f:ff:fb:85:21:03:30:a8: 8d:47:52:f0:16:d9:56:35:ea:f0:f4:74:c6:f0:ad:e7:69:6d: 58:69:9f:01:c8:c5:9f:2b:ee:e6:f0:f0:e3:76:74:70:99:d5: cb:c8:53:7d:19:32:af:0a:4e:7a:d1:8f:44:93:83:cb:e5:c0: d3:fd:af:ee:bc:bb:aa:d2:4c:a0:a9:cb:c9:c3:a4:fe:b5:ef: 2f:b5:63:e2:bb:75:21:92:6c:e4:65:e2:70:22:67:c0:07:4a: 41:53:93:96:15:43:0c:f1:14:a4:e5:81:8e:2a:13:2c:4d:25: 77:a2:e3:30:88:99:f1:c7:d2:48:a1:f2:3d:34:41:8f:06:9e: 6c:20:68:b9:47:77:03:80:55:1f:d7:e5:3f:a7:e1:9e:e0:02: 1c:88:bd:95:79:dc:55:34:18:5e:07:68:ad:4d:e5:f9:42:1f: 90:aa:c3:f8:69:75:6c:f5:36:01:5c:8e:e1:1d:d5:d2:33:0f: 7f:40:0a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx NTQ0NTE2RTYwHhcNMjQwNTE4MjAxOTE4WhcNMjQwNTI1MjAxOTE4WjAYMRYwFAYD VQQDEw02NjQ5MGQ0Ni0xN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iSBCRyX8RbC+NZkoxpWFIqVEjeO+SanNmlq9gqBDAooDGam8sa7KaYCwQI4 WnyV09oerzyjTEskGIuwqBl9NivXQeVKoJM6LZJz40WiagJAwGIinme96lezYEzk 57cr9fD4AVllgvjS80KznFBARugxzTz3gpZ1rLU/u2ZV1qvpdomntBR39wtEzYRH 3dTgr6Uvs1mI9WkYtaSgEduTBOOvsEt2JXe+gfY07CO2xqS/Krkc7hp7RBdCGXx4 yVbBjH45h2Y8jQC93Jawjuh9GFIVITEWWBiATrfYqdYXTHsoqn1C65DoHzMeypaH tp9JdTypQu+CEVblEw9DymdozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXF9UoI oLbMHNskIUb4n/johyQSMB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2 ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2w6zPN9uiX97m18CeK1pLg/hhMfmirh25WNWjySB+66WUyJoD+0jt RlDMOukoEgaj/Kueq0tiHzY4EaWD+FqJf//7hSEDMKiNR1LwFtlWNerw9HTG8K3n aW1YaZ8ByMWfK+7m8PDjdnRwmdXLyFN9GTKvCk560Y9Ek4PL5cDT/a/uvLuq0kyg qcvJw6T+te8vtWPiu3UhkmzkZeJwImfAB0pBU5OWFUMM8RSk5YGOKhMsTSV3ouMw iJnxx9JIofI9NEGPBp5sIGi5R3cDgFUf1+U/p+Ge4AIciL2VedxVNBheB2itTeX5 Qh+QqsP4aXVs9TYBXI7hHdXSMw9/QAqh -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org