$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: zsqOZ8tcJk06r+7JJdKZj1I8Mijl/q9JrCr/Z+OSYCw= Subject key identifier: 4F:AC:79:34:71:BB:3E:20:77:1C:D5:05:64:72:96:AE:39:D4:92:3E Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 0102 Signing time: Sun 19 May 2024 05:37:01 +0000 Manifest this update: Sun 19 May 2024 05:37:01 +0000 Manifest next update: Sun 26 May 2024 05:37:01 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: jom6gDkGQK2Y9iw29K2JPeAMb1tlnddRzfAzMLwNLuI=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: TuztR+4A2tCfisSsRlz0u1OQNiM6W4ozoKvZceRXg+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: May 19 05:37:01 2024 GMT Not After : May 26 05:37:01 2024 GMT Subject: CN=66498ffd-055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:c0:01:37:c0:63:b1:6c:2d:5f:c5:dc:e3: 74:77:cc:fc:ea:37:cd:54:e9:c0:53:42:7f:dd:b5: 29:de:6d:f1:71:e5:bc:9b:4c:08:f5:7c:80:d2:95: a8:06:69:b2:15:72:74:26:fe:7f:2b:45:70:96:64: b2:16:e7:47:ea:7a:9e:d1:79:52:83:15:0c:08:b8: 00:bc:79:29:b1:e4:99:5c:1d:b1:12:cf:a7:96:8f: ee:85:36:01:26:b6:9d:65:04:a3:87:fb:9a:c4:94: 30:13:a9:97:10:3b:08:0e:a8:9f:93:02:a5:1f:c9: 2d:6d:5b:24:6e:21:5b:9f:7a:e8:f5:48:d1:d1:b7: 03:b6:e4:85:9a:17:0c:cd:08:68:66:db:ea:a4:37: 38:ac:2a:a4:5e:8f:57:5c:fc:57:de:26:c1:aa:e5: 67:7f:41:77:ca:d2:6b:86:6e:6d:b0:e4:e6:15:90: 00:e9:3e:d3:53:62:e6:25:ce:3b:26:6c:be:3d:c1: a6:3c:23:db:3c:d7:c2:18:d6:00:37:48:cd:f2:e4: e0:d8:d0:8b:72:8d:9b:dc:a6:f7:fa:f7:7c:08:65: bb:84:5a:d2:91:7c:73:bc:48:03:82:18:d8:ff:b6: 31:c9:37:a9:99:96:f6:d4:03:2b:60:2c:97:a4:00: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AC:79:34:71:BB:3E:20:77:1C:D5:05:64:72:96:AE:39:D4:92:3E X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4a:77:99:fe:79:42:40:26:45:33:a2:d5:c6:23:de:17:5f: e3:d0:b5:eb:95:f3:a0:62:9a:e3:01:25:8a:82:c3:b4:ec:77: 0f:3c:91:b6:71:41:b8:7a:5e:b3:59:b5:aa:e8:2d:95:b2:c2: 96:75:4c:2f:f2:c9:a9:8d:e2:0d:2d:de:99:fa:37:39:86:14: ee:b5:64:6b:7c:2e:4e:b6:9f:03:2e:64:8c:13:fb:6a:1d:fc: 43:a1:e8:a6:a4:ca:f3:b6:0e:11:65:16:0f:1c:b5:6f:9d:6c: ee:70:bf:c4:08:96:30:3f:4c:f5:22:62:5f:14:a6:a2:50:84: 38:33:e4:1e:6c:83:33:c6:bd:87:e4:11:48:a2:35:ad:82:cd: 40:ab:50:c4:02:c3:e7:67:22:e2:60:69:12:b8:40:78:df:b4: 79:05:10:ab:18:fc:cf:0d:8f:5d:86:a9:67:10:5d:d1:20:f6: b9:3a:11:43:3f:78:63:f9:1c:d9:90:74:fe:89:f3:e0:e1:ca: 62:b0:bf:40:80:51:df:90:58:f4:35:61:f2:91:ea:ea:2e:df: 48:dd:9a:37:fb:b0:20:59:b1:07:01:59:a8:e5:16:fd:7b:e5: 29:90:4a:cb:0f:5b:e3:b2:7e:f2:19:01:f6:e1:99:2a:b9:b7: ba:e8:e8:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjQwNTE5MDUzNzAxWhcNMjQwNTI2MDUzNzAxWjAYMRYwFAYD VQQDEw02NjQ5OGZmZC0wNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulrAATfAY7FsLV/F3ON0d8z86jfNVOnAU0J/3bUp3m3xceW8m0wI9XyA0pWo BmmyFXJ0Jv5/K0VwlmSyFudH6nqe0XlSgxUMCLgAvHkpseSZXB2xEs+nlo/uhTYB JradZQSjh/uaxJQwE6mXEDsIDqifkwKlH8ktbVskbiFbn3ro9UjR0bcDtuSFmhcM zQhoZtvqpDc4rCqkXo9XXPxX3ibBquVnf0F3ytJrhm5tsOTmFZAA6T7TU2LmJc47 Jmy+PcGmPCPbPNfCGNYAN0jN8uTg2NCLco2b3Kb3+vd8CGW7hFrSkXxzvEgDghjY /7YxyTepmZb21AMrYCyXpABPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+seTRx uz4gdxzVBWRylq451JI+MB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHSneZ/nlCQCZFM6LVxiPeF1/j0LXrlfOgYprjASWKgsO07HcPPJG2 cUG4el6zWbWq6C2VssKWdUwv8smpjeINLd6Z+jc5hhTutWRrfC5Otp8DLmSME/tq HfxDoeimpMrztg4RZRYPHLVvnWzucL/ECJYwP0z1ImJfFKaiUIQ4M+QebIMzxr2H 5BFIojWtgs1Aq1DEAsPnZyLiYGkSuEB437R5BRCrGPzPDY9dhqlnEF3RIPa5OhFD P3hj+RzZkHT+ifPg4cpisL9AgFHfkFj0NWHykerqLt9I3Zo3+7AgWbEHAVmo5Rb9 e+UpkErLD1vjsn7yGQH24Zkqube66Oi4 -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org