$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: FNLFW/QWFwci89T1Ro3NgS270kpkrxLIjdOoJ7aMvSM= Subject key identifier: DC:8B:01:97:CA:8E:EC:26:7B:4B:D5:7D:D5:27:38:6C:86:E3:73:14 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0BA3 Signing time: Thu 30 May 2024 19:37:17 +0000 Manifest this update: Thu 30 May 2024 19:37:16 +0000 Manifest next update: Thu 06 Jun 2024 19:37:16 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: RgLrj0xLhNsHDmhIjG3l1iXJ+CzE7Dm/rRwbKEYSu18=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: v5WnYGiqJFnOk64Cg+XJ95Fr8ijqDqDsbZRgPYZFORE=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: 3MI130qG7qiGy/yPcdkdZX/rmSLfxgXhGaaD2XSdx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: May 30 19:37:16 2024 GMT Not After : Jun 6 19:37:16 2024 GMT Subject: CN=6658d56d-1c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:46:d5:b6:8c:11:15:3a:4c:9d:41:d4:1e: 8b:cc:1b:f4:84:61:b9:dc:24:3b:84:5d:6f:68:48: a3:88:b0:0f:92:c5:f9:c5:4b:6d:09:70:32:93:90: 03:4f:37:dc:27:3f:be:3c:16:1a:14:6e:3a:0f:1f: d2:85:76:c2:d3:6f:e9:bf:f8:93:43:d9:4b:06:41: 66:23:51:40:da:86:a9:1a:b6:39:6b:95:d8:88:51: 5d:cc:dd:41:bb:ea:3d:94:32:8f:6e:63:5e:8a:41: 1b:29:f8:22:c1:35:0b:0a:34:cf:2f:45:1a:45:c6: 50:ff:ac:f3:1b:55:ed:e1:d7:1e:8e:2c:f6:14:6f: 84:8e:d2:b7:d1:cf:10:a8:db:87:9e:17:13:40:74: b4:bd:07:50:78:d1:8c:84:b3:31:d0:85:69:87:bf: f7:26:6a:91:d8:bf:08:36:3c:4b:70:a2:de:77:45: 16:66:1c:77:3b:c0:b1:82:f0:e4:3a:36:5b:d9:ce: 96:f0:19:fa:31:23:a9:5b:77:04:0c:4e:d1:a0:71: 40:df:56:44:a6:1d:9a:76:3a:a1:bf:10:60:1a:c1: 5f:a4:68:1e:23:a2:e3:87:16:b0:08:a7:08:db:84: c2:75:9c:42:b1:de:fe:f2:96:aa:eb:56:8e:f5:09: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8B:01:97:CA:8E:EC:26:7B:4B:D5:7D:D5:27:38:6C:86:E3:73:14 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:46:9d:c1:d5:a9:cb:51:64:5e:8b:d8:b1:1a:57:cd:49:72: 33:90:7e:c8:30:a8:8f:00:cd:8b:7c:2f:ff:9d:75:5b:d5:d2: ab:5b:e5:c3:48:ef:3e:49:9a:f4:fa:4f:87:fa:bf:be:ac:44: 1c:90:5d:ca:ce:10:af:30:80:8b:b5:10:a9:a7:d0:4e:0a:04: a9:a1:2d:64:ab:ea:7c:92:81:83:53:88:89:d1:89:64:5f:b1: cb:a2:89:e8:e6:de:e2:88:a4:88:b3:9c:2e:76:ca:ed:7e:02: 4f:3b:27:b0:ac:3a:69:22:bb:a6:32:78:a1:64:68:0a:f9:a5: 1a:7e:ed:b2:88:14:bf:41:13:f6:47:31:1e:30:75:4c:6c:f0: bb:aa:cc:9a:ef:07:ef:b3:65:9e:70:bb:2d:75:26:a7:48:26: 69:c2:d3:8e:19:b4:d8:04:be:2c:b5:cf:cc:f6:22:42:f7:b3: 9e:65:d4:d7:c6:ad:5d:2c:86:54:46:8b:94:01:c5:75:86:0c: 5e:9d:c9:20:1f:f6:5a:d5:b8:51:71:55:a4:fc:14:58:d5:b7: 3b:2f:98:1d:00:9d:39:34:3c:28:ad:01:d5:65:1b:ab:d6:f5: ec:ae:b1:f8:85:b9:51:48:22:e7:22:de:30:89:a1:f1:62:65: 7d:f3:db:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjQwNTMwMTkzNzE2WhcNMjQwNjA2MTkzNzE2WjAYMRYwFAYD VQQDEw02NjU4ZDU2ZC0xYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBtG1baMERU6TJ1B1B6LzBv0hGG53CQ7hF1vaEijiLAPksX5xUttCXAyk5AD TzfcJz++PBYaFG46Dx/ShXbC02/pv/iTQ9lLBkFmI1FA2oapGrY5a5XYiFFdzN1B u+o9lDKPbmNeikEbKfgiwTULCjTPL0UaRcZQ/6zzG1Xt4dcejiz2FG+EjtK30c8Q qNuHnhcTQHS0vQdQeNGMhLMx0IVph7/3JmqR2L8INjxLcKLed0UWZhx3O8CxgvDk OjZb2c6W8Bn6MSOpW3cEDE7RoHFA31ZEph2adjqhvxBgGsFfpGgeI6LjhxawCKcI 24TCdZxCsd7+8paq61aO9Qkn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyLAZfK juwme0vVfdUnOGyG43MUMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiRp3B1anLUWRei9ixGlfNSXIzkH7IMKiPAM2LfC//nXVb1dKrW+XD SO8+SZr0+k+H+r++rEQckF3KzhCvMICLtRCpp9BOCgSpoS1kq+p8koGDU4iJ0Ylk X7HLoono5t7iiKSIs5wudsrtfgJPOyewrDppIrumMnihZGgK+aUafu2yiBS/QRP2 RzEeMHVMbPC7qsya7wfvs2WecLstdSanSCZpwtOOGbTYBL4stc/M9iJC97OeZdTX xq1dLIZURouUAcV1hgxenckgH/Za1bhRcVWk/BRY1bc7L5gdAJ05NDworQHVZRur 1vXsrrH4hblRSCLnIt4wiaHxYmV989ve -----END CERTIFICATE-----Generated at Thu May 30 20:35:35 2024 by rpki-client on console-fra.rpki-client.org