$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: 061yJLMR9eN2vBTfgNS7iu4eEJg4JCvsWD7K7+u+uqs= Subject key identifier: 4F:A7:6F:D7:C4:FB:0C:AA:01:48:16:38:10:B9:E5:28:01:16:73:E4 Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 71 Signing time: Sun 19 May 2024 07:26:15 +0000 Manifest this update: Sun 19 May 2024 07:26:15 +0000 Manifest next update: Sun 26 May 2024 07:26:15 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 62VL2MGw0PSV2Dk6BONJTCTG8N4ekd/weH6xHAEXiKI=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: V9haeggPzUIY6sFu0B8QRKjXMw3aLSoBwqJcKUV/6sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: May 19 07:26:15 2024 GMT Not After : May 26 07:26:15 2024 GMT Subject: CN=6649a997-49f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:41:a3:44:a3:24:e3:ad:f3:f9:7c:9c:b0: ae:34:3e:78:0c:8c:76:39:70:26:b3:bf:ac:fa:67: 8e:50:96:a3:59:e9:07:84:86:bd:ec:e8:f5:ae:db: 52:2e:0f:fd:a2:ab:e1:d0:3c:4d:f9:f4:b8:23:86: d8:d0:8a:09:2b:b5:80:7d:9f:c5:38:6e:97:09:4f: 0a:a3:02:57:fc:17:51:e4:01:7f:d6:fa:4f:29:fb: 42:f3:93:c0:f7:97:e7:ae:b4:bd:7e:f4:24:b3:a8: 4c:00:58:10:69:1e:0d:a0:c4:d0:0f:c4:99:f1:18: 11:ed:36:f1:92:8f:6a:d4:7f:ef:13:11:81:22:40: dd:17:e3:53:c5:39:a7:e5:3c:33:e9:bf:07:d1:de: 57:ae:b3:57:4f:dc:8c:6d:25:44:ac:74:f0:83:4d: ea:7c:2a:5d:af:fb:31:1d:d1:6f:2d:34:52:4a:d1: 51:23:e2:18:33:64:e8:13:3e:dd:b6:1c:ad:87:f1: dc:24:97:5c:c8:28:6f:7a:53:5b:9b:95:d9:3d:a2: 18:5d:15:a2:cf:8a:2d:56:35:eb:15:99:b9:38:b4: f8:38:8a:ce:64:ba:ff:5c:c1:6d:2b:ba:63:ba:90: 90:dc:ae:68:6c:8c:80:d4:ee:ff:12:2b:65:9d:9d: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A7:6F:D7:C4:FB:0C:AA:01:48:16:38:10:B9:E5:28:01:16:73:E4 X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:58:00:4d:6e:47:8a:38:c1:b2:3e:98:2d:0a:4d:cb:44:82: a5:bb:cf:1b:a8:d2:fe:7a:c4:ba:95:c4:e6:8c:aa:6a:07:b8: ba:6b:3d:a0:1e:be:41:22:6b:0e:1b:21:78:9f:f0:80:85:07: 56:ec:49:22:86:91:8c:3c:c6:13:c3:88:25:39:83:27:42:74: cb:4a:b1:9e:01:cd:2b:d9:bb:a7:8e:91:21:5a:80:01:32:f5: 4f:18:98:95:2c:52:00:4b:b6:b2:7b:29:9a:e5:13:2e:31:2b: 8b:ef:de:eb:a5:3a:ef:59:1b:d6:ea:e9:de:11:9a:b1:76:12: 71:a1:4c:76:52:8d:24:da:55:7e:97:3a:2b:a8:1e:a4:e2:b3: 69:57:a7:26:04:b3:59:30:b1:15:99:92:58:46:9c:73:a1:a9: 01:41:e8:5e:d2:e4:fa:2c:9d:c1:04:5a:01:53:d8:ad:33:5c: 41:66:43:3a:38:0d:cf:0a:f8:a6:66:fa:61:04:d9:a9:c0:95: f8:14:33:a4:f0:d0:82:37:98:0d:f7:03:c0:ff:f1:4d:e8:ea: 26:e8:40:1d:e4:ae:84:bb:40:f8:c1:fc:d3:01:74:e7:16:73: 4d:a1:e4:c8:ff:e7:ae:7f:c2:4d:62:e4:b0:51:21:84:02:99: f1:c7:b7:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzVBNDExMC8GA1UEBRMoNDFBMEMyNDQzNTlGMDIzNUM5QTYwQjFGNzE5QTVGRDU2 Nzk2NjA1MzAeFw0yNDA1MTkwNzI2MTVaFw0yNDA1MjYwNzI2MTVaMBgxFjAUBgNV BAMTDTY2NDlhOTk3LTQ5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqIEGjRKMk463z+XycsK40PngMjHY5cCazv6z6Z45QlqNZ6QeEhr3s6PWu21Iu D/2iq+HQPE359LgjhtjQigkrtYB9n8U4bpcJTwqjAlf8F1HkAX/W+k8p+0Lzk8D3 l+eutL1+9CSzqEwAWBBpHg2gxNAPxJnxGBHtNvGSj2rUf+8TEYEiQN0X41PFOafl PDPpvwfR3leus1dP3IxtJUSsdPCDTep8Kl2v+zEd0W8tNFJK0VEj4hgzZOgTPt22 HK2H8dwkl1zIKG96U1ubldk9ohhdFaLPii1WNesVmbk4tPg4is5kuv9cwW0rumO6 kJDcrmhsjIDU7v8SK2WdneetAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT6dv18T7 DKoBSBY4ELnlKAEWc+QwHwYDVR0jBBgwFoAUQaDCRDWfAjXJpgsfcZpf1WeWYFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNUE0L0RCQzFGRDEwNjk5 NjExRUVCNEU3N0IzQ0M0RjlBRTAyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFEQ1JEV2ZBalhKcGdzZmNacGYxV2VXWUZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NUE0L0RCQzFGRDEwNjk5NjExRUVCNEU3N0IzQ0M0RjlBRTAyL1FhRENSRFdmQWpY SnBnc2ZjWnBmMVdlV1lGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZYAE1uR4o4wbI+mC0KTctEgqW7zxuo0v56xLqVxOaMqmoHuLprPaAe vkEiaw4bIXif8ICFB1bsSSKGkYw8xhPDiCU5gydCdMtKsZ4BzSvZu6eOkSFagAEy 9U8YmJUsUgBLtrJ7KZrlEy4xK4vv3uulOu9ZG9bq6d4RmrF2EnGhTHZSjSTaVX6X OiuoHqTis2lXpyYEs1kwsRWZklhGnHOhqQFB6F7S5PosncEEWgFT2K0zXEFmQzo4 Dc8K+KZm+mEE2anAlfgUM6Tw0II3mA33A8D/8U3o6iboQB3kroS7QPjB/NMBdOcW c02h5Mj/565/wk1i5LBRIYQCmfHHt9Y= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org