$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: Mmq/UPe0sZyeZ8P2VpD9JZzrIEviCmhWIue2rEOkD/E= Subject key identifier: C3:5F:30:BD:9B:15:FB:24:BE:53:60:5C:6B:FE:FC:84:EC:01:DA:03 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0163 Signing time: Sun 19 May 2024 04:53:54 +0000 Manifest this update: Sun 19 May 2024 04:53:53 +0000 Manifest next update: Sun 26 May 2024 04:53:53 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: E2deZmTUSlzGOvsCK/BN4ty1fXHtbupG+pjxOtLx9PM=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: yPrP3KfHG7wLOXeRQBj72uPHDwFnUsuzGYQzTqa6CNw=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: B7a0cc4M3TqVL00njQ+jIzQgPHM3dCTJPPwbvbD6C8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: May 19 04:53:53 2024 GMT Not After : May 26 04:53:53 2024 GMT Subject: CN=664985e1-5ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:ef:aa:73:47:ce:ac:57:12:0d:16:82:3b: ce:6b:c2:54:45:f9:04:de:91:da:ce:f6:dc:72:15: 34:ee:58:2a:04:38:b6:06:f5:ea:67:9e:46:92:33: 2b:f4:f2:8e:af:49:f7:a2:e0:06:7e:5b:6b:22:a1: 35:1c:9b:72:74:d6:5a:3b:59:dc:d1:e0:7d:ab:d2: 78:ae:36:c8:8f:7e:56:f1:16:ba:82:4d:bc:3c:61: a9:9c:75:ae:fe:84:81:04:ed:ff:34:1c:00:c2:63: df:ce:0f:da:bd:ee:60:2f:89:38:dc:7d:72:a9:17: 44:09:8e:fa:01:55:86:f6:cb:42:e1:e1:44:f7:7a: 0b:bb:2a:ad:2c:53:26:a4:5c:24:9d:48:d1:a3:bb: c5:ae:ef:35:e0:eb:c4:8b:5f:e1:67:63:2a:4d:2b: 2b:25:46:88:7e:7f:e9:85:84:00:e9:12:86:55:fd: 12:8c:be:62:db:f3:40:a6:e7:da:e6:69:21:0c:7c: 04:36:45:93:10:e2:9a:ab:41:8d:3a:3e:00:64:a3: d3:1a:66:d4:66:c3:fa:29:68:8a:74:ae:e6:e4:40: 33:4c:4d:8d:df:0c:cb:be:09:aa:f6:9d:4a:41:18: 85:8a:2f:03:db:f4:c9:84:2a:da:b6:27:b3:c3:66: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5F:30:BD:9B:15:FB:24:BE:53:60:5C:6B:FE:FC:84:EC:01:DA:03 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c3:86:ed:1d:00:17:58:3d:25:2b:28:e2:bb:5a:c1:07:72: 89:12:3b:6a:d3:96:49:b2:18:d9:25:05:d3:6c:13:2d:a3:c4: ce:be:47:24:4e:e0:84:40:bb:d1:87:eb:d1:55:cc:6d:c2:44: 3f:f6:f7:8c:fb:c5:a5:c5:3f:7f:31:5c:b9:08:2b:70:6d:86: 57:3b:e6:50:a2:6a:9f:70:5c:49:61:0f:8c:27:4a:2a:f3:ef: 8e:03:c6:fd:88:f3:6f:df:c2:90:ea:78:b8:8b:86:25:ce:e7: 3f:d0:b4:8f:33:d2:d2:03:15:8c:44:3c:7d:1a:6e:b8:57:9d: 9f:d1:07:b2:45:23:7a:cc:8b:fc:4a:3f:3c:12:55:e8:0a:a9: 9a:9a:d8:b5:20:b8:ea:67:a0:8e:cd:54:23:ae:b0:78:30:1e: 23:a4:b9:02:4d:fd:53:f9:65:f1:71:24:b0:0d:d6:83:d4:89: 22:fe:64:7e:0e:76:36:32:a1:b5:e6:70:33:e5:15:f3:8b:81: 9e:15:80:b6:27:0f:97:ab:60:74:6b:3f:4f:d5:a4:8a:0e:ec: 60:fd:8a:97:12:f9:b6:7c:97:00:26:8f:2a:04:7d:eb:f5:08: c3:7c:ba:79:78:aa:4d:7f:60:c4:44:e9:c4:75:0e:74:23:5b: fc:e7:01:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjQwNTE5MDQ1MzUzWhcNMjQwNTI2MDQ1MzUzWjAYMRYwFAYD VQQDEw02NjQ5ODVlMS01YmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c/vqnNHzqxXEg0WgjvOa8JURfkE3pHazvbcchU07lgqBDi2BvXqZ55GkjMr 9PKOr0n3ouAGfltrIqE1HJtydNZaO1nc0eB9q9J4rjbIj35W8Ra6gk28PGGpnHWu /oSBBO3/NBwAwmPfzg/ave5gL4k43H1yqRdECY76AVWG9stC4eFE93oLuyqtLFMm pFwknUjRo7vFru814OvEi1/hZ2MqTSsrJUaIfn/phYQA6RKGVf0SjL5i2/NApufa 5mkhDHwENkWTEOKaq0GNOj4AZKPTGmbUZsP6KWiKdK7m5EAzTE2N3wzLvgmq9p1K QRiFii8D2/TJhCratiezw2aYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNfML2b FfskvlNgXGv+/ITsAdoDMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRw4btHQAXWD0lKyjiu1rBB3KJEjtq05ZJshjZJQXTbBMto8TOvkck TuCEQLvRh+vRVcxtwkQ/9veM+8WlxT9/MVy5CCtwbYZXO+ZQomqfcFxJYQ+MJ0oq 8++OA8b9iPNv38KQ6ni4i4Ylzuc/0LSPM9LSAxWMRDx9Gm64V52f0QeyRSN6zIv8 Sj88ElXoCqmamti1ILjqZ6COzVQjrrB4MB4jpLkCTf1T+WXxcSSwDdaD1Iki/mR+ DnY2MqG15nAz5RXzi4GeFYC2Jw+Xq2B0az9P1aSKDuxg/YqXEvm2fJcAJo8qBH3r 9QjDfLp5eKpNf2DEROnEdQ50I1v85wHd -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org