$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json) Hash identifier: 5QA39HHr1ujqfvj1sFmbhNSgTFr0cNxVvSS4GaRN+CE= Subject key identifier: AC:83:92:98:85:FF:F7:BE:08:32:E4:5D:EA:8C:AC:81:E4:6C:E3:A6 Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft Manifest number: 096C Signing time: Sat 18 May 2024 21:00:19 +0000 Manifest this update: Sat 18 May 2024 21:00:19 +0000 Manifest next update: Sat 25 May 2024 21:00:19 +0000 Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: eeqqFNQGrRhmnUHqzLQmHXV+YlVXTslkzLrHoksm3c4=) 2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: nJS/y/XuThPiPVOQl0kW5TPZfhPfqDNIwVRLES/rfFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: May 18 21:00:19 2024 GMT Not After : May 25 21:00:19 2024 GMT Subject: CN=664916e3-5b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:61:73:aa:f2:71:46:0f:f2:95:ac:28:c8: 8a:5e:a1:89:f9:b8:4f:3f:4c:96:c7:4c:6d:83:15: 1c:9d:79:bf:07:76:ff:5c:43:9f:7a:69:f2:5b:3e: f7:a6:45:5b:da:b5:23:b5:d2:8f:3e:e8:be:7c:7f: dc:ef:2a:f7:cf:27:bb:92:c9:ea:82:66:17:8c:e2: c5:c3:e0:0b:01:14:5b:a0:e8:65:be:21:ef:ec:4e: 31:3c:ee:d9:6b:55:5b:b5:c9:47:cf:01:bd:59:d5: 21:05:86:c3:3e:e4:3c:c6:aa:52:52:7b:ee:60:2b: 34:82:6a:a8:09:d3:c1:d8:84:82:f9:76:14:25:f4: 72:fc:02:67:4d:f5:45:df:22:ac:c2:1e:49:37:f4: 5b:dc:f8:95:47:4a:3d:84:40:ae:3a:5f:50:e5:5d: 12:a6:ff:cf:56:10:39:9a:2a:f5:20:a2:88:da:ac: 3d:02:b9:14:79:e0:14:eb:0f:8a:34:a7:60:f8:40: ce:58:d9:a2:63:99:28:aa:3f:ad:5e:6a:ec:ca:07: fd:b7:d1:19:86:fe:84:bd:7d:c1:ca:f8:d6:61:62: 2a:fb:78:11:84:a1:f5:2b:88:df:80:38:29:5d:c7: 76:99:95:da:3d:5d:48:3e:8d:c3:05:66:c5:c1:59: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:83:92:98:85:FF:F7:BE:08:32:E4:5D:EA:8C:AC:81:E4:6C:E3:A6 X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a0:98:56:b6:db:aa:ee:a4:52:36:25:4d:3a:4d:b8:ba:d0: f9:4d:74:fb:e5:75:94:31:18:87:56:4f:19:23:7e:62:13:fc: fb:0d:5d:99:90:1c:03:99:61:88:e1:66:0f:ec:17:94:d8:64: ea:61:73:e0:da:e3:86:54:64:f1:be:0f:e0:70:be:a1:e1:1e: a2:ac:19:3c:60:fa:c4:33:62:ba:03:b2:7a:7b:9f:ca:e4:b5: 57:8c:97:35:f5:57:af:ea:1b:8b:10:ae:7c:4e:67:57:70:27: ed:d6:1c:62:4e:e5:66:85:07:75:8d:e8:e9:eb:62:3f:68:0b: 20:5a:6b:db:e2:66:5b:d6:ee:83:83:9e:2b:5c:aa:eb:44:d2: 48:f1:c1:8d:4b:d8:ac:d1:1f:a0:91:95:c9:b7:0c:c8:f6:59: c8:aa:be:20:51:b2:46:a9:c7:1e:1f:f5:43:aa:86:c5:7d:48: 7d:86:04:6c:48:7b:fe:74:19:5e:1b:68:01:68:f8:9b:91:36: ef:2a:47:a8:e7:be:78:be:07:06:a5:7d:3e:d6:15:79:ab:51: 1b:3e:b2:7c:79:23:df:c0:9d:81:70:f7:04:9d:cb:36:a9:99: 88:f2:78:51:30:0a:62:bc:7a:0a:38:a7:f5:b8:4c:c9:98:90: 4c:26:d9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjQwNTE4MjEwMDE5WhcNMjQwNTI1MjEwMDE5WjAYMRYwFAYD VQQDEw02NjQ5MTZlMy01YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXZhc6rycUYP8pWsKMiKXqGJ+bhPP0yWx0xtgxUcnXm/B3b/XEOfemnyWz73 pkVb2rUjtdKPPui+fH/c7yr3zye7ksnqgmYXjOLFw+ALARRboOhlviHv7E4xPO7Z a1VbtclHzwG9WdUhBYbDPuQ8xqpSUnvuYCs0gmqoCdPB2ISC+XYUJfRy/AJnTfVF 3yKswh5JN/Rb3PiVR0o9hECuOl9Q5V0Spv/PVhA5mir1IKKI2qw9ArkUeeAU6w+K NKdg+EDOWNmiY5koqj+tXmrsygf9t9EZhv6EvX3ByvjWYWIq+3gRhKH1K4jfgDgp Xcd2mZXaPV1IPo3DBWbFwVnNdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyDkpiF //e+CDLkXeqMrIHkbOOmMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJENy9GOTMyMTkxMjZDQjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlq dHlpRE8tQ3RaaU41YnNpaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBroJhWttuq7qRSNiVNOk24utD5TXT75XWUMRiHVk8ZI35iE/z7DV2Z kBwDmWGI4WYP7BeU2GTqYXPg2uOGVGTxvg/gcL6h4R6irBk8YPrEM2K6A7J6e5/K 5LVXjJc19Vev6huLEK58TmdXcCft1hxiTuVmhQd1jejp62I/aAsgWmvb4mZb1u6D g54rXKrrRNJI8cGNS9is0R+gkZXJtwzI9lnIqr4gUbJGqcceH/VDqobFfUh9hgRs SHv+dBleG2gBaPibkTbvKkeo5754vgcGpX0+1hV5q1EbPrJ8eSPfwJ2BcPcEncs2 qZmI8nhRMApivHoKOKf1uEzJmJBMJtl2 -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org