$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: D6Sp8ZqCoqfeMZAe4p69h2ZafpV7+H/qw1u1RyBbo3o= Subject key identifier: B9:8C:AE:3F:B6:43:0F:6C:A6:26:97:10:3A:1F:9C:C9:92:50:1D:03 Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 06D3 Signing time: Sat 18 May 2024 22:58:54 +0000 Manifest this update: Sat 18 May 2024 22:58:53 +0000 Manifest next update: Sat 25 May 2024 22:58:53 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: nyU0jVpwi+ENvq/3Zga0lSEU8mUE4oYjCHPELfBWqpU=) 2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: a5Oqhzfh+WaBH67r7bDw9PUnq0IPn3kK+b8Kc7vybP4=) 3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: wo4sZk/2tDxvhuf03EBqImJmU7Tr8UCXxl6x1i7v+YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: May 18 22:58:53 2024 GMT Not After : May 25 22:58:53 2024 GMT Subject: CN=664932ad-2f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:c5:4e:18:81:12:0d:62:32:33:b2:1f:ca: 02:98:69:66:7e:71:32:88:39:18:b8:f3:e8:e1:b8: 85:84:29:4f:d5:f6:e7:72:7c:e9:c0:78:ec:9e:0f: 99:bd:d7:40:84:49:c9:6c:67:69:9e:5a:9f:70:fa: db:a5:3c:ce:84:0b:79:83:21:a9:ac:56:3b:6c:19: f2:a2:cc:bb:ec:c3:45:6c:9d:3c:e6:53:79:8d:6b: a2:5c:93:a4:c1:6e:e3:75:c9:72:88:61:fa:e9:b4: 0f:a2:5e:40:e2:8f:01:7a:33:7a:fc:08:44:16:20: 7a:a2:be:c1:c0:1f:b6:2a:bf:4f:41:7b:06:76:60: 02:fe:d2:be:06:a9:5d:1d:b4:dd:f9:b6:56:1c:83: 97:cc:6a:04:76:ee:2c:ab:51:22:ba:2b:ac:8b:ec: 39:16:1a:44:e9:59:94:46:cc:60:e0:8b:69:24:9a: 2d:af:db:40:5f:b4:a1:01:95:3f:f1:f5:e5:35:17: f7:ab:75:43:f8:da:2d:90:be:e1:b1:7e:af:ce:4d: 81:26:ca:c7:31:78:29:84:d3:da:04:a6:d0:2c:57: 39:a5:93:f1:83:af:84:85:27:96:6d:2c:4b:63:a2: ba:6f:18:51:59:4c:f2:a0:2d:f8:4c:5f:5f:5e:4b: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:AE:3F:B6:43:0F:6C:A6:26:97:10:3A:1F:9C:C9:92:50:1D:03 X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d5:e0:d6:29:88:b3:ae:e1:61:65:74:ed:ba:b9:d1:9f:4e: de:69:a9:84:0c:ab:51:5d:21:c7:a8:40:be:42:e7:74:29:35: a1:59:b6:c4:08:3b:18:54:bd:43:d3:be:1b:c4:6b:92:97:ef: 7d:3f:d6:be:10:7b:7e:1d:04:57:28:92:80:45:f1:9a:94:ab: fa:0a:a2:e5:66:1c:5a:f1:ff:74:71:55:d0:2f:3c:fe:7b:87: aa:29:46:75:d6:53:9f:ef:da:4d:16:74:f5:65:d8:5f:b5:cb: 3b:38:0a:7d:b8:af:70:7f:59:1a:0b:25:3a:a0:2c:52:71:fe: 44:5b:88:9a:48:49:7c:fd:fd:af:f7:6c:f0:8f:06:f2:34:e0: 0e:fd:f2:a5:c9:1d:ee:6b:98:da:18:33:78:46:ce:00:48:1c: 27:f5:cf:08:59:8b:c7:47:3f:75:46:08:8c:fe:1c:c6:02:34: 48:b7:3a:71:8a:54:c4:e0:a7:28:a1:4e:bd:8c:23:8f:fc:51: fd:fe:a7:62:03:97:f1:7c:74:78:16:37:8e:d6:85:b9:aa:3d: 9b:17:56:fd:a0:6e:d8:9f:13:cf:70:18:5c:20:e1:cc:01:1e: aa:c3:6e:f3:bd:f9:52:72:33:70:14:12:5d:79:cb:2d:41:01: 65:64:52:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjQwNTE4MjI1ODUzWhcNMjQwNTI1MjI1ODUzWjAYMRYwFAYD VQQDEw02NjQ5MzJhZC0yZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7LFThiBEg1iMjOyH8oCmGlmfnEyiDkYuPPo4biFhClP1fbncnzpwHjsng+Z vddAhEnJbGdpnlqfcPrbpTzOhAt5gyGprFY7bBnyosy77MNFbJ085lN5jWuiXJOk wW7jdclyiGH66bQPol5A4o8BejN6/AhEFiB6or7BwB+2Kr9PQXsGdmAC/tK+Bqld HbTd+bZWHIOXzGoEdu4sq1Eiuiusi+w5FhpE6VmURsxg4ItpJJotr9tAX7ShAZU/ 8fXlNRf3q3VD+NotkL7hsX6vzk2BJsrHMXgphNPaBKbQLFc5pZPxg6+EhSeWbSxL Y6K6bxhRWUzyoC34TF9fXktB0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmMrj+2 Qw9spiaXEDofnMmSUB0DMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1eDWKYizruFhZXTturnRn07eaamEDKtRXSHHqEC+Qud0KTWhWbbE CDsYVL1D074bxGuSl+99P9a+EHt+HQRXKJKARfGalKv6CqLlZhxa8f90cVXQLzz+ e4eqKUZ11lOf79pNFnT1Zdhftcs7OAp9uK9wf1kaCyU6oCxScf5EW4iaSEl8/f2v 92zwjwbyNOAO/fKlyR3ua5jaGDN4Rs4ASBwn9c8IWYvHRz91RgiM/hzGAjRItzpx ilTE4KcooU69jCOP/FH9/qdiA5fxfHR4FjeO1oW5qj2bF1b9oG7YnxPPcBhcIOHM AR6qw27zvflScjNwFBJdecstQQFlZFJP -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org