$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: Nvsgbfg5E3VaqvlJVUUP87kW4lnwAqiMeqYO1PQmrN4= Subject key identifier: F2:25:7A:B5:B9:8E:6A:95:37:31:FA:16:42:72:5E:62:56:76:89:4C Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 05F0 Signing time: Sat 01 Jun 2024 00:53:03 +0000 Manifest this update: Sat 01 Jun 2024 00:53:02 +0000 Manifest next update: Sat 08 Jun 2024 00:53:02 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: LUhWeRfo2siGa/SUo5dT4VKkO8KB0wYekxV4YJrHvsw=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: EO9TW61oX5tn54S0K2Lsn1in2OKfp6cspW8QUVHScGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Validity Not Before: Jun 1 00:53:02 2024 GMT Not After : Jun 8 00:53:02 2024 GMT Subject: CN=665a70ef-bfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:c8:be:00:ea:ee:b3:00:3b:8f:e6:7f:0d: 4f:4b:2c:e3:a9:9a:5b:67:c6:0f:2d:80:6a:5c:f4: b3:de:b8:70:bd:78:40:4a:1d:89:48:e7:5f:c3:85: 0c:87:d9:76:2f:f1:34:72:0b:7e:4f:7a:5b:cd:41: 66:9b:2a:b7:a3:41:48:ee:d1:b5:a7:cb:da:67:0f: 0c:7f:72:e9:ce:74:17:7a:d5:c4:c9:71:2a:53:5d: b5:04:d7:9c:6c:f9:8b:66:71:1a:58:52:c0:4b:9b: b9:2c:dd:5a:23:e9:3e:d5:80:72:97:3a:86:19:70: f4:08:18:69:73:b5:f1:ea:99:dd:50:8c:90:98:1e: 63:d5:7b:89:6f:da:29:29:61:4b:a0:7c:f8:3c:15: 8d:10:69:de:35:30:3d:8b:4b:ac:a6:f1:fc:0c:9a: 18:fa:04:f5:09:75:ae:79:3a:e8:44:15:c5:a9:46: 82:10:e5:4b:f0:46:cf:ce:a4:cc:9a:14:aa:9c:1a: 16:56:b2:6c:c8:76:af:2a:f5:c7:01:91:cb:57:e6: 92:54:4f:fb:cf:06:c9:59:89:0c:36:84:e8:05:55: 77:f6:6d:68:1d:cc:81:06:bf:f8:7b:ef:8a:55:10: 55:05:83:9f:ae:e0:99:c8:f6:40:bd:59:a6:5b:16: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:7A:B5:B9:8E:6A:95:37:31:FA:16:42:72:5E:62:56:76:89:4C X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:51:ad:10:7e:3c:12:25:a2:2a:d7:7a:4d:2f:de:c4:8d: 18:a5:4e:71:1e:d5:14:0a:cd:34:cc:d0:08:16:3c:fc:22:12: 14:60:d7:0f:db:50:ff:c6:ae:c8:46:ca:01:b1:fa:71:bc:dc: c4:fa:66:39:32:3f:1d:75:36:2e:2c:af:e3:80:dc:e4:35:c4: 4b:20:54:d6:78:1d:eb:80:94:a4:52:cb:1c:6b:a8:b7:0c:11: 6e:21:4d:4a:4b:7e:01:61:77:88:03:85:7a:57:2f:61:05:43: f2:28:89:47:07:8e:39:d1:bc:fe:fc:88:a2:f8:80:e1:c1:38: 51:d1:36:05:ac:1d:e3:1c:76:32:7c:34:09:6c:43:18:fc:90: 1d:0e:9f:8b:32:52:0e:aa:df:51:30:df:71:2b:22:8d:f5:50: fd:81:34:ef:20:39:21:07:72:0c:60:1b:a2:ad:12:28:8f:b8: 1e:f6:de:2c:79:34:9e:96:6a:d1:bf:84:58:12:3e:f6:71:29: 2d:58:f2:af:a6:ef:f6:a1:b7:24:5f:81:3a:b3:46:26:94:3a: 6c:fc:51:51:80:51:46:c9:b8:7e:8c:f5:63:c8:e5:c0:51:25: f3:16:eb:c3:3b:6f:14:39:99:6a:51:d2:84:1c:7d:f5:50:22: 5f:83:d2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjQwNjAxMDA1MzAyWhcNMjQwNjA4MDA1MzAyWjAYMRYwFAYD VQQDEw02NjVhNzBlZi1iZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2zIvgDq7rMAO4/mfw1PSyzjqZpbZ8YPLYBqXPSz3rhwvXhASh2JSOdfw4UM h9l2L/E0cgt+T3pbzUFmmyq3o0FI7tG1p8vaZw8Mf3LpznQXetXEyXEqU121BNec bPmLZnEaWFLAS5u5LN1aI+k+1YBylzqGGXD0CBhpc7Xx6pndUIyQmB5j1XuJb9op KWFLoHz4PBWNEGneNTA9i0uspvH8DJoY+gT1CXWueTroRBXFqUaCEOVL8EbPzqTM mhSqnBoWVrJsyHavKvXHAZHLV+aSVE/7zwbJWYkMNoToBVV39m1oHcyBBr/4e++K VRBVBYOfruCZyPZAvVmmWxYJtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIlerW5 jmqVNzH6FkJyXmJWdolMMB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBr1GtEH48EiWiKtd6TS/exI0YpU5xHtUUCs00zNAIFjz8IhIUYNcP 21D/xq7IRsoBsfpxvNzE+mY5Mj8ddTYuLK/jgNzkNcRLIFTWeB3rgJSkUssca6i3 DBFuIU1KS34BYXeIA4V6Vy9hBUPyKIlHB4450bz+/Iii+IDhwThR0TYFrB3jHHYy fDQJbEMY/JAdDp+LMlIOqt9RMN9xKyKN9VD9gTTvIDkhB3IMYBuirRIoj7ge9t4s eTSelmrRv4RYEj72cSktWPKvpu/2obckX4E6s0YmlDps/FFRgFFGybh+jPVjyOXA USXzFuvDO28UOZlqUdKEHH31UCJfg9J2 -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:47 2024 by rpki-client on console-fra.rpki-client.org