$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: F2S6QtRB41mXwGpLYLOzED4wjz+SkWAzIJCeFDTLNAk= Subject key identifier: 48:09:20:BB:8A:C1:21:21:81:D0:56:F0:6D:CB:2B:46:AE:62:E6:2E Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 050E Signing time: Sun 19 May 2024 01:09:03 +0000 Manifest this update: Sun 19 May 2024 01:09:02 +0000 Manifest next update: Sun 26 May 2024 01:09:02 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: Cf9lFHhf8ylu9vZY5mkT8N3mJXbgp/tKZ15Ry6e61Ow=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: mYP163XzHdEMNgiwcSiPfRwS00U9oTzAfnu92cu9hyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: May 19 01:09:02 2024 GMT Not After : May 26 01:09:02 2024 GMT Subject: CN=6649512e-3f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:8d:c6:f6:fe:f0:57:36:1d:c0:d6:17:40: b8:60:d6:60:cc:54:c3:7d:e0:c9:84:12:0f:99:05: 3a:10:89:1c:08:13:aa:c3:ba:88:4d:51:90:bc:52: 7c:f2:c7:df:c5:62:7a:32:04:88:57:94:56:30:01: 6a:3a:fd:c2:50:e6:5c:cb:20:39:8e:db:13:83:9a: 9b:8a:1d:bb:a5:99:df:3d:f1:48:ca:96:d5:72:3c: 4c:58:c4:43:7f:49:03:b9:ef:c8:8a:12:25:c8:15: af:b7:dc:6a:10:38:0e:92:8b:dd:24:03:f7:fa:9b: ff:5d:fe:8b:79:a8:ac:37:89:26:34:53:e5:af:20: 7e:11:61:ea:3c:75:ef:17:51:d0:f2:fa:35:c1:a4: 10:fc:e1:19:ac:fa:93:b2:78:bd:3d:7b:8b:61:26: 02:ec:c2:99:31:c3:51:3e:5e:8e:cc:25:58:37:15: 27:53:53:f4:6a:26:bb:05:0c:8c:3c:66:30:c6:68: c6:40:ef:1f:31:6c:58:f3:72:f4:63:1a:56:b9:25: 82:a3:ef:4e:8c:69:86:14:8a:07:01:6a:b4:6d:6d: 1f:bd:ab:19:70:12:8c:21:c4:6d:0c:86:1b:69:10: 88:b1:52:5b:cd:72:4e:41:e3:9d:a5:df:1b:a1:34: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:20:BB:8A:C1:21:21:81:D0:56:F0:6D:CB:2B:46:AE:62:E6:2E X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:76:88:23:e1:3f:e1:ef:80:0f:d8:a7:e7:37:ad:48:0a:b5: 45:c1:f5:f3:96:c3:b0:a3:58:da:db:7d:15:4e:5d:ef:cd:ac: 2a:75:02:f4:59:14:ff:0f:76:b4:cc:9b:01:19:60:fc:f1:a2: 21:0e:78:e5:d3:ef:76:9d:5c:16:93:25:7a:f2:4b:e7:b6:dc: 07:4f:dd:a2:7d:5b:d4:60:38:9d:e0:ca:fc:f9:4f:88:ba:60: d4:e6:45:08:cc:63:0e:32:bc:8e:66:74:ad:4c:97:3d:89:af: 21:db:d4:19:14:dc:1a:42:7d:16:2a:22:25:ec:ab:3e:30:0e: dd:cc:75:88:63:53:cc:5e:26:38:90:9a:17:dd:bc:34:e8:0d: 52:f4:78:05:42:92:35:bf:5c:bf:bc:3a:f3:c0:19:c0:a2:0a: 9e:87:e3:9a:d6:5b:16:4c:f2:c6:ae:3c:ae:ae:13:eb:0d:0c: 7b:2b:cc:04:e2:a0:c4:a3:03:a1:07:48:0c:2e:0b:0b:97:04: 60:e3:9f:ac:bb:8b:14:12:a9:2c:3f:8b:95:1b:27:a4:46:36: b6:4a:2e:e1:d1:4f:58:5b:68:1a:c7:aa:35:2a:91:50:bb:af: eb:e4:51:a4:49:0c:70:7b:8e:c6:3c:0c:d7:ca:81:55:ee:ac: 03:57:aa:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjQwNTE5MDEwOTAyWhcNMjQwNTI2MDEwOTAyWjAYMRYwFAYD VQQDEw02NjQ5NTEyZS0zZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WWNxvb+8Fc2HcDWF0C4YNZgzFTDfeDJhBIPmQU6EIkcCBOqw7qITVGQvFJ8 8sffxWJ6MgSIV5RWMAFqOv3CUOZcyyA5jtsTg5qbih27pZnfPfFIypbVcjxMWMRD f0kDue/IihIlyBWvt9xqEDgOkovdJAP3+pv/Xf6LeaisN4kmNFPlryB+EWHqPHXv F1HQ8vo1waQQ/OEZrPqTsni9PXuLYSYC7MKZMcNRPl6OzCVYNxUnU1P0aia7BQyM PGYwxmjGQO8fMWxY83L0YxpWuSWCo+9OjGmGFIoHAWq0bW0fvasZcBKMIcRtDIYb aRCIsVJbzXJOQeOdpd8boTSCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgJILuK wSEhgdBW8G3LK0auYuYuMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhdogj4T/h74AP2KfnN61ICrVFwfXzlsOwo1ja230VTl3vzawqdQL0 WRT/D3a0zJsBGWD88aIhDnjl0+92nVwWkyV68kvnttwHT92ifVvUYDid4Mr8+U+I umDU5kUIzGMOMryOZnStTJc9ia8h29QZFNwaQn0WKiIl7Ks+MA7dzHWIY1PMXiY4 kJoX3bw06A1S9HgFQpI1v1y/vDrzwBnAogqeh+Oa1lsWTPLGrjyurhPrDQx7K8wE 4qDEowOhB0gMLgsLlwRg45+su4sUEqksP4uVGyekRja2Si7h0U9YW2gax6o1KpFQ u6/r5FGkSQxwe47GPAzXyoFV7qwDV6r8 -----END CERTIFICATE-----Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org