$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json) Hash identifier: bYXXzeC1PtUg3j6rXO15xvn3qOFo7tRBOIC/4z5Nekk= Subject key identifier: 2B:93:A8:81:97:4B:CF:E3:23:B2:44:34:B9:8B:F7:10:F1:52:1E:CB Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft Manifest number: 080F Signing time: Sat 18 May 2024 21:51:44 +0000 Manifest this update: Sat 18 May 2024 21:51:43 +0000 Manifest next update: Sat 25 May 2024 21:51:43 +0000 Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: aql2Z4wUbmXeUCy0slgESSe7yBq4HVFEJkljNRq55yM=) 2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: jroL0ZvUDyTize3CkMVvGz2K6eDlEEl11xRsB3XJVSM=) 3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: V9elMt4mtakfJ0YTHY94DFYKDGmWTd90QDlgS5t/Q2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Validity Not Before: May 18 21:51:43 2024 GMT Not After : May 25 21:51:43 2024 GMT Subject: CN=664922f0-b1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:a7:14:55:b5:13:89:44:87:19:0a:7e:4c: 3f:b5:b0:d1:59:8a:7c:38:f0:7d:92:df:ac:fc:5e: 6a:fd:9e:a4:5b:f0:cf:9b:72:06:f7:ea:ed:28:9c: 4f:91:49:2d:cf:54:d1:c7:99:2b:0f:89:f9:96:9b: b3:07:71:c2:ab:bf:7c:1a:94:9d:55:b8:df:e7:8d: df:52:e5:1b:74:9d:59:e0:98:e6:9f:18:c4:ad:fa: cd:71:cf:9e:72:bf:68:1a:cb:1b:fb:ce:28:25:34: 8e:72:a7:22:2f:1e:6c:62:13:6b:29:c7:0b:ac:2b: b7:d0:bf:f7:49:3b:06:e4:1b:c2:87:96:b9:ce:ed: 8a:37:f9:3f:5d:08:8c:82:d6:2b:c8:a0:90:b7:69: 9d:e4:82:2c:96:f6:92:17:3a:19:15:c9:cd:69:36: 41:c7:c8:37:42:f7:df:8e:c6:2d:7a:5a:70:52:63: 2b:cd:b1:be:f5:75:01:6e:0a:82:35:b4:e5:5f:6d: db:44:e0:e5:41:32:70:a7:dd:f4:a8:d6:1c:aa:65: a3:53:e2:e8:ae:55:95:8c:04:d7:99:0b:c9:2d:1c: 2c:0f:76:87:a1:11:28:0f:5e:b2:88:dd:ed:77:47: d6:b1:9c:54:65:51:77:5d:b6:b0:88:e2:40:fe:29: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:93:A8:81:97:4B:CF:E3:23:B2:44:34:B9:8B:F7:10:F1:52:1E:CB X509v3 Authority Key Identifier: keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:db:c5:da:f0:f4:bf:d6:fb:b6:56:0e:50:17:e2:9c:5e:a6: 3d:52:82:ee:a1:11:1d:45:a9:34:a2:b0:a8:97:31:90:24:b9: 4f:3b:00:9a:82:3e:43:95:fe:90:ac:22:df:8e:9f:85:b7:7d: 88:4d:53:d8:03:89:be:cb:1c:50:59:09:f0:aa:61:1b:25:31: 36:21:16:28:28:0d:3d:cb:1c:0e:46:23:f6:92:6f:9a:83:8a: 9f:6c:de:c8:a7:34:da:d6:70:89:43:32:65:4e:1b:56:75:c5: 50:de:73:30:58:70:b2:6f:e9:9c:35:e3:b5:9d:5f:ea:fb:65: 7d:bb:b7:df:f4:b0:b6:88:6b:81:c2:29:dd:b7:1c:1e:ab:e4: 29:72:7f:18:99:33:b6:a9:55:97:ae:2e:da:ba:b2:9e:54:e1: 43:70:64:5d:c2:59:36:08:cf:5c:a5:0c:28:79:0c:86:ef:c8: 69:0e:89:23:1d:70:44:f8:b6:9b:6b:63:af:6d:51:68:f8:f6: 22:43:47:0d:2c:0b:3c:68:1d:dc:2f:96:74:17:c9:78:f7:e8: bd:42:19:60:c0:0e:a7:1a:ce:f7:9b:5b:7f:f0:c3:c8:de:db: 6e:d4:6f:0b:2f:5e:59:5c:c8:66:b3:0f:a2:ca:46:1a:03:7d: 73:8d:29:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx OUFGQThGRDUwHhcNMjQwNTE4MjE1MTQzWhcNMjQwNTI1MjE1MTQzWjAYMRYwFAYD VQQDEw02NjQ5MjJmMC1iMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LinFFW1E4lEhxkKfkw/tbDRWYp8OPB9kt+s/F5q/Z6kW/DPm3IG9+rtKJxP kUktz1TRx5krD4n5lpuzB3HCq798GpSdVbjf543fUuUbdJ1Z4JjmnxjErfrNcc+e cr9oGssb+84oJTSOcqciLx5sYhNrKccLrCu30L/3STsG5BvCh5a5zu2KN/k/XQiM gtYryKCQt2md5IIslvaSFzoZFcnNaTZBx8g3QvffjsYtelpwUmMrzbG+9XUBbgqC NbTlX23bRODlQTJwp930qNYcqmWjU+LorlWVjATXmQvJLRwsD3aHoREoD16yiN3t d0fWsZxUZVF3XbawiOJA/in3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuTqIGX S8/jI7JENLmL9xDxUh7LMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw V1NrWGFhQm5BM01acjZqOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF28Xa8PS/1vu2Vg5QF+KcXqY9UoLuoREdRak0orColzGQJLlPOwCa gj5Dlf6QrCLfjp+Ft32ITVPYA4m+yxxQWQnwqmEbJTE2IRYoKA09yxwORiP2km+a g4qfbN7IpzTa1nCJQzJlThtWdcVQ3nMwWHCyb+mcNeO1nV/q+2V9u7ff9LC2iGuB windtxweq+Qpcn8YmTO2qVWXri7aurKeVOFDcGRdwlk2CM9cpQwoeQyG78hpDokj HXBE+Laba2OvbVFo+PYiQ0cNLAs8aB3cL5Z0F8l49+i9QhlgwA6nGs73m1t/8MPI 3ttu1G8LL15ZXMhmsw+iykYaA31zjSlT -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org