$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: D/VsANbp3onHZVByzjGT12ZnGeTHvgkoeQ/Xgetl0as= Subject key identifier: 2C:FF:4A:55:9C:D5:5A:DD:EC:93:03:92:B6:54:B5:13:39:FA:20:D9 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: DE Signing time: Sat 18 May 2024 16:17:59 +0000 Manifest this update: Sat 18 May 2024 16:17:58 +0000 Manifest next update: Sat 25 May 2024 16:17:58 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: NJPyLvDgg+2qUEAWkI0xuaNW6HvIWVp/6taBd5DVYQk=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: wIUEQO5NPMHqkpPnW+KqLQoOshirDHVVKlc8ye6IXNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: May 18 16:17:58 2024 GMT Not After : May 25 16:17:58 2024 GMT Subject: CN=6648d4b6-f8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:9b:da:fa:5f:3f:f4:ef:99:ca:40:18:d0: 5c:ca:ac:30:96:d6:73:2b:94:de:47:48:dc:97:f0: fb:75:1b:55:78:1a:bd:81:4d:d4:2b:f3:1c:3d:12: c6:ec:78:c9:a0:d1:3b:ea:f5:51:d7:f2:36:7d:c4: 6b:08:00:14:0f:74:f0:c3:b0:ce:61:f0:cc:b0:e1: 2e:22:15:8b:ff:fa:1e:21:45:60:cc:98:7a:ad:25: 11:01:1c:46:2a:d7:26:19:b6:ab:3f:bb:ad:1c:11: 82:77:32:36:52:de:6e:e8:07:1c:9e:4e:0f:93:2a: 08:d2:dc:8a:a1:22:18:82:2e:d9:4a:8f:d1:f7:3b: da:be:e2:fa:c9:3d:e1:06:6b:c7:f9:fb:61:58:91: b3:23:aa:e4:22:75:13:fe:89:11:8a:4d:1e:45:ff: a0:61:27:6b:17:cc:ff:15:03:7c:a3:69:73:15:db: 31:4e:da:9f:4d:d0:cb:64:35:96:5e:07:ba:42:f5: c3:2f:6d:1b:f4:29:65:56:8f:8a:3f:c8:5a:87:92: 8b:d2:1e:6f:37:ce:ac:ec:1c:5c:dd:2f:20:c9:1c: c6:28:1e:09:61:b5:4d:9e:14:16:66:fb:88:5b:59: 86:24:c4:13:c3:4e:a7:53:77:e7:65:ca:87:a0:65: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FF:4A:55:9C:D5:5A:DD:EC:93:03:92:B6:54:B5:13:39:FA:20:D9 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:72:9f:8a:26:45:79:40:bb:21:87:62:90:46:1b:bc:94:5b: 7c:37:be:a8:53:5c:7e:f7:bd:6d:2a:91:56:64:a8:6c:67:ea: c4:56:e7:df:88:3e:07:98:c5:fc:d8:ed:3c:0c:5a:15:d2:6d: 05:80:01:ac:8b:11:09:16:ea:ef:be:d1:53:38:25:16:00:36: d4:b1:b7:4e:78:cc:52:31:31:52:e2:fb:ad:a8:83:ea:50:e5: 6c:9a:26:f5:f6:4f:75:b2:a2:b5:25:7d:40:b1:a0:12:68:e7: 95:58:07:e0:b0:c4:af:4f:30:07:a0:ff:e7:5f:5b:34:8f:62: 3c:1a:cb:18:28:00:ba:61:f6:60:06:a2:e5:52:b2:f8:b8:40: 31:c0:7a:21:fb:3a:47:5f:b4:44:2d:2c:bf:6e:c8:1e:98:e8: aa:16:9b:b9:0f:ec:ae:66:3c:48:83:0c:bd:f7:46:2e:4f:e1: 28:f2:c6:19:5d:92:07:f9:37:6d:5b:da:89:9c:30:2b:31:1d: 11:14:bb:b1:3f:49:4a:0e:4c:42:f3:57:a7:d3:2a:9a:fb:b8: e6:90:e1:82:91:29:dd:d0:86:ac:b8:ab:ef:3c:70:07:c2:a9: 6c:68:c6:89:40:ac:64:1b:8a:23:34:8f:53:ae:06:f5:54:cb: 48:b9:c5:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjQwNTE4MTYxNzU4WhcNMjQwNTI1MTYxNzU4WjAYMRYwFAYD VQQDEw02NjQ4ZDRiNi1mOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqECb2vpfP/TvmcpAGNBcyqwwltZzK5TeR0jcl/D7dRtVeBq9gU3UK/McPRLG 7HjJoNE76vVR1/I2fcRrCAAUD3Tww7DOYfDMsOEuIhWL//oeIUVgzJh6rSURARxG KtcmGbarP7utHBGCdzI2Ut5u6Accnk4PkyoI0tyKoSIYgi7ZSo/R9zvavuL6yT3h BmvH+fthWJGzI6rkInUT/okRik0eRf+gYSdrF8z/FQN8o2lzFdsxTtqfTdDLZDWW Xge6QvXDL20b9CllVo+KP8hah5KL0h5vN86s7Bxc3S8gyRzGKB4JYbVNnhQWZvuI W1mGJMQTw06nU3fnZcqHoGUZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCz/SlWc 1Vrd7JMDkrZUtRM5+iDZMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAocp+KJkV5QLshh2KQRhu8lFt8N76oU1x+971tKpFWZKhsZ+rEVuff iD4HmMX82O08DFoV0m0FgAGsixEJFurvvtFTOCUWADbUsbdOeMxSMTFS4vutqIPq UOVsmib19k91sqK1JX1AsaASaOeVWAfgsMSvTzAHoP/nX1s0j2I8GssYKAC6YfZg BqLlUrL4uEAxwHoh+zpHX7RELSy/bsgemOiqFpu5D+yuZjxIgwy990YuT+Eo8sYZ XZIH+TdtW9qJnDArMR0RFLuxP0lKDkxC81en0yqa+7jmkOGCkSnd0IasuKvvPHAH wqlsaMaJQKxkG4ojNI9Trgb1VMtIucVP -----END CERTIFICATE-----Generated at Sat May 18 16:57:55 2024 by rpki-client on console-fra.rpki-client.org