$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: Lp+4dBInBw9eyAOjC1DETTzg7ieCDvKYpRP/P1awhfM= Subject key identifier: 2D:49:E1:4E:4C:EA:04:54:31:A1:64:16:75:C7:FB:B5:C5:1C:AC:7C Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 08E9 Signing time: Fri 26 Apr 2024 21:20:44 +0000 Manifest this update: Fri 26 Apr 2024 21:20:44 +0000 Manifest next update: Fri 03 May 2024 21:20:44 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: zG1vVx8cQrmEyUG3sVV1wlwLAK4zP/ih5FJqJAsCtKQ=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: Zy1GynMb02lEFndk3/8ZEzW8mxwp5i2kpGslOdi1Vh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: Apr 26 21:20:44 2024 GMT Not After : May 3 21:20:44 2024 GMT Subject: CN=662c1aac-07e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:53:f4:28:4e:f4:07:6c:5a:21:9f:68:21: 58:30:72:9e:19:a7:8c:64:cc:2e:d7:e9:8e:5e:6a: 44:56:55:4b:06:25:cb:94:b0:8e:d5:27:2e:5e:05: b1:a9:a7:55:5e:be:7e:ff:26:49:e7:ae:d9:36:c7: be:d9:54:70:e6:89:83:b5:ad:61:09:58:6c:30:46: d4:ee:e6:56:c6:f5:48:46:f4:e4:4b:31:4f:eb:08: 6d:59:b1:91:94:53:94:af:a0:e8:67:4b:e0:3c:0d: 37:4d:30:3a:4f:68:6c:7f:b0:5e:7b:e9:fa:a1:f0: be:d8:06:99:9c:62:39:2b:5b:66:f9:97:f3:a7:de: 0a:2b:5d:68:3f:ad:4d:d3:73:c7:f4:11:11:80:4e: 31:77:fc:64:ee:3e:8d:97:d3:98:0e:7a:1b:79:7b: 27:0d:94:7a:68:75:b3:10:be:ce:3c:e5:a3:38:43: 63:a0:24:f8:93:8b:c0:9a:09:be:9e:13:ab:8c:0a: 9e:43:03:81:6c:1c:a3:7f:21:68:e6:a0:f3:15:89: d8:dd:f3:5a:39:09:56:23:91:4e:83:90:6d:3a:9d: fc:d3:2a:40:4a:26:82:90:98:42:62:22:4b:8a:c4: cc:23:6f:3b:8b:b4:00:f3:39:a2:a9:41:ca:9d:a4: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:49:E1:4E:4C:EA:04:54:31:A1:64:16:75:C7:FB:B5:C5:1C:AC:7C X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:d8:fc:37:67:9c:69:1a:b5:5d:00:a7:c2:c2:d6:44:3b: aa:7c:8b:38:b3:af:2a:a5:9c:eb:53:14:60:ec:fc:81:24:cc: 18:f0:b7:05:eb:a2:57:68:56:32:70:9d:ed:a0:d8:d4:6d:a7: 59:1c:cd:e1:1c:9a:2e:6b:e2:bd:62:9e:65:c5:88:53:46:cb: a7:38:b1:d3:f8:38:5a:b9:20:47:07:d7:43:a0:b7:9e:d9:4b: e8:2e:5b:42:94:62:c1:43:d9:46:c3:2a:11:86:d7:2d:bd:f1: 2b:84:1f:37:7c:05:65:98:52:34:a0:23:d3:73:9a:8a:12:1e: 4e:56:ff:14:44:28:97:44:98:1a:36:cf:53:c9:3f:b8:c5:48: 1a:a3:72:7c:55:c3:b6:cd:c3:61:7d:8e:51:9a:36:77:6d:65: 80:d2:44:cd:e1:15:f7:4c:4e:ca:9b:82:4c:25:11:8a:6a:a0: 0f:ad:70:7f:fa:57:77:4f:95:71:40:20:fd:68:a3:b5:c1:54: d8:91:d3:d1:6f:e3:59:e7:ca:bd:f0:53:df:df:0e:49:7b:7c: 88:e0:1b:97:f4:a0:6e:4e:c7:b0:0e:c5:6a:b0:6e:2c:e2:5b: 04:43:6c:7c:75:8c:8e:1c:23:55:95:90:93:f4:8a:c6:f7:1e: f7:e9:53:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjQwNDI2MjEyMDQ0WhcNMjQwNTAzMjEyMDQ0WjAYMRYwFAYD VQQDEw02NjJjMWFhYy0wN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqVT9ChO9AdsWiGfaCFYMHKeGaeMZMwu1+mOXmpEVlVLBiXLlLCO1ScuXgWx qadVXr5+/yZJ567ZNse+2VRw5omDta1hCVhsMEbU7uZWxvVIRvTkSzFP6whtWbGR lFOUr6DoZ0vgPA03TTA6T2hsf7Bee+n6ofC+2AaZnGI5K1tm+Zfzp94KK11oP61N 03PH9BERgE4xd/xk7j6Nl9OYDnobeXsnDZR6aHWzEL7OPOWjOENjoCT4k4vAmgm+ nhOrjAqeQwOBbByjfyFo5qDzFYnY3fNaOQlWI5FOg5BtOp380ypASiaCkJhCYiJL isTMI287i7QA8zmiqUHKnaSmpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1J4U5M 6gRUMaFkFnXH+7XFHKx8MB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXnNj8N2ecaRq1XQCnwsLWRDuqfIs4s68qpZzrUxRg7PyBJMwY8LcF 66JXaFYycJ3toNjUbadZHM3hHJoua+K9Yp5lxYhTRsunOLHT+DhauSBHB9dDoLee 2UvoLltClGLBQ9lGwyoRhtctvfErhB83fAVlmFI0oCPTc5qKEh5OVv8URCiXRJga Ns9TyT+4xUgao3J8VcO2zcNhfY5RmjZ3bWWA0kTN4RX3TE7Km4JMJRGKaqAPrXB/ +ld3T5VxQCD9aKO1wVTYkdPRb+NZ58q98FPf3w5Je3yI4BuX9KBuTsewDsVqsG4s 4lsEQ2x8dYyOHCNVlZCT9IrG9x736VMm -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org