$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: TWSwth7SoKpffZyulEtbcZd249A728mxNtIFynbeBHo= Subject key identifier: CE:45:8C:6E:8C:A7:15:CA:3E:E8:0F:0D:0D:81:CC:18:4C:9A:ED:0E Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 0523 Signing time: Tue 07 May 2024 01:02:40 +0000 Manifest this update: Tue 07 May 2024 01:02:39 +0000 Manifest next update: Tue 14 May 2024 01:02:39 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: bmHs9E8pv1BCi9lq8NWsZ58Nt0hRNpRCDaljLP3/l9M=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: Yh+8D/3vqYU74CRhoju4o2CyoopC1VR+hs5+3He8ecI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: May 7 01:02:39 2024 GMT Not After : May 14 01:02:39 2024 GMT Subject: CN=66397db0-da6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:51:a1:65:25:b0:ff:aa:0f:0f:41:f9:8a: 84:78:b3:63:1a:e2:d0:aa:e5:e2:96:1b:c1:25:74: a7:69:5f:56:70:86:9c:74:25:bb:03:d4:70:64:17: 7e:a6:fc:da:d1:57:08:11:ba:f0:9d:26:cf:57:b0: 77:07:f9:4a:f1:8b:1f:e5:d6:96:3c:57:ea:79:92: 70:8f:4b:7e:74:6c:3c:1e:13:64:5a:c4:62:5b:11: d7:8f:72:46:3c:7d:63:69:72:56:2d:fc:4d:eb:7a: 8e:4e:14:83:9e:6b:53:b9:a7:44:d4:6f:61:1d:fb: 63:4f:ec:c1:a2:b3:61:5b:8f:92:00:38:91:5e:9c: 39:b8:e6:1d:2f:bc:b5:e1:e1:fe:02:3f:d6:e3:5c: 09:c3:40:f6:95:52:94:9b:35:2e:9c:0a:a5:8f:b4: fe:27:dd:9f:46:ef:dc:61:0a:a5:7e:90:51:7f:e5: 06:76:ed:42:fe:6f:c6:7b:ca:2c:61:48:23:62:3f: a0:88:87:59:fa:c5:0d:32:72:68:a3:f6:1a:59:21: 56:94:00:f0:90:d3:ba:78:b1:46:8a:4e:e3:dd:c8: 37:d8:2b:4b:3b:b2:ef:60:22:10:b3:41:78:b1:94: 09:71:b3:2c:61:e6:fb:65:0e:b5:cd:8f:48:e5:3a: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:8C:6E:8C:A7:15:CA:3E:E8:0F:0D:0D:81:CC:18:4C:9A:ED:0E X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:34:e0:dc:75:9c:ea:9d:c7:fa:72:7e:0d:ca:4e:0e:b0:14: c0:b7:12:85:b6:5a:f2:b8:3f:35:6c:7b:f9:75:85:9a:a3:5e: 14:b8:45:6c:d5:c6:db:20:4b:c5:df:5c:5a:82:bc:73:d6:51: 98:a5:f4:91:be:06:79:8e:5c:80:f2:e9:83:5d:87:2b:06:d7: 45:75:b1:5f:e1:53:7a:e4:0f:a8:1f:e1:5a:80:0a:54:10:7e: d4:f6:7a:b5:13:f3:28:14:59:b7:41:76:78:5b:22:47:8b:e1: 44:59:b4:46:8c:31:6e:67:c3:4d:4f:e3:9b:94:82:5d:90:ff: 17:e2:ee:58:e8:86:ab:33:98:4e:f3:29:02:b0:2b:bf:1e:e5: a5:80:05:80:3a:3b:03:52:4a:91:5e:7c:50:cf:fe:7d:a8:db: ad:6e:81:5f:f5:12:29:27:20:fc:8d:f0:31:d0:49:bc:19:7a: 6c:7c:0b:09:f5:eb:84:31:43:66:c9:02:8d:58:07:fd:68:c9: 82:04:c0:1f:e2:44:d1:5f:39:6b:43:70:11:1e:0e:c3:45:7b: 53:f4:87:a4:b9:af:15:e1:18:c2:14:e9:dc:2d:83:74:13:d0: 70:cc:da:5e:2c:de:a9:06:81:32:fe:63:e7:a6:09:82:7b:9b: cb:c0:e4:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjQwNTA3MDEwMjM5WhcNMjQwNTE0MDEwMjM5WjAYMRYwFAYD VQQDEw02NjM5N2RiMC1kYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1VRoWUlsP+qDw9B+YqEeLNjGuLQquXilhvBJXSnaV9WcIacdCW7A9RwZBd+ pvza0VcIEbrwnSbPV7B3B/lK8Ysf5daWPFfqeZJwj0t+dGw8HhNkWsRiWxHXj3JG PH1jaXJWLfxN63qOThSDnmtTuadE1G9hHftjT+zBorNhW4+SADiRXpw5uOYdL7y1 4eH+Aj/W41wJw0D2lVKUmzUunAqlj7T+J92fRu/cYQqlfpBRf+UGdu1C/m/Ge8os YUgjYj+giIdZ+sUNMnJoo/YaWSFWlADwkNO6eLFGik7j3cg32CtLO7LvYCIQs0F4 sZQJcbMsYeb7ZQ61zY9I5ToVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5FjG6M pxXKPugPDQ2BzBhMmu0OMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdNODcdZzqncf6cn4Nyk4OsBTAtxKFtlryuD81bHv5dYWao14UuEVs 1cbbIEvF31xagrxz1lGYpfSRvgZ5jlyA8umDXYcrBtdFdbFf4VN65A+oH+FagApU EH7U9nq1E/MoFFm3QXZ4WyJHi+FEWbRGjDFuZ8NNT+OblIJdkP8X4u5Y6IarM5hO 8ykCsCu/HuWlgAWAOjsDUkqRXnxQz/59qNutboFf9RIpJyD8jfAx0Em8GXpsfAsJ 9euEMUNmyQKNWAf9aMmCBMAf4kTRXzlrQ3ARHg7DRXtT9Iekua8V4RjCFOncLYN0 E9BwzNpeLN6pBoEy/mPnpgmCe5vLwOTk -----END CERTIFICATE-----Generated at Tue May 7 01:58:12 2024 by rpki-client on console-fra.rpki-client.org