$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: hfuUcVXD1eGivn5Gge7PiVkq3Knf57nyCELANfp+0eM= Subject key identifier: A6:4B:16:50:07:84:D9:4E:1F:6C:52:CD:1D:57:DE:2F:42:55:FA:02 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 066E Signing time: Thu 02 May 2024 23:40:31 +0000 Manifest this update: Thu 02 May 2024 23:40:31 +0000 Manifest next update: Thu 09 May 2024 23:40:31 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: ZFqToWb8UtvC98mP5Un5etPh9B03Xr/E458vfLy4k0k=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: Lcu+kV+oiFNO8o5DUiWJ1nnjdCvMx3S981oDbealKG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: May 2 23:40:31 2024 GMT Not After : May 9 23:40:31 2024 GMT Subject: CN=6634246f-c47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:1b:6c:e4:15:37:af:03:49:1b:54:c2:fe: 87:19:ae:63:49:5c:a7:c7:a8:b0:90:7b:17:cd:77: 70:85:cb:a9:1d:38:7c:5a:3c:c2:cf:54:94:f7:c3: f5:5f:f0:09:2f:75:79:6b:95:5a:2d:b3:5c:38:a2: e5:2f:e1:19:47:1b:94:2f:17:fb:f6:3d:c4:e4:74: 86:f9:18:b8:08:46:74:93:ce:21:fd:3c:cc:97:ed: 9b:f5:b3:b7:e4:33:5d:bb:19:14:a3:5c:26:16:8b: 79:b4:57:4e:a4:b3:18:8f:99:75:6a:77:b0:59:22: e7:44:82:83:11:b6:ef:26:47:b4:be:3a:ed:08:43: 19:20:b9:60:4f:cd:31:78:d9:56:c6:ce:d1:77:19: 09:76:21:85:1f:2e:3b:f0:0d:67:27:00:98:6e:47: c8:4c:e6:93:67:fd:9a:e1:9e:08:2a:be:61:a1:2f: 66:bb:9a:a4:55:33:20:53:ea:02:22:d0:6e:a8:81: 2c:9c:cc:61:43:7d:28:17:82:10:c7:f9:aa:6e:02: 4a:bf:f0:53:42:1b:0c:35:ad:85:4e:c2:08:1d:35: b4:d2:49:d5:83:d9:0f:43:37:e4:50:1a:37:9b:67: 03:5e:18:84:0c:a9:d6:c9:06:c2:95:a0:2d:b3:c5: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:16:50:07:84:D9:4E:1F:6C:52:CD:1D:57:DE:2F:42:55:FA:02 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:05:cd:35:8b:87:16:3e:e6:62:88:ee:32:f9:f9:65:52:3d: 30:43:90:12:60:10:0d:e7:af:00:18:4b:d0:53:da:0c:b4:b3: 3d:e0:b4:02:90:4d:b3:d5:f5:b1:d5:97:63:d7:63:59:b5:13: bc:fe:32:65:31:0a:16:4b:b6:4f:1f:9f:c6:d7:91:73:d4:a1: ee:05:93:92:b6:0a:3d:56:d8:55:93:a4:4c:d2:78:78:dc:12: 72:c1:2d:1f:3d:e1:95:fa:52:02:77:fb:d8:b7:51:63:cd:2b: 4a:89:a5:fc:b3:08:37:32:68:5d:64:95:38:18:7f:aa:a1:88: 48:70:dd:1f:32:42:ef:85:cb:a4:9e:ba:fa:11:80:c6:18:1e: ed:de:87:67:e6:0a:29:7c:c6:29:ab:0e:3e:86:fc:3e:aa:bc: 25:e3:9f:e1:ca:82:e1:eb:68:33:83:00:a5:66:0a:e1:37:16: 04:35:89:bf:bc:e8:e8:99:4d:4f:70:0b:20:52:46:4a:21:54: 8f:e0:cf:c5:13:55:e7:00:e5:c0:88:11:d9:fd:0e:a8:61:67: 27:4d:44:ca:95:51:03:2b:09:79:da:90:14:dd:2f:e9:b5:9d: 11:53:77:a7:4f:88:b0:00:b7:83:72:19:76:02:85:e9:9f:de: 2b:84:eb:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjQwNTAyMjM0MDMxWhcNMjQwNTA5MjM0MDMxWjAYMRYwFAYD VQQDEw02NjM0MjQ2Zi1jNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAkbbOQVN68DSRtUwv6HGa5jSVynx6iwkHsXzXdwhcupHTh8WjzCz1SU98P1 X/AJL3V5a5VaLbNcOKLlL+EZRxuULxf79j3E5HSG+Ri4CEZ0k84h/TzMl+2b9bO3 5DNduxkUo1wmFot5tFdOpLMYj5l1anewWSLnRIKDEbbvJke0vjrtCEMZILlgT80x eNlWxs7RdxkJdiGFHy478A1nJwCYbkfITOaTZ/2a4Z4IKr5hoS9mu5qkVTMgU+oC ItBuqIEsnMxhQ30oF4IQx/mqbgJKv/BTQhsMNa2FTsIIHTW00knVg9kPQzfkUBo3 m2cDXhiEDKnWyQbClaAts8W61QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZLFlAH hNlOH2xSzR1X3i9CVfoCMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBABc01i4cWPuZiiO4y+fllUj0wQ5ASYBAN568AGEvQU9oMtLM94LQC kE2z1fWx1Zdj12NZtRO8/jJlMQoWS7ZPH5/G15Fz1KHuBZOStgo9VthVk6RM0nh4 3BJywS0fPeGV+lICd/vYt1FjzStKiaX8swg3MmhdZJU4GH+qoYhIcN0fMkLvhcuk nrr6EYDGGB7t3odn5gopfMYpqw4+hvw+qrwl45/hyoLh62gzgwClZgrhNxYENYm/ vOjomU1PcAsgUkZKIVSP4M/FE1XnAOXAiBHZ/Q6oYWcnTUTKlVEDKwl52pAU3S/p tZ0RU3enT4iwALeDchl2AoXpn94rhOv0 -----END CERTIFICATE-----Generated at Fri May 3 00:28:36 2024 by rpki-client on console-fra.rpki-client.org