$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: icWoKTHXrDLdS75G6UFPnpkKsk60aQVd4XbYXcwZFFg= Subject key identifier: 19:04:0B:6F:D6:65:88:9E:78:45:D1:AB:50:BE:21:1E:93:DA:F1:6D Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: DE Signing time: Fri 03 May 2024 06:09:34 +0000 Manifest this update: Fri 03 May 2024 06:09:33 +0000 Manifest next update: Fri 10 May 2024 06:09:33 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: 4gnOjn8W+wSwiQb0ushMZqTGm8Kdlnw9XrZgMEi2D+Y=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: 0VPDxh48iCXEk/o4NbQMRoYmQk7skfmDkCtQswxooDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: May 3 06:09:33 2024 GMT Not After : May 10 06:09:33 2024 GMT Subject: CN=66347f9d-b63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:4f:12:d1:ff:ee:ad:28:3b:21:88:9b:8f: e9:86:ad:75:ab:4b:fa:0f:b4:6a:b2:d4:e5:16:4e: ac:07:c4:30:6a:04:39:7c:7a:58:06:4a:8e:3b:38: cb:39:1c:b6:ff:c4:0d:88:46:de:2a:8f:5c:b7:f5: b6:ac:ed:0f:8c:8b:ff:b9:6f:68:1f:11:d4:fc:bc: aa:46:75:9a:12:24:8f:2d:73:7c:5a:1b:9e:e2:eb: 09:3a:17:1b:2d:01:05:fe:54:2b:5b:29:7e:b0:b5: 52:da:e3:28:48:c2:28:82:e8:2f:8f:5e:b9:84:89: 57:35:ad:66:19:46:0c:76:98:29:0a:b6:87:3b:31: b8:9a:49:49:3b:96:27:98:42:97:b7:bb:97:25:f8: 04:98:bf:e1:09:5f:e7:95:2b:eb:cb:ad:d5:5a:55: 2a:2c:76:a9:a2:fa:50:14:4f:9f:da:eb:d5:96:ce: 03:94:15:59:e6:c0:73:27:3d:44:06:5f:36:c6:59: 67:8b:01:08:c6:3e:f9:8a:aa:8d:33:f2:54:19:61: 92:a3:7f:d1:6f:85:0f:1d:27:46:d8:c9:c8:04:34: 97:ee:dc:7c:b7:7b:9f:c7:b2:3b:3d:85:55:fc:46: 59:f4:aa:f6:8b:1f:0f:f1:04:ee:cd:24:4d:5b:74: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:0B:6F:D6:65:88:9E:78:45:D1:AB:50:BE:21:1E:93:DA:F1:6D X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:19:13:5c:ba:ee:e2:d1:bd:bb:6a:6e:43:55:e1:f4:99:56: 5e:df:79:bb:a8:a1:79:2e:3b:48:38:c4:79:1d:9e:03:81:d8: f6:b4:08:e4:2e:dd:ec:7d:18:85:ed:3e:df:b4:6b:03:1b:65: 10:3b:c6:65:61:00:a0:b5:c5:79:ad:50:90:64:66:ce:9c:94: 91:31:4f:2a:03:49:7a:65:df:f5:1a:50:6f:60:24:e5:fb:c7: 62:c2:10:29:24:ec:fc:75:4a:1b:a8:9c:d6:f8:26:7d:6b:75: 7b:ef:dd:62:7b:b1:20:84:cd:78:a0:2e:6f:bb:0e:1f:93:43: 46:59:fd:f9:55:df:72:5b:04:fa:d4:51:79:25:47:c7:3f:e9: 09:1d:36:50:e3:b7:fa:9f:2f:5a:11:50:2c:ba:ce:be:d9:5a: d0:09:5d:72:bb:58:27:cf:cb:ed:d7:fd:fa:a0:ce:2f:fa:42: 15:34:e7:24:1a:c1:39:63:b6:cc:07:37:81:6f:5e:58:89:d5: 22:ff:1e:04:72:2b:22:74:99:6c:e5:41:9a:4f:10:0f:68:3a: 26:ab:31:ae:0c:be:30:bf:34:d7:66:39:5c:0f:91:8d:a3:f7: 13:fc:48:45:7c:f5:60:e7:c8:7a:39:23:bf:ff:f5:31:51:b1: 66:1d:8b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjQwNTAzMDYwOTMzWhcNMjQwNTEwMDYwOTMzWjAYMRYwFAYD VQQDEw02NjM0N2Y5ZC1iNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1JPEtH/7q0oOyGIm4/phq11q0v6D7RqstTlFk6sB8QwagQ5fHpYBkqOOzjL ORy2/8QNiEbeKo9ct/W2rO0PjIv/uW9oHxHU/LyqRnWaEiSPLXN8Whue4usJOhcb LQEF/lQrWyl+sLVS2uMoSMIogugvj165hIlXNa1mGUYMdpgpCraHOzG4mklJO5Yn mEKXt7uXJfgEmL/hCV/nlSvry63VWlUqLHapovpQFE+f2uvVls4DlBVZ5sBzJz1E Bl82xllniwEIxj75iqqNM/JUGWGSo3/Rb4UPHSdG2MnIBDSX7tx8t3ufx7I7PYVV /EZZ9Kr2ix8P8QTuzSRNW3TUEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkEC2/W ZYieeEXRq1C+IR6T2vFtMB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgGRNcuu7i0b27am5DVeH0mVZe33m7qKF5LjtIOMR5HZ4Dgdj2tAjk Lt3sfRiF7T7ftGsDG2UQO8ZlYQCgtcV5rVCQZGbOnJSRMU8qA0l6Zd/1GlBvYCTl +8diwhApJOz8dUobqJzW+CZ9a3V7791ie7EghM14oC5vuw4fk0NGWf35Vd9yWwT6 1FF5JUfHP+kJHTZQ47f6ny9aEVAsus6+2VrQCV1yu1gnz8vt1/36oM4v+kIVNOck GsE5Y7bMBzeBb15YidUi/x4EcisidJls5UGaTxAPaDomqzGuDL4wvzTXZjlcD5GN o/cT/EhFfPVg58h6OSO///UxUbFmHYu6 -----END CERTIFICATE-----Generated at Fri May 3 09:08:45 2024 by rpki-client on console-fra.rpki-client.org