$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: TUqTMNGXPlSJ/wtCOpLrElu6HYp7neYH2TR5oDDw8TI= Subject key identifier: E1:10:6E:AA:A6:B9:98:97:98:F0:D0:0C:FC:E4:66:CE:C8:7B:06:C2 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 065C Signing time: Sat 18 May 2024 20:49:31 +0000 Manifest this update: Sat 18 May 2024 20:49:31 +0000 Manifest next update: Sat 25 May 2024 20:49:31 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: WqgmIqtYSC+5D3PQ5s6XLsPA9DxbWi/hJ7EvSIPEgnM=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: wuKDqTU6tn7/5jHE2t79EVQ5kpnRehQRwOUq9/41axU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: May 18 20:49:31 2024 GMT Not After : May 25 20:49:31 2024 GMT Subject: CN=6649145b-9767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:b2:ce:fc:c2:5c:a4:0e:63:70:74:dd:95: a0:d3:b6:2f:0d:9f:d4:68:09:51:28:a6:0d:0d:49: 08:82:c5:61:16:06:7f:32:b7:5e:00:c8:29:6d:bc: 75:db:2d:fc:8a:6b:a2:d5:27:3e:2d:07:a4:a6:42: 2d:77:9e:eb:80:a2:d7:4c:ed:5e:46:03:4f:9a:7c: b3:43:60:39:65:c3:fc:9b:d4:5c:29:58:46:2c:b8: bb:3f:d2:cf:e1:f8:7c:4c:38:43:31:78:64:7a:57: e0:5c:64:7e:93:4b:a8:8f:fa:45:c7:8f:e1:30:2a: e9:eb:9f:64:88:a5:34:45:7e:6e:39:68:42:7f:c2: 15:e9:ad:5b:1c:cc:c7:45:4a:59:56:28:c4:20:89: 84:3c:58:ea:79:ae:ba:c1:9d:87:40:6f:c2:21:b5: 9d:64:f6:0c:ef:1f:bc:cb:2c:c2:23:a8:7b:cd:c2: 74:dc:ac:e5:b2:75:6e:67:32:89:11:56:c9:64:30: f8:9d:48:97:5c:d9:3f:cc:46:db:ea:26:45:41:71: b6:5f:ad:79:9a:d3:a8:7e:06:f4:a4:be:f3:cb:2a: bc:1f:b4:40:bd:24:80:af:d6:ff:47:98:47:e2:14: 8a:52:c4:06:a4:88:41:3d:fe:1e:e4:12:81:f1:fc: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:6E:AA:A6:B9:98:97:98:F0:D0:0C:FC:E4:66:CE:C8:7B:06:C2 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:83:d5:f3:ba:7b:10:e4:db:ab:a8:3d:9c:a0:8e:3a:fd: f9:f1:d8:e7:36:60:33:cd:86:b0:72:64:61:ba:27:ea:74:0c: 71:cf:26:11:f3:ee:47:7c:7d:19:9c:bb:4b:62:9f:78:50:00: 18:29:39:d1:96:c3:20:9a:31:0d:9c:b8:25:ed:5b:56:38:77: 17:48:e9:87:50:9f:72:f5:b6:cb:77:18:56:66:ff:5a:e4:7d: 93:6e:7c:7d:48:e7:65:d7:b7:c6:7a:09:f5:5c:ae:57:e5:43: 6a:40:88:75:48:d7:4d:f0:e6:59:ef:8c:ef:1e:2f:8d:3e:fa: c0:27:11:6a:6a:2f:55:33:8c:87:aa:c5:11:f2:49:80:c8:5a: 4b:07:12:75:ab:85:d4:5c:bc:7a:17:f8:87:73:46:ac:c3:bc: b5:29:5b:c9:34:65:cd:6f:19:96:29:95:de:fc:5b:4e:6b:2b: 59:c9:a0:e7:f2:6b:2e:1b:6b:84:52:e2:a4:0e:06:c1:1e:11: 27:2d:41:c7:be:ba:7b:4e:83:4f:39:a1:29:f1:2d:02:8e:78: fb:35:76:5d:e3:0b:4f:d0:7c:96:c2:02:c3:ca:e5:43:eb:da: 24:66:cb:47:1a:a5:8b:7f:ce:18:ec:97:a8:81:41:18:ba:52: 7a:49:d2:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjQwNTE4MjA0OTMxWhcNMjQwNTI1MjA0OTMxWjAYMRYwFAYD VQQDEw02NjQ5MTQ1Yi05NzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GCyzvzCXKQOY3B03ZWg07YvDZ/UaAlRKKYNDUkIgsVhFgZ/MrdeAMgpbbx1 2y38imui1Sc+LQekpkItd57rgKLXTO1eRgNPmnyzQ2A5ZcP8m9RcKVhGLLi7P9LP 4fh8TDhDMXhkelfgXGR+k0uoj/pFx4/hMCrp659kiKU0RX5uOWhCf8IV6a1bHMzH RUpZVijEIImEPFjqea66wZ2HQG/CIbWdZPYM7x+8yyzCI6h7zcJ03KzlsnVuZzKJ EVbJZDD4nUiXXNk/zEbb6iZFQXG2X615mtOofgb0pL7zyyq8H7RAvSSAr9b/R5hH 4hSKUsQGpIhBPf4e5BKB8fyHCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEQbqqm uZiXmPDQDPzkZs7IewbCMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfi4PV87p7EOTbq6g9nKCOOv358djnNmAzzYawcmRhuifqdAxxzyYR 8+5HfH0ZnLtLYp94UAAYKTnRlsMgmjENnLgl7VtWOHcXSOmHUJ9y9bbLdxhWZv9a 5H2Tbnx9SOdl17fGegn1XK5X5UNqQIh1SNdN8OZZ74zvHi+NPvrAJxFqai9VM4yH qsUR8kmAyFpLBxJ1q4XUXLx6F/iHc0asw7y1KVvJNGXNbxmWKZXe/FtOaytZyaDn 8msuG2uEUuKkDgbBHhEnLUHHvrp7ToNPOaEp8S0Cjnj7NXZd4wtP0HyWwgLDyuVD 69okZstHGqWLf84Y7JeogUEYulJ6SdLr -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org