$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json) Hash identifier: wP+dJdkuFRVlFtGfQJueS9Ad6Tm51wqSECnQTEtJCf4= Subject key identifier: 5C:9D:EC:1B:F8:F4:23:1D:A7:62:ED:B0:F0:D9:8B:D4:EB:B3:8E:7D Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft Manifest number: 3B Signing time: Fri 17 May 2024 08:20:52 +0000 Manifest this update: Fri 17 May 2024 08:20:51 +0000 Manifest next update: Fri 24 May 2024 08:20:51 +0000 Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: wmvuxxFgNwT0U9vZosgFSY/Bbo2kPvX1MdFZLpuxmUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Validity Not Before: May 17 08:20:51 2024 GMT Not After : May 24 08:20:51 2024 GMT Subject: CN=66471363-ae24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:55:ce:ea:a0:9b:34:ae:4c:74:76:30:8a:36: 47:aa:3c:76:b5:c1:2d:c0:74:be:65:01:1e:38:ae: 34:d2:bb:8c:32:46:70:e2:41:be:a5:2e:8f:b8:b8: 92:c7:ea:f3:cd:e7:05:52:84:cb:93:7c:bb:3d:e3: dd:2c:1d:1c:a4:be:34:ec:f3:a7:d1:96:2f:9a:60: c6:15:9f:9e:62:45:e9:4d:2e:e1:f0:e6:db:c6:9e: 5e:20:40:0f:ba:14:58:f3:d2:d7:41:d6:4b:0a:b9: e8:c0:1c:fb:08:cd:a4:d1:ba:72:da:bc:ef:0b:a1: 9c:8b:bd:95:7a:b7:87:73:ff:2a:ec:d6:4a:18:a5: ee:04:d2:33:eb:30:c8:30:3c:03:64:e9:ae:f3:df: 0f:e8:50:b1:ca:c6:33:10:2d:56:62:26:e6:e8:07: 0c:6b:65:b3:27:c4:18:31:ce:a4:07:81:f9:b2:50: 1b:ee:09:2f:e9:41:10:2a:e2:52:2e:02:ad:be:19: 48:70:a6:d9:bc:07:48:62:c6:32:14:a1:29:32:29: 23:74:a1:8d:c7:79:55:03:bb:b1:d9:1c:86:3f:96: 5a:65:88:52:4c:0a:a1:78:18:99:d5:6b:59:21:0c: e8:53:6a:0b:c3:5d:aa:e1:d1:36:38:2c:35:07:de: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9D:EC:1B:F8:F4:23:1D:A7:62:ED:B0:F0:D9:8B:D4:EB:B3:8E:7D X509v3 Authority Key Identifier: keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7d:40:4b:f5:18:2d:c3:b9:31:29:0d:5f:ec:4d:b2:b5:6e: c3:71:b2:51:80:2b:40:c0:e8:7f:60:68:c1:a7:a0:e9:81:c1: 1c:4e:08:8e:bc:2c:c3:d3:41:b7:dc:1e:47:3d:d9:ea:3b:0c: 6a:32:0e:9b:55:e9:98:91:8f:be:b6:b4:90:c4:44:67:d9:82: ac:74:be:41:85:a0:6d:a7:19:1e:ac:da:41:d4:f8:e0:c2:93: ad:ba:d3:c7:79:32:2b:e6:46:4c:fe:2e:bb:da:63:99:af:30: fb:d6:f3:8f:ad:d2:5d:53:74:72:67:88:9a:51:aa:b6:10:57: 63:89:52:55:1d:c7:dc:75:d6:64:53:1f:7f:f7:d0:5a:e3:95: e3:c8:5e:29:2d:5c:8a:3d:f6:55:b2:bc:f7:14:86:a2:7c:08: 80:ee:bf:5f:47:28:16:f3:8b:96:a7:94:ef:ff:87:1e:a1:84: 51:06:8e:6e:a7:35:39:00:5b:e1:5e:d7:08:5a:e6:12:3e:b2: 21:d5:af:60:de:d5:6c:af:7f:e7:47:56:5e:48:a7:f4:8e:04: 9a:30:3d:95:e3:0d:b4:e9:75:ac:f7:bc:7b:94:18:a3:91:eb: 9d:c0:fa:70:96:fb:e6:15:5d:ac:c5:b0:d3:de:6c:16:61:8b: 8b:d9:05:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkYyNzExMC8GA1UEBRMoNDIwQzVDNDQ5NEY5RkZBQjdBODVBMzcwQkZDM0U0OTVD Q0ZBNEJBMzAeFw0yNDA1MTcwODIwNTFaFw0yNDA1MjQwODIwNTFaMBgxFjAUBgNV BAMTDTY2NDcxMzYzLWFlMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyVc7qoJs0rkx0djCKNkeqPHa1wS3AdL5lAR44rjTSu4wyRnDiQb6lLo+4uJLH 6vPN5wVShMuTfLs9490sHRykvjTs86fRli+aYMYVn55iRelNLuHw5tvGnl4gQA+6 FFjz0tdB1ksKuejAHPsIzaTRunLavO8LoZyLvZV6t4dz/yrs1koYpe4E0jPrMMgw PANk6a7z3w/oULHKxjMQLVZiJuboBwxrZbMnxBgxzqQHgfmyUBvuCS/pQRAq4lIu Aq2+GUhwptm8B0hixjIUoSkyKSN0oY3HeVUDu7HZHIY/llpliFJMCqF4GJnVa1kh DOhTagvDXarh0TY4LDUH3tfBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXJ3sG/j0 Ix2nYu2w8NmL1Ouzjn0wHwYDVR0jBBgwFoAUQgxcRJT5/6t6haNwv8Pklcz6S6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRjI3Lzg0MDk4RjVDQkI2 QzExRUVBNjgwQUU2REM0RjlBRTAyL1FneGNSSlQ1XzZ0NmhhTnd2OFBrbGN6NlM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWd4Y1JKVDVfNnQ2aGFOd3Y4UGtsY3o2UzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RjI3Lzg0MDk4RjVDQkI2QzExRUVBNjgwQUU2REM0RjlBRTAyL1FneGNSSlQ1XzZ0 NmhhTnd2OFBrbGN6NlM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZ9QEv1GC3DuTEpDV/sTbK1bsNxslGAK0DA6H9gaMGnoOmBwRxOCI68 LMPTQbfcHkc92eo7DGoyDptV6ZiRj762tJDERGfZgqx0vkGFoG2nGR6s2kHU+ODC k62608d5MivmRkz+LrvaY5mvMPvW84+t0l1TdHJniJpRqrYQV2OJUlUdx9x11mRT H3/30FrjlePIXiktXIo99lWyvPcUhqJ8CIDuv19HKBbzi5anlO//hx6hhFEGjm6n NTkAW+Fe1wha5hI+siHVr2De1Wyvf+dHVl5Ip/SOBJowPZXjDbTpdaz3vHuUGKOR 653A+nCW++YVXazFsNPebBZhi4vZBfo= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org