$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: 41FjIvYzvU/etcU2SJ9tbOBIzdv1n/g2h/lxeBe2m9U= Subject key identifier: 82:1D:2A:A7:41:1E:05:44:77:43:9F:6A:54:71:20:2E:B9:81:C9:C6 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 10D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 10CD Signing time: Thu 02 May 2024 17:56:56 +0000 Manifest this update: Thu 02 May 2024 17:56:55 +0000 Manifest next update: Thu 09 May 2024 17:56:55 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: 6wL78JXmvpkRprNrmiiVeHLkYi3i2dEkw9eFA7yG8U4=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: I2zgpdt6UDGrD97rg+2dAIvR4q5Nta9FbrvBpFUiSa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4307 (0x10d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: May 2 17:56:55 2024 GMT Not After : May 9 17:56:55 2024 GMT Subject: CN=6633d3e7-730d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:21:13:e3:dc:91:82:09:53:43:da:30:03: b3:cc:6b:fd:96:ae:2c:44:d3:d1:83:ba:df:a3:da: ab:a7:99:b8:63:9d:29:0c:90:d0:ca:47:f0:df:80: 87:65:0b:0f:5d:e1:85:fd:9a:7d:c2:7d:ca:06:57: 91:35:c4:f4:c9:ba:12:31:6b:1b:c3:2d:e6:9a:48: 34:12:4c:8c:6c:86:ed:98:59:1e:e7:3b:a1:33:e8: d5:c5:1a:ae:ed:cd:65:09:50:07:8a:29:ea:4a:03: cd:25:89:92:9f:e6:1b:7f:f3:82:55:f8:d4:6c:49: 26:9a:00:50:87:4a:7f:b8:f8:a7:05:35:7f:d1:b2: 39:78:d6:11:36:61:ae:e5:ba:61:d0:da:bb:17:aa: 62:6a:db:a3:13:c1:32:3b:29:97:8c:62:10:66:45: cc:a3:22:88:44:c6:2a:de:d2:5d:d9:4a:88:ff:73: bd:41:4c:57:f2:45:50:bb:af:2b:ec:60:ea:5d:d0: af:73:57:47:f1:7c:1e:4d:b2:c4:6a:28:aa:e4:85: 31:de:59:7c:dd:eb:76:18:41:70:9c:5a:cb:13:bb: 2d:18:d8:b2:f9:85:c8:98:61:ab:6c:f3:1f:89:12: 26:09:4a:bc:cc:36:7c:c2:01:e3:30:51:7e:0b:2a: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1D:2A:A7:41:1E:05:44:77:43:9F:6A:54:71:20:2E:B9:81:C9:C6 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:64:c1:71:ba:c9:c0:c0:0c:45:77:96:fc:62:8f:17:27:2a: e3:2d:a0:6b:57:40:5b:3c:9e:1b:f3:c4:ba:f4:96:a3:f9:95: 9b:6b:92:27:60:4f:7a:68:a2:b6:29:79:ff:09:87:2d:df:d9: c4:92:77:c1:7a:5d:a3:2d:e2:de:79:25:13:85:a0:91:39:bc: 4d:a5:95:08:02:f4:8c:27:60:c5:5f:04:61:0c:03:1e:94:6a: 6a:f9:b0:d4:9a:9e:06:7c:88:bb:96:0a:7e:fd:c5:d3:a6:c0: f6:03:db:18:5d:bc:ff:7c:1f:2a:35:6b:98:f0:91:36:5b:84: 22:61:4b:d9:4d:f0:ea:89:55:38:db:ce:36:c4:73:b5:b4:f3: bb:b0:5c:45:f4:be:28:8c:b9:bc:ef:93:ca:bc:3b:87:77:31: 0c:26:19:d5:30:de:f2:9e:9c:33:9e:75:e6:5c:51:71:41:58: 79:f1:d5:14:eb:01:ce:43:f4:e5:56:5e:cf:aa:c2:52:7a:3f: 54:bf:ee:02:6b:08:04:64:10:58:4d:1b:92:69:ae:31:b2:b0: da:98:e1:c5:f4:c7:cd:88:3b:ac:73:43:7d:9e:ae:1c:65:01: 89:2d:1c:e2:bc:9b:4e:d1:03:bc:e3:b9:5a:d0:6c:23:0b:2f: 0f:ce:24:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjQwNTAyMTc1NjU1WhcNMjQwNTA5MTc1NjU1WjAYMRYwFAYD VQQDEw02NjMzZDNlNy03MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGUhE+PckYIJU0PaMAOzzGv9lq4sRNPRg7rfo9qrp5m4Y50pDJDQykfw34CH ZQsPXeGF/Zp9wn3KBleRNcT0yboSMWsbwy3mmkg0EkyMbIbtmFke5zuhM+jVxRqu 7c1lCVAHiinqSgPNJYmSn+Ybf/OCVfjUbEkmmgBQh0p/uPinBTV/0bI5eNYRNmGu 5bph0Nq7F6piatujE8EyOymXjGIQZkXMoyKIRMYq3tJd2UqI/3O9QUxX8kVQu68r 7GDqXdCvc1dH8XweTbLEaiiq5IUx3ll83et2GEFwnFrLE7stGNiy+YXImGGrbPMf iRImCUq8zDZ8wgHjMFF+CyotHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIdKqdB HgVEd0OfalRxIC65gcnGMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZMFxusnAwAxFd5b8Yo8XJyrjLaBrV0BbPJ4b88S69Jaj+ZWba5In YE96aKK2KXn/CYct39nEknfBel2jLeLeeSUThaCRObxNpZUIAvSMJ2DFXwRhDAMe lGpq+bDUmp4GfIi7lgp+/cXTpsD2A9sYXbz/fB8qNWuY8JE2W4QiYUvZTfDqiVU4 2842xHO1tPO7sFxF9L4ojLm875PKvDuHdzEMJhnVMN7ynpwznnXmXFFxQVh58dUU 6wHOQ/TlVl7PqsJSej9Uv+4CawgEZBBYTRuSaa4xsrDamOHF9MfNiDusc0N9nq4c ZQGJLRzivJtO0QO847la0GwjCy8PziTN -----END CERTIFICATE-----Generated at Thu May 2 20:50:21 2024 by rpki-client on console-fra.rpki-client.org