$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: 4SE8JgyhUn/0sholBLkcQn4zDzbNrCIvNM3lacYK0HY= Subject key identifier: 64:0A:20:AD:D7:D1:41:FA:95:C8:3E:6A:61:ED:65:B2:75:C1:1F:FF Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 80 Signing time: Wed 15 May 2024 07:17:43 +0000 Manifest this update: Wed 15 May 2024 07:17:43 +0000 Manifest next update: Wed 22 May 2024 07:17:42 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: FbYC7uhGdDeWX9ROhZMEaj4edLUqpZKemYhhehnMxZE=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: Q8NxuOuKJ+veMKJky9ZNwKElU9d3kEf3ESfKXVOaTxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: May 15 07:17:43 2024 GMT Not After : May 22 07:17:42 2024 GMT Subject: CN=66446197-4994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:e1:72:f0:7d:6c:9b:ce:82:a7:17:51:16: 58:5a:e0:1f:0b:17:91:5b:75:44:96:df:63:50:f0: 7b:92:49:8f:9c:17:77:29:41:9f:74:04:58:45:20: 3b:5c:ca:69:0e:64:cb:5f:37:c8:18:4e:98:fd:ce: 54:6d:f4:ef:f0:95:46:7b:ab:b8:67:69:d9:bb:1f: ab:86:fe:b0:77:b9:7b:8f:22:27:09:70:de:b5:a9: fb:76:15:68:e5:79:26:e1:71:a4:fd:7a:75:81:b1: 1c:f2:d4:c5:3f:34:ea:2d:cd:9f:50:9c:a6:bf:bc: 33:0e:3d:f1:e4:a4:66:80:3d:e8:31:22:77:b1:0d: 29:e7:e2:96:dc:6a:31:de:72:05:43:3a:67:7f:a4: a6:ed:c4:ed:03:68:71:5c:2f:04:f6:d8:8c:c1:c1: a3:e6:64:f5:17:96:03:a5:5b:b7:2f:0a:eb:6b:33: ea:5d:6e:08:b8:13:e1:ea:ca:c5:dc:9d:7d:f3:01: eb:62:ec:14:7e:a0:e2:36:fa:af:28:58:49:d3:cf: ce:6c:41:02:6d:69:10:a4:60:50:be:21:36:6e:19: 1e:87:d2:a5:6d:0c:30:ba:10:2c:e2:e5:09:46:63: cc:ea:de:1c:76:cb:8a:f3:ac:27:cd:12:e4:10:b0: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0A:20:AD:D7:D1:41:FA:95:C8:3E:6A:61:ED:65:B2:75:C1:1F:FF X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9a:59:9f:c7:ec:4d:ec:fc:59:e7:8e:66:1a:17:2a:1a:5b: c7:d7:92:7c:cd:bb:f6:24:ba:5b:de:c6:fd:8a:a0:85:ef:d9: b2:05:6c:e6:65:a9:9b:14:5f:68:0d:83:cc:df:6f:6f:06:f9: d1:bc:b9:e4:6e:55:10:84:20:ae:65:ab:6c:d4:d9:a4:5e:1c: c6:e4:26:5e:f4:27:e6:24:ee:07:d0:4a:d4:6a:2d:9c:62:61: 61:6d:7b:62:f0:8e:6c:01:df:ff:66:57:f7:c6:85:77:7a:14: e6:ce:d5:39:41:1b:33:24:26:66:31:ad:98:4f:90:4d:f0:01: fe:29:f0:ee:af:08:16:43:d6:c1:75:21:10:89:c1:2c:d0:46: 4d:eb:52:bc:32:7d:4b:07:92:0b:29:92:ed:e7:7d:0d:11:80: 7e:d4:09:8c:79:32:fb:a8:f2:e8:14:53:19:15:e2:5a:bd:ea: 80:c3:a7:45:12:6f:52:1b:a1:26:e4:e8:ff:b9:68:10:4d:ae: 76:23:5a:55:c0:bc:13:3d:17:73:2f:83:02:be:6d:c9:f2:b5: 0a:84:4b:06:db:04:be:75:51:87:6c:29:7c:67:92:54:24:b4: 89:00:26:46:bc:92:53:8f:18:44:9c:0f:63:35:f1:0f:d5:a7: 9a:01:26:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjQwNTE1MDcxNzQzWhcNMjQwNTIyMDcxNzQyWjAYMRYwFAYD VQQDEw02NjQ0NjE5Ny00OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoThcvB9bJvOgqcXURZYWuAfCxeRW3VElt9jUPB7kkmPnBd3KUGfdARYRSA7 XMppDmTLXzfIGE6Y/c5UbfTv8JVGe6u4Z2nZux+rhv6wd7l7jyInCXDetan7dhVo 5Xkm4XGk/Xp1gbEc8tTFPzTqLc2fUJymv7wzDj3x5KRmgD3oMSJ3sQ0p5+KW3Gox 3nIFQzpnf6Sm7cTtA2hxXC8E9tiMwcGj5mT1F5YDpVu3LwrrazPqXW4IuBPh6srF 3J198wHrYuwUfqDiNvqvKFhJ08/ObEECbWkQpGBQviE2bhkeh9KlbQwwuhAs4uUJ RmPM6t4cdsuK86wnzRLkELAjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQKIK3X 0UH6lcg+amHtZbJ1wR//MB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEmlmfx+xN7PxZ545mGhcqGlvH15J8zbv2JLpb3sb9iqCF79myBWzm ZambFF9oDYPM329vBvnRvLnkblUQhCCuZats1NmkXhzG5CZe9CfmJO4H0ErUai2c YmFhbXti8I5sAd//Zlf3xoV3ehTmztU5QRszJCZmMa2YT5BN8AH+KfDurwgWQ9bB dSEQicEs0EZN61K8Mn1LB5ILKZLt530NEYB+1AmMeTL7qPLoFFMZFeJaveqAw6dF Em9SG6Em5Oj/uWgQTa52I1pVwLwTPRdzL4MCvm3J8rUKhEsG2wS+dVGHbCl8Z5JU JLSJACZGvJJTjxhEnA9jNfEP1aeaASZj -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org