$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: fKxfWMea17OjPCFqvn0w1Rh8uLkKIHb1JGk65FKKkUc= Subject key identifier: 71:11:A1:64:D5:10:B1:FA:BF:EB:5E:CF:1F:37:23:AC:6A:03:F5:D9 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 05F9 Signing time: Mon 03 Jun 2024 01:11:40 +0000 Manifest this update: Mon 03 Jun 2024 01:11:40 +0000 Manifest next update: Mon 10 Jun 2024 01:11:40 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: bjElgHrP+hqMA6nBAjuezbHNDcuqp3WSoxVEhsRzlpk=) 2: 1081C808941911EEA608BF44C4F9AE02.roa (hash: NBA4xZn8b1QOMin/xcrcEz1Eu3qA0BG9Pn72hOy8VtE=) 3: E4665324A18811EEAA13424FC4F9AE02.roa (hash: 08Pz+p8TaXXxFRRwBvqw+DqiYQKyZ3MT4nMY+dgSGYU=) 4: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: BFxW5uWh/gHPibEDvdCeEFxVhQeqXBdNq6oYI/zIRBI=) 5: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 00:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Jun 3 01:11:40 2024 GMT Not After : Jun 10 01:11:40 2024 GMT Subject: CN=665d184c-8878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:a6:c8:ea:00:5d:cc:b8:c6:bc:c8:bb:5c: 60:ce:b6:f8:26:b2:4c:c6:2f:e9:54:fc:5c:21:9f: 74:1a:e5:d3:e2:53:90:1a:e0:08:fb:39:75:71:59: 1c:47:b8:11:65:2b:f4:71:0b:65:97:67:4b:62:11: 7a:26:cc:d4:29:7b:7f:02:8d:02:c6:61:4a:51:01: 92:f2:4f:1b:e1:02:78:64:9a:4a:35:14:75:62:ad: e3:00:50:17:82:22:d4:ff:09:60:79:0b:14:58:18: 9e:bd:9b:eb:b9:7a:d5:f5:7e:d1:de:d1:0a:76:50: 0d:c5:15:75:62:0d:c2:22:8c:9a:31:4b:d4:76:5b: 63:a2:34:0b:c1:b6:04:8a:1b:99:e9:32:bf:6b:f0: 82:14:55:b4:ec:f6:06:1d:9c:75:bc:ac:d1:fd:fb: 2c:03:c8:ce:f9:44:78:b1:86:43:51:4a:b5:43:bc: 11:49:20:a1:44:10:06:c0:54:32:2b:1a:a8:92:b6: cd:f5:6f:1f:b1:84:bf:d6:0b:b3:c6:14:60:d1:55: a6:cd:35:ec:d3:18:e3:ed:22:a1:c7:82:cd:2a:12: 81:17:96:d9:14:d2:fd:30:b1:be:47:3b:57:78:f2: 1c:0e:ee:77:1e:38:53:67:4b:f0:3e:7e:4f:e7:91: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:11:A1:64:D5:10:B1:FA:BF:EB:5E:CF:1F:37:23:AC:6A:03:F5:D9 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:84:1c:51:0f:f7:95:eb:f8:b7:31:ea:bf:14:2d:99:42:0a: e6:ef:6f:84:b8:46:f4:41:42:c0:aa:3a:a5:78:8d:5b:41:52: c3:49:89:50:9d:2a:79:95:0f:44:b7:da:a9:8a:b9:6d:91:fc: 47:ae:d4:32:b7:76:72:a4:04:d2:6b:35:ab:9d:7a:1a:f8:de: b9:3c:d5:a6:b0:70:3c:55:dd:0c:c6:f7:d2:a2:e2:f2:1a:a0: f5:4c:ec:b7:ee:1c:7b:f1:74:c9:04:27:c0:f1:8d:d4:86:fc: d1:16:cf:d8:78:4d:74:d7:80:c9:ae:91:17:c2:cc:cc:ab:f2: ba:24:7f:b5:4e:6b:48:e3:ca:7c:c8:8c:c0:45:a7:77:24:16: e0:35:4f:0d:a6:88:bf:5e:6a:f0:c9:38:a4:39:6b:29:74:25: 5e:21:da:41:05:1b:7a:7f:cd:61:80:99:fc:f3:44:12:91:e3: 04:68:a0:fa:b5:90:f3:c9:c2:f9:54:e8:97:a7:e5:4f:3c:f8: ef:2c:ee:82:a0:4c:f4:d8:be:63:96:d1:4a:90:29:58:64:22: da:ef:c9:95:75:d0:8b:b3:6c:fb:63:12:de:ec:f3:fd:6a:69: 8a:7b:8e:07:d3:f7:1a:83:d5:20:9c:6a:69:b9:e7:60:56:13: 69:11:a8:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQwNjAzMDExMTQwWhcNMjQwNjEwMDExMTQwWjAYMRYwFAYD VQQDEw02NjVkMTg0Yy04ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eKmyOoAXcy4xrzIu1xgzrb4JrJMxi/pVPxcIZ90GuXT4lOQGuAI+zl1cVkc R7gRZSv0cQtll2dLYhF6JszUKXt/Ao0CxmFKUQGS8k8b4QJ4ZJpKNRR1Yq3jAFAX giLU/wlgeQsUWBievZvruXrV9X7R3tEKdlANxRV1Yg3CIoyaMUvUdltjojQLwbYE ihuZ6TK/a/CCFFW07PYGHZx1vKzR/fssA8jO+UR4sYZDUUq1Q7wRSSChRBAGwFQy KxqokrbN9W8fsYS/1guzxhRg0VWmzTXs0xjj7SKhx4LNKhKBF5bZFNL9MLG+RztX ePIcDu53HjhTZ0vwPn5P55HBjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHERoWTV ELH6v+tezx83I6xqA/XZMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMhBxRD/eV6/i3Meq/FC2ZQgrm72+EuEb0QULAqjqleI1bQVLDSYlQ nSp5lQ9Et9qpirltkfxHrtQyt3ZypATSazWrnXoa+N65PNWmsHA8Vd0MxvfSouLy GqD1TOy37hx78XTJBCfA8Y3UhvzRFs/YeE1014DJrpEXwszMq/K6JH+1TmtI48p8 yIzARad3JBbgNU8Npoi/XmrwyTikOWspdCVeIdpBBRt6f81hgJn880QSkeMEaKD6 tZDzycL5VOiXp+VPPPjvLO6CoEz02L5jltFKkClYZCLa78mVddCLs2z7YxLe7PP9 ammKe44H0/cag9UgnGppuedgVhNpEag2 -----END CERTIFICATE-----Generated at Mon Jun 3 01:55:13 2024 by rpki-client on console-ams.rpki-client.org