$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft File: QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json) Hash identifier: k6TM1OVWLDCXz2ap8molpqexG665D8BMIw2un0H44AU= Subject key identifier: AE:B3:67:52:97:0C:A4:16:59:EB:F0:CB:3F:9F:3E:B7:2B:61:9D:E0 Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21 Certificate issuer: /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921 Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft Manifest number: 05C3 Signing time: Sun 05 May 2024 00:53:49 +0000 Manifest this update: Sun 05 May 2024 00:53:48 +0000 Manifest next update: Sun 12 May 2024 00:53:48 +0000 Files and hashes: 1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: yUSpH6FZkiDLOrMgbZNaqvKybmyKFwpVmXPET0X5vuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921 Validity Not Before: May 5 00:53:48 2024 GMT Not After : May 12 00:53:48 2024 GMT Subject: CN=6636d89c-668a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3a:88:40:8b:1f:cc:36:9a:84:64:68:0c:e6: a0:6c:52:b1:0b:28:7e:a3:a0:c5:a8:ee:ec:11:94: 4d:d2:d0:05:fb:fc:4a:c1:76:90:ba:20:2a:c4:0f: 6e:c9:03:78:7f:ac:c6:7c:70:57:f1:0a:06:a9:d3: 96:19:a4:de:ef:78:dc:c2:9f:39:7c:e1:38:2e:68: 7f:19:da:fc:d5:1c:1f:67:4f:69:7e:c6:b4:9a:66: f8:60:28:60:b9:22:b9:5f:93:aa:c3:c9:3f:b1:7c: 20:3d:1f:d8:b9:db:95:7d:cc:d7:5c:65:a1:0f:e7: fb:c7:2a:4d:05:a3:a8:7e:5a:b9:16:c2:ed:5d:b8: e5:b7:63:bd:a1:56:9b:56:4d:79:87:dc:84:cb:23: 13:91:69:b4:5f:b1:b0:29:eb:77:a6:54:1a:41:fe: 40:5f:d0:e2:1f:61:5c:81:6d:bf:93:b9:f4:1f:e0: d6:5b:42:e7:42:94:8d:03:45:2d:aa:4c:1a:af:5d: 37:06:1d:2b:6c:f5:59:2e:ed:2c:dc:af:75:06:55: 1c:e7:a5:5c:54:04:56:4b:f9:fd:b8:f6:6a:79:c8: 69:81:5c:cd:d8:01:f7:cd:64:d8:9b:6c:1c:07:d4: 6a:9c:00:81:e7:ca:2f:e4:84:85:8c:81:47:11:c9: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B3:67:52:97:0C:A4:16:59:EB:F0:CB:3F:9F:3E:B7:2B:61:9D:E0 X509v3 Authority Key Identifier: keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c2:12:94:b2:ae:b2:93:f6:81:44:0b:1d:1e:fa:67:16:f6: 1b:06:64:82:45:26:cd:80:32:94:15:1b:1f:cb:4b:2c:c2:15: e4:8b:d5:30:0e:ed:89:8f:41:aa:15:20:12:b8:4f:14:fe:d4: 7e:e1:86:57:fc:ac:b0:d7:c3:b0:44:dd:05:10:08:20:ef:f1: 37:3b:e5:9a:71:58:07:69:72:9e:d2:c1:ae:b1:ef:c5:c2:96: c5:5c:3c:0e:10:90:94:38:d9:f2:69:57:70:79:c0:4f:b4:af: 01:76:d1:13:e5:af:41:5d:3f:e0:a2:81:6a:89:f0:aa:98:ab: fb:d8:4f:8c:a3:73:d2:44:15:fe:52:2a:a1:ae:95:83:ba:f5: f3:8c:70:1e:24:64:a4:b1:db:14:e9:03:a4:5d:d5:a0:28:8d: 66:d3:33:0e:ba:a1:36:98:4f:d9:03:4f:99:e8:16:e6:7d:b6: 12:d4:47:27:ef:80:29:cc:d1:7d:99:83:61:c2:b3:bb:16:49: 28:f5:84:6b:4b:89:4a:a6:dc:2d:cc:c5:79:95:e1:36:e7:0b: 1c:db:33:92:dd:93:71:7f:e9:d1:9a:16:f1:ec:86:3d:b6:3e: 22:9c:b0:6c:53:f9:87:cf:2f:97:c3:9a:42:97:e7:95:31:ea: 63:88:1d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5NjMxMTAvBgNVBAUTKDQwQzVCRDNERTk1MkI5MkU5NTkyMUE0RkQ2REY3REIw N0I0QTI5MjEwHhcNMjQwNTA1MDA1MzQ4WhcNMjQwNTEyMDA1MzQ4WjAYMRYwFAYD VQQDEw02NjM2ZDg5Yy02NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jqIQIsfzDaahGRoDOagbFKxCyh+o6DFqO7sEZRN0tAF+/xKwXaQuiAqxA9u yQN4f6zGfHBX8QoGqdOWGaTe73jcwp85fOE4Lmh/Gdr81RwfZ09pfsa0mmb4YChg uSK5X5Oqw8k/sXwgPR/YuduVfczXXGWhD+f7xypNBaOoflq5FsLtXbjlt2O9oVab Vk15h9yEyyMTkWm0X7GwKet3plQaQf5AX9DiH2FcgW2/k7n0H+DWW0LnQpSNA0Ut qkwar103Bh0rbPVZLu0s3K91BlUc56VcVARWS/n9uPZqechpgVzN2AH3zWTYm2wc B9RqnACB58ov5ISFjIFHEcl54wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6zZ1KX DKQWWevwyz+fPrcrYZ3gMB8GA1UdIwQYMBaAFEDFvT3pUrkulZIaT9bffbB7Sikh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3 RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VTNlZraHBQMXQ5OXNIdEtL U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNVzlQZWxTdVM2VmtocFAxdDk5c0h0S0tTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VT NlZraHBQMXQ5OXNIdEtLU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcwhKUsq6yk/aBRAsdHvpnFvYbBmSCRSbNgDKUFRsfy0sswhXki9Uw Du2Jj0GqFSASuE8U/tR+4YZX/Kyw18OwRN0FEAgg7/E3O+WacVgHaXKe0sGuse/F wpbFXDwOEJCUONnyaVdwecBPtK8BdtET5a9BXT/gooFqifCqmKv72E+Mo3PSRBX+ UiqhrpWDuvXzjHAeJGSksdsU6QOkXdWgKI1m0zMOuqE2mE/ZA0+Z6BbmfbYS1Ecn 74ApzNF9mYNhwrO7Fkko9YRrS4lKptwtzMV5leE25wsc2zOS3ZNxf+nRmhbx7IY9 tj4inLBsU/mHzy+Xw5pCl+eVMepjiB01 -----END CERTIFICATE-----Generated at Sun May 5 02:33:36 2024 by rpki-client on console-fra.rpki-client.org