$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: +YQcVnA6ir2jF7emHOp74U3geVwsCqOIDDePiSBLFh4= Subject key identifier: 51:CA:CD:AB:BF:B1:0D:B9:6B:BA:F6:9A:E3:E7:13:EC:2F:D1:B2:28 Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0B9D Signing time: Mon 06 May 2024 19:19:06 +0000 Manifest this update: Mon 06 May 2024 19:19:05 +0000 Manifest next update: Mon 13 May 2024 19:19:05 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: Kf615r9xk9MuF5doR31yr32qkWXGQaUT2VE8wqmJ8x4=) 2: 0C8538A6FFA411E9BC2B6886C4F9AE02.roa (hash: NEC29ByjsDaKAhJRTSgfmFIrg80vHn1kxIxJlvWTYQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: May 6 19:19:05 2024 GMT Not After : May 13 19:19:05 2024 GMT Subject: CN=66392d2a-ffa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:cc:72:6f:55:da:68:1e:1c:00:5e:4d:03: b0:61:76:54:e2:04:7f:96:04:f2:15:ac:cc:1f:cb: 67:54:32:2d:28:94:ea:f5:b8:fd:33:66:4c:af:b1: 68:b6:d4:d0:9a:cb:d9:6e:ef:1c:24:f0:a2:76:70: af:fb:62:a8:12:28:5d:30:00:43:54:c1:20:0e:85: d2:95:55:a1:04:78:c5:6e:79:9e:ce:c9:97:dc:0c: 5d:e3:0a:ba:6e:d7:c1:6c:4d:7e:e4:de:b3:97:7f: 6f:df:c6:27:2e:b8:49:4f:63:3c:3d:d4:a2:e9:55: 7a:28:23:24:1d:3e:90:ab:80:86:15:26:d6:75:6c: 3d:37:62:d6:58:ea:02:f4:24:0f:1d:8f:9a:b3:f6: f0:f4:07:65:2c:45:c8:2e:1b:17:e4:8b:1a:8b:ed: 4c:51:0b:f8:73:04:be:ef:4b:e3:e0:cf:ca:32:b6: 2d:72:f8:1a:d5:55:15:5d:78:1b:93:f4:fc:52:66: e0:d8:3d:fc:fa:82:39:29:79:fe:99:b3:0b:8f:74: 62:4e:b9:5c:d1:d0:5c:0a:75:d2:9f:b1:30:4f:59: 83:a8:00:21:af:6b:f8:57:42:80:a4:bc:cb:e4:c5: c2:ad:3e:f2:99:ac:55:cc:7a:54:32:f8:50:20:89: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CA:CD:AB:BF:B1:0D:B9:6B:BA:F6:9A:E3:E7:13:EC:2F:D1:B2:28 X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7a:d8:ac:ea:5e:b3:0f:87:a6:71:5a:c7:f4:28:53:a4:fa: 4f:e1:13:ec:f2:03:64:8f:ab:a7:14:23:2a:44:30:c3:0b:e3: ee:3e:79:a9:66:e0:7f:c8:ae:ed:04:c5:c1:e0:c2:82:77:ca: a4:e5:2a:6e:e2:f6:21:91:09:a9:e3:5e:ea:44:4e:df:5f:e3: 52:80:04:4d:39:34:5c:1f:ed:4e:b1:99:8b:a8:4d:d8:e5:cd: 83:09:a8:e6:14:61:78:b6:46:0c:66:96:5d:5f:3f:95:1d:b8: 60:9c:6d:70:9b:36:2b:39:8d:f9:78:35:e4:9b:e6:2c:e5:df: dc:db:3c:51:2b:4a:5b:e9:77:66:23:1e:6f:85:ad:d8:2a:07: ff:e9:e7:7d:04:92:95:98:72:d1:be:5b:82:38:a0:18:b9:53: 6f:fa:f9:86:27:36:f7:d6:62:2e:c2:65:b0:01:6d:e6:1d:8c: 31:f4:48:d4:5d:ce:cb:c2:cb:de:91:37:47:92:18:78:e1:28: 02:10:a4:65:73:e2:8f:21:ca:ac:e9:55:03:65:3f:5e:fc:2f: 6d:0c:a3:f0:21:d7:53:af:ee:8c:6b:9d:a0:04:98:d7:18:ed: 4b:ce:ea:cd:97:b3:f3:ec:dc:6a:aa:88:5a:42:b7:11:3d:af: 8c:55:7f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjQwNTA2MTkxOTA1WhcNMjQwNTEzMTkxOTA1WjAYMRYwFAYD VQQDEw02NjM5MmQyYS1mZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNvMcm9V2mgeHABeTQOwYXZU4gR/lgTyFazMH8tnVDItKJTq9bj9M2ZMr7Fo ttTQmsvZbu8cJPCidnCv+2KoEihdMABDVMEgDoXSlVWhBHjFbnmezsmX3Axd4wq6 btfBbE1+5N6zl39v38YnLrhJT2M8PdSi6VV6KCMkHT6Qq4CGFSbWdWw9N2LWWOoC 9CQPHY+as/bw9AdlLEXILhsX5Isai+1MUQv4cwS+70vj4M/KMrYtcvga1VUVXXgb k/T8Umbg2D38+oI5KXn+mbMLj3RiTrlc0dBcCnXSn7EwT1mDqAAhr2v4V0KApLzL 5MXCrT7ymaxVzHpUMvhQIIk6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHKzau/ sQ25a7r2muPnE+wv0bIoMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOetis6l6zD4emcVrH9ChTpPpP4RPs8gNkj6unFCMqRDDDC+PuPnmp ZuB/yK7tBMXB4MKCd8qk5Spu4vYhkQmp417qRE7fX+NSgARNOTRcH+1OsZmLqE3Y 5c2DCajmFGF4tkYMZpZdXz+VHbhgnG1wmzYrOY35eDXkm+Ys5d/c2zxRK0pb6Xdm Ix5vha3YKgf/6ed9BJKVmHLRvluCOKAYuVNv+vmGJzb31mIuwmWwAW3mHYwx9EjU Xc7LwsvekTdHkhh44SgCEKRlc+KPIcqs6VUDZT9e/C9tDKPwIddTr+6Ma52gBJjX GO1LzurNl7Pz7NxqqohaQrcRPa+MVX+5 -----END CERTIFICATE-----Generated at Mon May 6 20:19:32 2024 by rpki-client on console-ams.rpki-client.org