$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft File: qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json) Hash identifier: 3Z+Ta29gjzpUoAeHT+RS0oGMYfN4FwaqtJuq8gQ3XOI= Subject key identifier: 0E:B5:CB:AC:6B:DF:7B:12:E7:94:B6:17:04:1F:C3:F9:02:C7:B5:95 Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft Manifest number: CF Signing time: Sat 27 Apr 2024 06:01:57 +0000 Manifest this update: Sat 27 Apr 2024 06:01:56 +0000 Manifest next update: Sat 04 May 2024 06:01:56 +0000 Files and hashes: 1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: GhV4PTPf1L8bW22Ys0aN2gsAY407zJqzDM/Vwiq2ga8=) 2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: JSIERUiirVbPFJ8aqP2AfVoC0pzJHMwyydsQwNTDNkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Validity Not Before: Apr 27 06:01:56 2024 GMT Not After : May 4 06:01:56 2024 GMT Subject: CN=662c94d4-20ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:13:f6:b6:b0:1f:be:d1:12:9d:c6:9d:00:d8: e9:3f:a3:1f:cd:9b:d5:f6:16:36:5c:9d:c1:15:ef: 0e:65:d3:42:1c:fc:31:cc:16:20:87:07:e3:8b:f9: ac:15:d7:7c:66:38:bf:ff:28:b0:21:76:c7:a7:75: 70:7e:68:b6:d8:a9:cf:a1:8d:1a:cf:d0:2e:d2:33: 6a:05:ac:e2:09:39:67:ca:ef:ab:13:3b:91:64:a1: a7:4d:a7:0b:93:2a:f0:ed:f2:b9:ca:a6:d1:7d:9b: cf:d1:14:a9:66:42:23:3e:b7:8a:e1:20:cf:dd:80: 64:f0:c3:b3:bd:22:ab:d8:b7:46:7e:0d:57:82:53: a9:69:c6:3b:7c:ff:cb:7e:d2:2e:16:6f:c4:ee:86: 85:ea:eb:c8:de:5e:d4:af:86:31:f6:c7:8a:aa:7e: 30:84:ad:ca:1c:be:95:c7:c6:c3:88:7e:21:ac:da: 9b:08:b7:fe:0c:07:3e:22:b0:b1:87:d3:30:df:5a: 42:6b:ee:c6:df:f7:3b:ee:ab:a5:7a:9d:b2:e8:1d: 70:9a:20:b3:30:bd:55:9d:7c:e2:3c:07:0c:36:e8: 1d:61:9f:d7:4d:d9:89:36:8f:f4:d3:fb:2c:0a:d9: eb:d5:49:d4:17:03:11:b3:33:1f:83:99:5e:84:39: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B5:CB:AC:6B:DF:7B:12:E7:94:B6:17:04:1F:C3:F9:02:C7:B5:95 X509v3 Authority Key Identifier: keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f7:f2:e2:55:ba:b0:46:15:9c:82:1c:46:73:2c:1d:4f:4a: 38:ac:24:c0:ff:9a:46:f9:bf:7b:77:6c:89:ac:fc:78:73:10: f7:29:e3:87:e3:b0:de:b0:b2:36:bb:59:0b:84:11:2b:02:ca: b6:e5:73:06:19:dc:6a:3b:9f:d2:8e:39:42:f9:dc:73:2f:dc: 13:0e:72:bb:1f:b4:c1:b2:29:af:c4:08:d3:91:41:d2:d7:60: c6:e1:2a:96:a9:be:62:4d:c1:e7:59:b4:3a:b4:60:cd:06:cd: 0a:e4:c1:a6:6f:0a:cc:c8:a9:41:ac:e0:32:84:7f:6d:9d:b1: 78:b8:13:e2:1e:14:bf:90:c2:05:39:5b:8a:f3:ef:6a:10:c1: 29:a6:de:08:a6:02:4b:34:bf:43:dc:a5:1d:bb:af:48:0a:5d: 0f:59:86:da:6b:20:3d:e4:4e:5c:8b:86:99:a1:cb:94:bc:ac: 66:68:7e:62:f2:1b:75:d7:6d:3a:7a:92:0b:b0:fa:d2:89:a5: 77:c1:71:80:e4:c9:7e:3a:f6:b3:d0:93:99:d0:4e:03:93:8d: 35:fc:54:b4:7b:fe:b6:64:55:47:72:58:f9:20:a6:02:a8:81: b6:d5:75:72:c2:36:16:ba:c7:cc:bf:46:32:e8:1b:d4:19:5b: 5b:8b:56:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU1N0IxMTAvBgNVBAUTKEFCM0IxMjgxMUJBNDVFNjM5MkIwMDVEMzQxRjkzQTBE MDdGMkFCMUMwHhcNMjQwNDI3MDYwMTU2WhcNMjQwNTA0MDYwMTU2WjAYMRYwFAYD VQQDEw02NjJjOTRkNC0yMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xP2trAfvtESncadANjpP6MfzZvV9hY2XJ3BFe8OZdNCHPwxzBYghwfji/ms Fdd8Zji//yiwIXbHp3Vwfmi22KnPoY0az9Au0jNqBaziCTlnyu+rEzuRZKGnTacL kyrw7fK5yqbRfZvP0RSpZkIjPreK4SDP3YBk8MOzvSKr2LdGfg1XglOpacY7fP/L ftIuFm/E7oaF6uvI3l7Ur4Yx9seKqn4whK3KHL6Vx8bDiH4hrNqbCLf+DAc+IrCx h9Mw31pCa+7G3/c77qulep2y6B1wmiCzML1VnXziPAcMNugdYZ/XTdmJNo/00/ss Ctnr1UnUFwMRszMfg5lehDmZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA61y6xr 33sS55S2FwQfw/kCx7WVMB8GA1UdIwQYMBaAFKs7EoEbpF5jkrAF00H5Og0H8qsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTU3Qi9EQjRFRDYwNkM5 NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1htT1NzQVhUUWZrNkRRZnlx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6c1NnUnVrWG1PU3NBWFRRZms2RFFmeXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTU3Qi9EQjRFRDYwNkM5NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1ht T1NzQVhUUWZrNkRRZnlxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm9/LiVbqwRhWcghxGcywdT0o4rCTA/5pG+b97d2yJrPx4cxD3KeOH 47DesLI2u1kLhBErAsq25XMGGdxqO5/SjjlC+dxzL9wTDnK7H7TBsimvxAjTkUHS 12DG4SqWqb5iTcHnWbQ6tGDNBs0K5MGmbwrMyKlBrOAyhH9tnbF4uBPiHhS/kMIF OVuK8+9qEMEppt4IpgJLNL9D3KUdu69ICl0PWYbaayA95E5ci4aZocuUvKxmaH5i 8ht11206epILsPrSiaV3wXGA5Ml+Ovaz0JOZ0E4Dk401/FS0e/62ZFVHclj5IKYC qIG21XVywjYWusfMv0Yy6BvUGVtbi1aq -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org