$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: p8Y1yuL8/rt0IxKpsn+Ej2IhOoTD4B5ZyHbPntAOGt8= Subject key identifier: 08:8A:31:05:B3:82:67:43:54:12:A9:DF:68:17:44:74:9B:AA:68:1C Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0BDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0BD9 Signing time: Thu 02 May 2024 19:08:58 +0000 Manifest this update: Thu 02 May 2024 19:08:58 +0000 Manifest next update: Thu 09 May 2024 19:08:58 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: ZpVCLnxUu4Y5kTdaZMSp+SpmnHva02iCd7rUuZqWx7g=) 2: D0566D20F25411E9AEDBEA62C4F9AE02.roa (hash: N/UpdGLNU8SBBwq+XJEniHuQpJLkvYwYbJ6YzYRpczs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: May 2 19:08:58 2024 GMT Not After : May 9 19:08:58 2024 GMT Subject: CN=6633e4ca-c9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:43:5c:8b:3b:31:e9:e0:13:0d:76:d5:dd: f9:3d:c8:1e:6f:e7:66:2d:0b:6b:4f:f4:ba:dd:2f: b8:28:4a:c0:12:bc:cd:99:9e:b4:19:34:36:dc:9c: 4f:1c:e4:12:54:57:94:1d:5d:61:fa:fb:ab:ad:52: 22:e7:29:da:1e:63:d4:ea:3c:07:f5:90:f1:8a:71: 50:d4:fa:70:ab:ee:bc:e0:93:8e:1e:7b:21:8c:24: b5:09:78:94:d5:51:77:d9:9a:67:d7:12:0d:a9:8b: 3f:29:35:18:96:d4:9c:0d:e6:08:51:ed:ab:74:9e: d3:db:0e:6b:1b:3d:9d:bd:35:57:84:8b:19:16:c6: 49:6b:ec:a7:12:b3:3c:74:ce:8e:1a:ad:51:91:27: 57:d7:1d:e3:cb:cd:f3:0b:eb:9d:7e:c2:35:d0:0a: 75:e6:b7:af:71:ab:9d:cd:21:ec:ad:43:80:70:0b: 64:db:85:dc:5a:80:89:13:19:2c:bd:54:0a:d6:36: 71:5e:65:9b:2b:92:14:f4:cb:64:d6:29:fa:a7:57: 1d:08:49:6b:6a:df:be:11:0f:d3:18:fb:fb:61:82: 47:0e:83:45:3b:6f:a2:cb:aa:eb:64:65:30:1c:b9: d5:cc:b0:69:c1:07:79:33:d7:36:55:de:6d:0c:01: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:31:05:B3:82:67:43:54:12:A9:DF:68:17:44:74:9B:AA:68:1C X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:41:56:9c:2e:e3:5c:bc:13:5a:9e:80:59:a9:92:83:8a:e0: 91:9f:83:cf:bb:4e:c4:e6:19:c8:eb:cb:bc:33:15:b6:12:38: ef:e0:f7:ba:cb:93:b2:37:ca:ae:72:15:a5:28:36:70:b9:ad: 38:5b:73:a7:26:4f:80:e5:1b:25:37:52:49:a7:8b:f0:03:9c: df:ed:33:13:c3:be:7c:03:25:91:08:36:51:e0:57:25:51:1c: 27:cf:3a:6f:7b:42:92:d6:a3:46:d1:93:75:c8:75:50:92:cf: 2a:29:61:7c:60:a4:08:28:26:fb:1b:f8:08:81:61:07:6a:7b: db:e6:22:72:3f:bb:20:77:97:35:7b:df:f3:d7:0b:64:d6:7a: 32:d4:0a:56:6c:3d:44:77:f5:d1:ab:31:3a:ad:00:34:b5:f5: 7b:a5:8b:5b:b9:2a:cb:29:47:39:3b:e8:92:ef:c4:9e:f8:68: 06:ef:b3:75:a1:f9:da:d6:da:63:09:e1:7d:c8:ce:b0:c7:08: aa:90:e0:82:ac:33:86:28:1e:3a:25:99:ff:0f:e6:83:8a:7f: 77:bd:71:05:11:18:9c:9c:63:b7:ff:94:b7:5d:6f:2d:37:dd: 2a:b9:86:c9:b3:85:c6:c2:fb:3f:86:20:a0:04:bb:71:f7:c6: 68:e9:81:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjQwNTAyMTkwODU4WhcNMjQwNTA5MTkwODU4WjAYMRYwFAYD VQQDEw02NjMzZTRjYS1jOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR5DXIs7MengEw121d35Pcgeb+dmLQtrT/S63S+4KErAErzNmZ60GTQ23JxP HOQSVFeUHV1h+vurrVIi5ynaHmPU6jwH9ZDxinFQ1Ppwq+684JOOHnshjCS1CXiU 1VF32Zpn1xINqYs/KTUYltScDeYIUe2rdJ7T2w5rGz2dvTVXhIsZFsZJa+ynErM8 dM6OGq1RkSdX1x3jy83zC+udfsI10Ap15revcaudzSHsrUOAcAtk24XcWoCJExks vVQK1jZxXmWbK5IU9Mtk1in6p1cdCElrat++EQ/TGPv7YYJHDoNFO2+iy6rrZGUw HLnVzLBpwQd5M9c2Vd5tDAHj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiKMQWz gmdDVBKp32gXRHSbqmgcMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEQVacLuNcvBNanoBZqZKDiuCRn4PPu07E5hnI68u8MxW2Ejjv4Pe6 y5OyN8quchWlKDZwua04W3OnJk+A5RslN1JJp4vwA5zf7TMTw758AyWRCDZR4Fcl URwnzzpve0KS1qNG0ZN1yHVQks8qKWF8YKQIKCb7G/gIgWEHanvb5iJyP7sgd5c1 e9/z1wtk1noy1ApWbD1Ed/XRqzE6rQA0tfV7pYtbuSrLKUc5O+iS78Se+GgG77N1 ofna1tpjCeF9yM6wxwiqkOCCrDOGKB46JZn/D+aDin93vXEFERicnGO3/5S3XW8t N90quYbJs4XGwvs/hiCgBLtx98Zo6YG2 -----END CERTIFICATE-----Generated at Thu May 2 20:04:41 2024 by rpki-client on console-ams.rpki-client.org