$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: 2HQJblr4T1rBKbMOb7LXa8IqeUliZpgT7FlW++vIv6Q= Subject key identifier: 5C:29:5B:7E:1A:89:B8:F0:06:83:0F:8E:7E:B0:5B:F3:BD:7A:69:38 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 1B Signing time: Wed 15 May 2024 08:51:39 +0000 Manifest this update: Wed 15 May 2024 08:51:39 +0000 Manifest next update: Wed 22 May 2024 08:51:39 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: iUnZQpoAKGTwIyE11YFhPQdR+8NObd1P2meV8ejGPjY=) 2: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: FZ/xUhIM7zfvbjrlaNBg5R71VpWXVWpefCmFbBzTTVk=) 3: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: 607whJuTJGYwP+EYvn1YISuD9WkRx7rEu3EVnFHKNOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: May 15 08:51:39 2024 GMT Not After : May 22 08:51:39 2024 GMT Subject: CN=6644779b-d52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:27:8f:d0:1a:1d:e1:fb:92:60:96:6c:37:21: 79:a8:56:ad:5e:15:51:84:fe:31:1d:c1:e0:fb:0b: 42:7b:cc:38:67:ee:c3:66:53:96:d8:09:89:f4:8d: f3:b1:65:fd:bf:f4:bc:14:38:92:44:90:7e:f2:99: 7b:55:1f:5b:da:a3:fa:6c:f1:d5:c9:ca:ed:99:45: 85:e1:56:9d:e0:8e:98:84:8d:c9:54:b9:fc:d4:7e: 38:b0:60:04:54:ef:99:01:b2:86:e1:5d:84:86:32: ff:d5:a2:6e:bf:66:9d:a4:a7:63:6e:a1:2b:a0:c0: f4:4c:c0:92:49:99:33:d2:0f:21:fd:63:e0:a2:97: 71:30:2e:07:cf:f2:91:84:a9:76:87:02:79:96:8d: dc:a3:eb:0f:31:31:2d:fd:78:ab:f9:3d:6e:a9:2f: bc:2c:7e:e6:cd:79:65:b2:69:bf:5d:29:84:56:1b: c9:d3:c1:a5:d6:b2:5d:e9:c5:97:57:84:34:6d:a9: 16:3f:fc:54:67:87:08:22:d9:55:79:d9:f7:ae:c7: 29:c9:21:02:95:2b:6f:bd:f5:e7:d0:c9:3d:84:0c: ab:aa:1b:4d:c5:26:ae:44:81:23:1c:aa:9a:95:04: f8:d8:49:af:1f:4b:dd:fa:92:44:22:01:e2:41:3e: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:29:5B:7E:1A:89:B8:F0:06:83:0F:8E:7E:B0:5B:F3:BD:7A:69:38 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b4:6c:17:5e:70:62:94:6e:10:84:f2:73:4d:f0:6b:e8:56: 7d:19:07:bb:69:86:37:c7:13:0b:e5:bb:0b:91:01:b8:d9:8f: 73:d1:32:9a:6a:85:e0:7f:3f:70:0e:6e:68:73:4a:bc:7c:f0: da:6b:3e:74:04:b9:a0:a1:fd:bc:10:4f:b4:7c:a1:cb:e4:38: dd:ae:d3:7f:34:1e:d0:81:9f:f9:8f:5a:26:fe:ad:1c:cc:dd: c9:b6:61:e5:c4:d3:01:eb:72:4a:2d:ee:67:7f:f3:8c:69:72: 10:72:31:ff:46:6a:f2:6e:f5:8b:25:c0:5f:f4:e1:9d:61:e6: 35:4c:8e:23:54:df:b2:24:51:ec:a0:df:73:d4:5e:e4:d4:49: da:8e:9e:28:c7:d8:62:4b:19:72:58:93:0c:4a:d9:49:46:48: 17:a7:5b:75:80:80:b3:53:c5:b4:d8:d0:d7:de:68:89:4a:fb: a1:10:6d:32:ea:01:91:96:6f:a5:99:19:e6:35:1c:e1:f3:78: b2:23:19:9c:e4:58:e0:81:13:fc:45:11:82:70:59:d8:08:70: 33:51:3d:cf:56:de:99:e4:a3:a5:e3:2e:0d:39:3d:26:d8:15: 5e:7d:98:70:79:54:13:66:14:c2:e7:2d:94:bb:ad:10:ee:01: 8b:aa:05:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoNDA0MkMyNDkwRDdEQUZFQzMzMjAzMTZFRDVBQTc0RTBC RUNBQTlBOTAeFw0yNDA1MTUwODUxMzlaFw0yNDA1MjIwODUxMzlaMBgxFjAUBgNV BAMTDTY2NDQ3NzliLWQ1MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0J4/QGh3h+5Jglmw3IXmoVq1eFVGE/jEdweD7C0J7zDhn7sNmU5bYCYn0jfOx Zf2/9LwUOJJEkH7ymXtVH1vao/ps8dXJyu2ZRYXhVp3gjpiEjclUufzUfjiwYARU 75kBsobhXYSGMv/Vom6/Zp2kp2NuoSugwPRMwJJJmTPSDyH9Y+Cil3EwLgfP8pGE qXaHAnmWjdyj6w8xMS39eKv5PW6pL7wsfubNeWWyab9dKYRWG8nTwaXWsl3pxZdX hDRtqRY//FRnhwgi2VV52feuxynJIQKVK2+99efQyT2EDKuqG03FJq5EgSMcqpqV BPjYSa8fS936kkQiAeJBPhVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXClbfhqJ uPAGgw+OfrBb8716aTgwHwYDVR0jBBgwFoAUQELCSQ19r+wzIDFu1ap04L7Kqakw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzYyMzNERDNFRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fh ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUVMQ1NRMTlyLXd6SURGdTFhcDA0TDdLcWFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MTY5LzYyMzNERDNFRUJBRTExRUU4QTBFRDk2NEM0RjlBRTAyL1FFTENTUTE5ci13 eklERnUxYXAwNEw3S3Fhay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAa0bBdecGKUbhCE8nNN8GvoVn0ZB7tphjfHEwvluwuRAbjZj3PRMppq heB/P3AObmhzSrx88NprPnQEuaCh/bwQT7R8ocvkON2u0380HtCBn/mPWib+rRzM 3cm2YeXE0wHrckot7md/84xpchByMf9GavJu9YslwF/04Z1h5jVMjiNU37IkUeyg 33PUXuTUSdqOnijH2GJLGXJYkwxK2UlGSBenW3WAgLNTxbTY0NfeaIlK+6EQbTLq AZGWb6WZGeY1HOHzeLIjGZzkWOCBE/xFEYJwWdgIcDNRPc9W3pnko6XjLg05PSbY FV59mHB5VBNmFMLnLZS7rRDuAYuqBYw= -----END CERTIFICATE-----Generated at Wed May 15 09:28:13 2024 by rpki-client on console-fra.rpki-client.org