$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: 3r2uAd2bQdaq6Tms6wSPn3aqxfeMf5UfruqS4hhEX4o= Subject key identifier: 0E:C5:ED:6F:28:4C:7B:C9:8D:9F:AA:83:13:AE:63:25:29:6E:15:BD Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0B4E Signing time: Thu 02 May 2024 19:45:46 +0000 Manifest this update: Thu 02 May 2024 19:45:46 +0000 Manifest next update: Thu 09 May 2024 19:45:46 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: WehdAca5dl6SQqtjhFyz/M05yQ2cPFMDhsj4PyydaYQ=) 2: 57C356780DB811EA829EA10AC4F9AE02.roa (hash: MBnvK8CN9mGVCw7YymiY5EeU0OzIfO6oZvvJ/LCGdTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: May 2 19:45:46 2024 GMT Not After : May 9 19:45:46 2024 GMT Subject: CN=6633ed6a-77c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:50:6d:d8:21:0d:2f:9e:7c:82:fa:97:32: f5:e5:db:41:c7:fe:f3:4b:da:a8:35:ee:3f:c4:4c: 94:13:3c:e1:ca:bf:f8:d1:12:fc:26:e4:0a:c2:b4: 3d:76:0f:cb:44:2b:2f:f0:8e:5d:93:13:13:05:87: 10:22:62:22:04:9d:dc:ce:bf:9e:78:27:c3:a3:00: 13:f6:ac:c1:36:29:7c:15:dd:13:f5:b8:5e:05:0a: 00:5d:07:0a:28:04:d2:10:30:bd:fb:98:22:4a:e6: a7:35:ca:0e:4a:78:9f:34:f5:27:c5:ac:5d:e9:51: d7:94:08:a0:39:0d:82:33:8d:e5:d2:4c:01:08:b3: 87:7d:69:1d:ea:07:f1:da:8c:93:31:51:52:98:13: 04:53:ff:5c:13:62:2c:ff:f0:db:86:98:dd:68:78: 60:d3:35:1a:9c:d3:5b:19:88:5e:4a:fc:ac:7b:c5: a3:36:d3:6e:a6:a2:22:a9:5f:c9:c1:42:28:ad:ee: af:4d:9d:49:bd:80:ef:50:06:0f:42:9d:43:a4:f5: 4b:6d:e4:ff:90:79:02:f4:b8:99:4b:d5:bd:f2:43: 7e:2b:fe:00:b8:06:35:38:b1:b6:67:7f:97:c4:86: f2:fe:18:4c:03:26:d3:ab:d8:ee:38:b4:61:bc:9f: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C5:ED:6F:28:4C:7B:C9:8D:9F:AA:83:13:AE:63:25:29:6E:15:BD X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a5:b3:40:b5:52:89:29:d8:0a:79:50:a9:ce:84:ff:99:4c: 7d:01:f8:7b:7e:15:85:2c:c5:34:27:3a:9d:38:6b:1e:42:d2: 04:c4:4b:a6:7a:dc:0f:e9:94:12:8b:8d:da:16:94:eb:9d:27: 8a:a6:ce:8a:fd:e2:9e:82:64:f7:80:90:17:4e:bd:16:a1:7a: 41:2d:00:69:f5:a5:e6:9f:b6:26:cd:e1:b9:a5:57:1d:a1:12: 83:51:b4:29:0c:d3:14:4e:bb:18:94:cd:65:ed:37:ae:92:0d: ac:92:7d:28:9b:8c:5b:db:73:6b:90:41:1e:c8:8f:f7:2b:77: 4f:8d:a5:f6:ed:b1:ca:d5:7b:af:91:b0:ff:1a:28:9f:5e:7c: d4:22:3d:af:de:6b:0b:b1:93:d6:ae:8b:c9:38:c5:48:d8:1b: c0:47:95:9f:87:1e:48:f8:99:94:f8:ce:30:3c:00:74:88:81: 9c:b0:1b:d8:79:7d:f7:dc:e4:3a:fa:5b:79:21:c8:41:90:bd: b2:db:95:c1:08:e0:ac:69:b1:2c:f3:c1:72:7d:38:3d:67:5e: 57:3f:10:4f:95:9a:71:05:2e:34:a0:8e:e2:31:98:83:dc:ac: dd:43:ae:f9:a3:18:d1:e3:c9:ed:29:f9:d4:2e:88:ed:d6:cb: a3:ae:b3:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjQwNTAyMTk0NTQ2WhcNMjQwNTA5MTk0NTQ2WjAYMRYwFAYD VQQDEw02NjMzZWQ2YS03N2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1g1QbdghDS+efIL6lzL15dtBx/7zS9qoNe4/xEyUEzzhyr/40RL8JuQKwrQ9 dg/LRCsv8I5dkxMTBYcQImIiBJ3czr+eeCfDowAT9qzBNil8Fd0T9bheBQoAXQcK KATSEDC9+5giSuanNcoOSnifNPUnxaxd6VHXlAigOQ2CM43l0kwBCLOHfWkd6gfx 2oyTMVFSmBMEU/9cE2Is//DbhpjdaHhg0zUanNNbGYheSvyse8WjNtNupqIiqV/J wUIore6vTZ1JvYDvUAYPQp1DpPVLbeT/kHkC9LiZS9W98kN+K/4AuAY1OLG2Z3+X xIby/hhMAybTq9juOLRhvJ8K2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7F7W8o THvJjZ+qgxOuYyUpbhW9MB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQpbNAtVKJKdgKeVCpzoT/mUx9Afh7fhWFLMU0JzqdOGseQtIExEum etwP6ZQSi43aFpTrnSeKps6K/eKegmT3gJAXTr0WoXpBLQBp9aXmn7YmzeG5pVcd oRKDUbQpDNMUTrsYlM1l7Teukg2skn0om4xb23NrkEEeyI/3K3dPjaX27bHK1Xuv kbD/GiifXnzUIj2v3msLsZPWrovJOMVI2BvAR5Wfhx5I+JmU+M4wPAB0iIGcsBvY eX333OQ6+lt5IchBkL2y25XBCOCsabEs88FyfTg9Z15XPxBPlZpxBS40oI7iMZiD 3KzdQ675oxjR48ntKfnULojt1sujrrMr -----END CERTIFICATE-----Generated at Thu May 2 20:50:35 2024 by rpki-client on console-fra.rpki-client.org