$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json) Hash identifier: ekqI4RE9dGWgA+WLt3xsGwgRvC2LKhpe80OBHx6VgJ8= Subject key identifier: 45:CD:5E:B6:1C:17:70:65:5E:BE:96:F0:94:FD:FB:D3:FF:FE:D9:0D Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Certificate serial: 15F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft Manifest number: 15E3 Signing time: Thu 02 May 2024 17:16:56 +0000 Manifest this update: Thu 02 May 2024 17:16:56 +0000 Manifest next update: Thu 09 May 2024 17:16:56 +0000 Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: 9dubtjLsUVfJX5D2btwwySF87VyR43CuAkxsljyKeZ0=) 2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: JUGvP0VfYGf1cQNe0da3Yd6T9iCGabpJpXti+sDdJ20=) 3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: 3LNlvPtzA3tMttWpEXnP+j4Dk+109O2Kb8OwTlK+xas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5617 (0x15f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Validity Not Before: May 2 17:16:56 2024 GMT Not After : May 9 17:16:56 2024 GMT Subject: CN=6633ca88-8daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:45:3c:e1:fc:6e:69:ea:41:f7:87:d9:2b: 6c:d8:0c:94:ac:61:3c:e5:ae:eb:c0:e3:78:70:e2: e1:9a:58:bc:72:7d:20:d9:6b:1e:ac:60:95:a1:d8: 46:bf:a2:a1:7b:d1:5f:b9:45:07:47:c5:53:2a:e8: 77:d4:b0:00:bb:f0:9e:9d:0d:12:4a:ca:1d:fa:8d: 1a:7e:d4:da:fd:5d:1b:17:53:13:36:0e:74:6f:e4: ee:40:90:9f:bf:f0:b7:1c:93:a9:05:ba:40:13:f4: 8a:11:c6:d0:6b:ef:f4:fe:17:09:81:bc:e2:ca:dc: c3:f3:77:9d:7d:2a:e6:72:4a:d5:49:29:eb:65:dd: 42:09:84:b6:89:cf:e5:df:53:83:e7:0d:c3:b3:72: 8f:03:e2:f5:2b:37:26:4d:d8:c1:bd:41:95:f1:13: 77:f6:6b:c7:c2:b8:89:e8:f3:89:bd:64:c0:3e:32: f7:5a:e4:9b:a5:8e:09:b8:25:bd:de:8c:55:9a:2c: 45:95:ab:e0:0e:e9:3f:1e:a8:13:67:36:22:5c:09: 09:ee:48:82:fc:b0:90:23:66:82:fd:39:2e:82:b2: ee:f4:e5:67:f0:a6:f1:2b:2a:b2:e2:9e:39:4a:04: aa:93:d0:2e:14:3c:ac:17:85:5c:56:c3:92:b9:fa: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CD:5E:B6:1C:17:70:65:5E:BE:96:F0:94:FD:FB:D3:FF:FE:D9:0D X509v3 Authority Key Identifier: keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ef:3f:99:6f:be:da:1f:0b:de:34:c7:19:ac:b0:8c:ee:52: ca:a8:75:18:b9:fc:b0:bb:1d:26:27:0c:2e:ef:81:81:77:a0: 20:d3:89:43:84:76:a6:59:11:0c:d6:74:aa:d2:79:f2:ec:b1: 8c:d7:1f:fc:ac:20:a2:58:c2:98:6b:35:ca:df:64:07:f1:0b: f4:54:b4:4f:45:1f:35:7e:7f:36:f2:c5:bc:0c:db:2d:eb:83: cb:e9:d7:66:f6:2f:3e:d0:2e:19:12:61:45:d3:15:91:9e:e9: da:5b:e2:cc:e8:3b:47:2b:89:5e:5d:4f:26:fc:ce:89:1e:c7: a2:ca:d2:17:be:ff:41:43:e5:8b:8e:bc:8f:52:6f:f1:22:c2: 3d:44:82:e4:79:17:8c:3a:a2:65:ca:a8:7a:c0:03:67:8f:f0: 1e:35:b4:7e:70:e2:f2:0d:e1:96:05:63:5d:f3:7e:ae:cc:83: 18:b0:87:ad:08:68:ad:e6:27:d5:b2:35:41:ca:33:ff:e7:b1: 42:dd:31:a3:06:48:7a:5e:19:c9:24:66:42:a3:de:62:43:6f: 35:0f:3b:d3:c2:98:25:03:68:7f:43:3f:d5:2d:52:49:22:bf: 15:64:c4:77:f2:6e:2d:12:14:f2:71:97:c7:00:92:8e:95:95: b6:ef:aa:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3RTgxMTAvBgNVBAUTKEE5NzUyNTk5ODQwRDZFRUNBQTFCRjY4QzA5MDVBRDdE RjQ2OUEyRTcwHhcNMjQwNTAyMTcxNjU2WhcNMjQwNTA5MTcxNjU2WjAYMRYwFAYD VQQDEw02NjMzY2E4OC04ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArElFPOH8bmnqQfeH2Sts2AyUrGE85a7rwON4cOLhmli8cn0g2WserGCVodhG v6Khe9FfuUUHR8VTKuh31LAAu/CenQ0SSsod+o0aftTa/V0bF1MTNg50b+TuQJCf v/C3HJOpBbpAE/SKEcbQa+/0/hcJgbziytzD83edfSrmckrVSSnrZd1CCYS2ic/l 31OD5w3Ds3KPA+L1KzcmTdjBvUGV8RN39mvHwriJ6POJvWTAPjL3WuSbpY4JuCW9 3oxVmixFlavgDuk/HqgTZzYiXAkJ7kiC/LCQI2aC/TkugrLu9OVn8KbxKyqy4p45 SgSqk9AuFDysF4VcVsOSufpEjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXNXrYc F3BlXr6W8JT9+9P//tkNMB8GA1UdIwQYMBaAFKl1JZmEDW7sqhv2jAkFrX30aaLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjdFOC82OTJGNzJGMkY5 QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1eXFHX2FNQ1FXdGZmUnBv dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYVWxtWVFOYnV5cUdfYU1DUVd0ZmZScG91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjdFOC82OTJGNzJGMkY5QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1 eXFHX2FNQ1FXdGZmUnBvdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn7z+Zb77aHwveNMcZrLCM7lLKqHUYufywux0mJwwu74GBd6Ag04lD hHamWREM1nSq0nny7LGM1x/8rCCiWMKYazXK32QH8Qv0VLRPRR81fn828sW8DNst 64PL6ddm9i8+0C4ZEmFF0xWRnunaW+LM6DtHK4leXU8m/M6JHseiytIXvv9BQ+WL jryPUm/xIsI9RILkeReMOqJlyqh6wANnj/AeNbR+cOLyDeGWBWNd836uzIMYsIet CGit5ifVsjVByjP/57FC3TGjBkh6XhnJJGZCo95iQ281DzvTwpglA2h/Qz/VLVJJ Ir8VZMR38m4tEhTycZfHAJKOlZW276oM -----END CERTIFICATE-----Generated at Thu May 2 20:04:53 2024 by rpki-client on console-ams.rpki-client.org