$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: 7+T+qaboPp/+/oL6cyp+Ee21PHvDF6Ig0lfFybdBH2E= Subject key identifier: 22:A9:09:F6:20:17:C6:02:43:B3:D5:07:66:3A:FF:88:8E:5C:F7:8B Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 015E Signing time: Tue 07 May 2024 04:54:55 +0000 Manifest this update: Tue 07 May 2024 04:54:55 +0000 Manifest next update: Tue 14 May 2024 04:54:55 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: HfovPWQnOszlX7wxhD+WJBf8uPtUOzqbFxu7/RYVS6I=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: yPrP3KfHG7wLOXeRQBj72uPHDwFnUsuzGYQzTqa6CNw=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: B7a0cc4M3TqVL00njQ+jIzQgPHM3dCTJPPwbvbD6C8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: May 7 04:54:55 2024 GMT Not After : May 14 04:54:55 2024 GMT Subject: CN=6639b41f-4f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:af:d1:da:27:51:d4:d0:17:92:30:e8:e5: cf:a1:cc:a0:82:a9:c6:e6:54:23:fc:69:c6:d7:8b: 72:df:7e:a4:7d:61:34:2f:c1:51:35:e0:24:7b:10: d9:ef:8b:f6:3b:34:d4:09:23:87:b7:b4:a5:f0:f8: 5c:1b:ba:fd:92:80:17:60:c9:a3:63:58:11:03:27: a9:48:c1:e3:22:6b:64:b3:51:37:7c:32:f0:70:bb: 2a:99:d5:55:bc:04:4a:f0:f1:d6:84:da:a8:2c:d1: ff:01:79:71:bb:b9:24:b2:a8:cb:01:b9:32:88:e9: 61:ea:3c:d5:62:1b:70:ad:39:ea:ad:1f:84:6e:1b: 33:73:27:6b:23:d2:69:bf:49:c7:9b:0a:00:c2:9c: c6:63:0c:5e:f3:43:d5:27:b0:aa:f8:5c:7b:cd:3e: c8:a3:85:63:4a:b6:cb:9f:c0:11:b9:67:09:36:b4: 28:5f:6f:33:d3:6b:d0:b9:22:b2:4e:a5:49:9e:4b: 5e:e6:99:c7:9e:2b:96:26:00:37:63:cb:d4:fc:01: 10:4b:30:e4:17:8f:c4:8f:dd:6f:9b:cf:13:3c:54: e0:44:bb:00:53:91:17:c7:5f:3a:a9:35:fc:c8:56: ea:7e:c5:df:a1:d0:81:cc:d4:b2:ba:66:f1:6f:59: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A9:09:F6:20:17:C6:02:43:B3:D5:07:66:3A:FF:88:8E:5C:F7:8B X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1a:2e:01:02:fe:18:d7:99:b3:f3:df:16:02:04:38:20:b2: 01:a2:74:b2:34:9c:68:65:5a:80:ce:a0:54:44:b7:7f:eb:60: 96:c5:fe:9c:c5:20:16:ae:66:ee:03:e9:b9:58:b0:f2:36:7a: 0d:38:f0:7e:24:e0:9f:90:4c:2f:f7:22:59:a1:42:68:89:0e: 8d:a5:a6:58:d6:99:dc:f7:5e:c6:6f:9c:bc:3c:17:7d:7b:56: 40:46:57:35:50:a4:84:8a:2f:69:e6:19:58:ba:3b:db:d2:cb: 8d:41:90:db:0b:d0:a5:cb:06:d2:d3:e2:47:af:f4:36:f3:01: d4:af:ab:d2:2e:57:5a:84:58:91:ed:aa:a2:95:a0:29:d8:e1: a1:f2:13:32:18:dc:0c:ad:1b:be:9f:6e:f6:52:c1:9a:19:dd: 4d:cc:a8:d1:e5:94:dd:f5:c3:70:98:4e:78:05:47:d0:13:5f: 03:97:79:61:02:25:98:1c:11:cd:8f:60:b5:51:aa:d2:85:60: a8:2b:df:51:08:4c:34:2d:0e:72:5a:5c:87:19:77:a3:5f:36: b3:e1:05:9b:94:55:ae:0e:b4:a5:6a:f5:47:90:03:aa:29:79: 02:a4:b5:9c:9e:e6:d1:42:2d:da:fb:55:27:25:ef:9d:5e:11: 72:dc:bf:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjQwNTA3MDQ1NDU1WhcNMjQwNTE0MDQ1NDU1WjAYMRYwFAYD VQQDEw02NjM5YjQxZi00ZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRav0donUdTQF5Iw6OXPocyggqnG5lQj/GnG14ty336kfWE0L8FRNeAkexDZ 74v2OzTUCSOHt7Sl8PhcG7r9koAXYMmjY1gRAyepSMHjImtks1E3fDLwcLsqmdVV vARK8PHWhNqoLNH/AXlxu7kksqjLAbkyiOlh6jzVYhtwrTnqrR+EbhszcydrI9Jp v0nHmwoAwpzGYwxe80PVJ7Cq+Fx7zT7Io4VjSrbLn8ARuWcJNrQoX28z02vQuSKy TqVJnkte5pnHniuWJgA3Y8vU/AEQSzDkF4/Ej91vm88TPFTgRLsAU5EXx186qTX8 yFbqfsXfodCBzNSyumbxb1l1iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKpCfYg F8YCQ7PVB2Y6/4iOXPeLMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaGi4BAv4Y15mz898WAgQ4ILIBonSyNJxoZVqAzqBURLd/62CWxf6c xSAWrmbuA+m5WLDyNnoNOPB+JOCfkEwv9yJZoUJoiQ6NpaZY1pnc917Gb5y8PBd9 e1ZARlc1UKSEii9p5hlYujvb0suNQZDbC9ClywbS0+JHr/Q28wHUr6vSLldahFiR 7aqilaAp2OGh8hMyGNwMrRu+n272UsGaGd1NzKjR5ZTd9cNwmE54BUfQE18Dl3lh AiWYHBHNj2C1UarShWCoK99RCEw0LQ5yWlyHGXejXzaz4QWblFWuDrSlavVHkAOq KXkCpLWcnubRQi3a+1UnJe+dXhFy3L/7 -----END CERTIFICATE-----Generated at Tue May 7 05:40:31 2024 by rpki-client on console-fra.rpki-client.org