$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: XyTIscxAI+w/JH18GiAH457h004x8p0hUl8yqVoXuNw= Subject key identifier: D3:B4:85:45:08:E2:E7:A8:4F:0D:F5:EA:10:28:05:02:2F:80:C5:22 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 0575 Signing time: Sun 05 May 2024 00:46:46 +0000 Manifest this update: Sun 05 May 2024 00:46:45 +0000 Manifest next update: Sun 12 May 2024 00:46:45 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: zd3ZhTS5KwwW2xHIgBgMhDZPLQVb0PcDERPjPl6nzE0=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: EIN/njyu4BzcXMAIvogPwN+JdMGS8bE5pSJ0XvZCpCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: May 5 00:46:45 2024 GMT Not After : May 12 00:46:45 2024 GMT Subject: CN=6636d6f6-6d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:a0:e5:99:0d:ae:c1:56:54:82:36:e9:a1: 06:b5:0a:da:d0:d9:fb:25:2f:43:82:66:51:56:48: 38:0b:8d:27:f2:14:ee:2d:82:e3:66:5b:cc:98:19: a0:ec:07:e6:82:67:85:50:04:41:4d:e9:5e:18:4d: 93:e5:ac:84:d9:91:07:2a:42:f5:fd:4a:7a:e9:1e: e5:3a:c2:8e:41:93:77:92:d9:cb:e4:6b:a5:4a:d4: f0:26:ae:7e:67:34:5e:f2:69:73:fc:68:9e:45:d8: dd:0d:22:54:12:3a:ff:85:28:39:0a:51:68:32:63: 2e:99:8b:97:6e:6d:d7:56:cd:f7:42:3d:11:77:7c: 44:8d:53:b4:87:c5:de:a7:50:06:76:f9:df:1a:7e: 53:8d:f3:7b:d6:f4:6f:5c:7d:fc:d3:ad:89:6c:3a: f9:ad:9c:ed:53:44:f4:b8:52:ce:bd:75:fa:d7:01: 70:5b:d6:21:ac:f6:17:93:f5:cd:c4:92:50:d0:25: b2:37:e3:b9:ab:1b:17:22:de:12:44:a9:2e:0b:83: ac:d0:5d:ae:54:87:31:e8:87:09:a0:68:af:b4:e1: 22:b8:71:b2:5f:22:ba:e2:19:34:d1:48:70:3e:29: 9f:07:ec:62:50:56:24:fa:02:8c:4c:a3:07:02:5f: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B4:85:45:08:E2:E7:A8:4F:0D:F5:EA:10:28:05:02:2F:80:C5:22 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4b:b4:1c:79:33:e0:64:09:c2:dc:7c:b3:e6:b7:5e:62:93: bc:c5:7f:a1:63:8e:c8:2d:0e:1b:84:ac:f2:99:6b:6b:aa:29: c6:e5:d1:95:fc:27:eb:b7:e7:db:ca:53:2c:f1:69:fc:bd:a6: 55:a4:07:11:ee:b2:bb:e1:d5:88:32:65:e8:14:b0:30:3a:ed: 52:43:51:6d:2d:51:74:cf:e5:48:67:b1:be:5e:74:b4:4f:f0: 17:05:f1:b6:71:0f:8a:a3:4d:12:aa:00:9a:25:ed:cb:ef:6b: 02:27:bb:0e:88:fb:e4:8c:9c:3b:19:59:48:ed:4d:c9:df:7d: d0:7e:23:56:c1:8a:d2:59:96:03:e0:b1:d7:f2:af:87:e6:9d: 8d:59:c0:3f:fa:d6:8d:65:2c:8e:c2:45:fd:a1:b3:b0:f9:e4: 32:ff:d4:3d:ff:07:d7:b2:5f:dc:01:3c:63:2f:f3:5f:f0:b0: b9:86:bc:6b:69:1f:50:f6:70:7b:a5:d3:74:66:8d:38:b8:cd: 04:98:1a:74:20:d7:ab:75:c4:3d:b1:d7:e8:82:b5:4e:3a:cc: 57:bb:09:5a:96:29:fb:32:be:e1:a1:40:a5:08:f5:e0:6b:a4: e5:22:fe:c2:04:42:19:42:a7:1d:2a:70:2a:65:e5:9b:6b:75: 62:df:f3:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjQwNTA1MDA0NjQ1WhcNMjQwNTEyMDA0NjQ1WjAYMRYwFAYD VQQDEw02NjM2ZDZmNi02ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21ag5ZkNrsFWVII26aEGtQra0Nn7JS9DgmZRVkg4C40n8hTuLYLjZlvMmBmg 7AfmgmeFUARBTeleGE2T5ayE2ZEHKkL1/Up66R7lOsKOQZN3ktnL5GulStTwJq5+ ZzRe8mlz/GieRdjdDSJUEjr/hSg5ClFoMmMumYuXbm3XVs33Qj0Rd3xEjVO0h8Xe p1AGdvnfGn5TjfN71vRvXH38062JbDr5rZztU0T0uFLOvXX61wFwW9YhrPYXk/XN xJJQ0CWyN+O5qxsXIt4SRKkuC4Os0F2uVIcx6IcJoGivtOEiuHGyXyK64hk00Uhw PimfB+xiUFYk+gKMTKMHAl8M9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO0hUUI 4ueoTw316hAoBQIvgMUiMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuS7QceTPgZAnC3Hyz5rdeYpO8xX+hY47ILQ4bhKzymWtrqinG5dGV /Cfrt+fbylMs8Wn8vaZVpAcR7rK74dWIMmXoFLAwOu1SQ1FtLVF0z+VIZ7G+XnS0 T/AXBfG2cQ+Ko00SqgCaJe3L72sCJ7sOiPvkjJw7GVlI7U3J333QfiNWwYrSWZYD 4LHX8q+H5p2NWcA/+taNZSyOwkX9obOw+eQy/9Q9/wfXsl/cATxjL/Nf8LC5hrxr aR9Q9nB7pdN0Zo04uM0EmBp0INerdcQ9sdfogrVOOsxXuwlalin7Mr7hoUClCPXg a6TlIv7CBEIZQqcdKnAqZeWba3Vi3/NU -----END CERTIFICATE-----Generated at Sun May 5 01:22:24 2024 by rpki-client on console-fra.rpki-client.org