$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: 6JZVOr1CKPdjGPqxMP0P4ShmH7yLDxNC4OwFkU05Pns= Subject key identifier: 1F:3A:C7:80:9F:81:D4:69:06:91:3D:5E:7B:FA:DF:F4:CB:61:5D:26 Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 05F9 Signing time: Wed 01 May 2024 00:16:06 +0000 Manifest this update: Wed 01 May 2024 00:16:05 +0000 Manifest next update: Wed 08 May 2024 00:16:05 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: wOEvQlHLlKSTcHlDyzCYQ7R05YRGMUG7326b9s6j81s=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: 4czhrhOoEPPLRlm870JaZ7BSYNzclM7RWEOrXebneb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: May 1 00:16:05 2024 GMT Not After : May 8 00:16:05 2024 GMT Subject: CN=663189c5-b187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:13:b2:4e:7a:b7:3c:0d:d4:48:98:bc:e8: 63:80:f7:dc:7f:0c:a5:f0:a4:9d:37:ee:0f:eb:67: 2f:7b:24:b9:02:11:43:9f:6f:42:cc:56:7e:7f:0a: e8:d4:47:ce:6c:da:8f:7f:d8:bd:d5:26:62:2a:0f: 97:bd:90:7b:6b:8d:a8:cd:65:7a:47:f8:ed:73:ce: b6:b3:d2:be:96:f2:c7:4a:da:e8:85:36:6c:8d:d6: 32:03:74:4f:35:93:c6:99:43:7b:14:b9:2d:3f:06: bb:11:e1:00:e8:37:3f:07:1d:ae:8f:5b:09:03:7f: c0:d5:79:1c:ab:0e:72:cd:10:a6:e7:1e:5c:46:2a: ea:d1:43:7e:4f:b3:33:57:d6:a6:75:34:ca:95:12: 11:86:dd:51:8c:0c:21:95:8a:a2:4f:c3:08:30:00: 75:ae:75:49:32:4a:84:55:db:d3:a2:4e:f4:08:07: 00:88:36:5b:1b:5d:fe:47:0a:25:2a:c4:62:27:0e: 17:15:70:ae:3e:28:04:82:95:7d:84:a6:b3:dd:99: cd:72:f9:e0:05:5b:52:2b:fd:01:bd:62:89:95:cd: 98:31:05:9c:68:d6:50:64:ad:17:3e:61:34:8b:42: 35:d1:1e:f9:45:90:79:50:f7:cc:0f:d5:48:2c:84: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3A:C7:80:9F:81:D4:69:06:91:3D:5E:7B:FA:DF:F4:CB:61:5D:26 X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:91:8d:7b:a1:9e:c4:b3:d4:5e:e0:21:37:ac:28:da:b0:2c: d4:77:f9:bd:cd:87:8e:ba:d5:33:8c:c4:5d:95:8b:82:54:fc: d0:70:2c:c6:ba:19:04:1b:fd:b6:fc:ed:88:27:11:3c:8d:3d: 9c:41:a8:85:9d:1b:72:3d:7f:08:69:7a:99:77:bf:2f:f4:ac: 96:5a:3a:13:09:b3:36:9a:98:e0:e0:7f:f1:9f:de:84:4e:c6: 2b:97:fb:27:01:27:50:07:02:8b:08:20:34:4f:67:54:2e:ec: 35:75:55:8a:60:d0:af:17:72:13:b4:96:58:d6:a1:ff:43:97: 77:e3:1e:df:64:e6:47:0d:84:b3:70:0a:3e:93:a9:6e:4d:99: a9:65:b3:18:9a:d2:f6:8f:12:63:af:6e:4d:ce:72:61:ee:56: f4:2a:0f:08:3a:67:60:1f:12:e2:15:b5:cf:02:16:93:ca:bd: 57:59:34:79:08:94:e3:d9:44:01:4f:3b:04:93:cb:7c:f8:05: b0:5e:83:9d:2d:2e:1d:a6:05:58:c3:51:f0:0e:67:b5:24:d6: 88:92:db:f4:fd:5d:76:8c:57:b6:fd:ee:da:95:48:29:ac:65: 64:5e:48:00:d7:56:6a:3d:5d:a7:4d:d0:ee:19:2a:9b:cd:3d: 1d:2d:f5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjQwNTAxMDAxNjA1WhcNMjQwNTA4MDAxNjA1WjAYMRYwFAYD VQQDEw02NjMxODljNS1iMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGsTsk56tzwN1EiYvOhjgPfcfwyl8KSdN+4P62cveyS5AhFDn29CzFZ+fwro 1EfObNqPf9i91SZiKg+XvZB7a42ozWV6R/jtc862s9K+lvLHStrohTZsjdYyA3RP NZPGmUN7FLktPwa7EeEA6Dc/Bx2uj1sJA3/A1Xkcqw5yzRCm5x5cRirq0UN+T7Mz V9amdTTKlRIRht1RjAwhlYqiT8MIMAB1rnVJMkqEVdvTok70CAcAiDZbG13+Rwol KsRiJw4XFXCuPigEgpV9hKaz3ZnNcvngBVtSK/0BvWKJlc2YMQWcaNZQZK0XPmE0 i0I10R75RZB5UPfMD9VILIQcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB86x4Cf gdRpBpE9Xnv63/TLYV0mMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPkY17oZ7Es9Re4CE3rCjasCzUd/m9zYeOutUzjMRdlYuCVPzQcCzG uhkEG/22/O2IJxE8jT2cQaiFnRtyPX8IaXqZd78v9KyWWjoTCbM2mpjg4H/xn96E TsYrl/snASdQBwKLCCA0T2dULuw1dVWKYNCvF3ITtJZY1qH/Q5d34x7fZOZHDYSz cAo+k6luTZmpZbMYmtL2jxJjr25NznJh7lb0Kg8IOmdgHxLiFbXPAhaTyr1XWTR5 CJTj2UQBTzsEk8t8+AWwXoOdLS4dpgVYw1HwDme1JNaIktv0/V12jFe2/e7alUgp rGVkXkgA11ZqPV2nTdDuGSqbzT0dLfUx -----END CERTIFICATE-----Generated at Wed May 1 01:38:31 2024 by rpki-client on console-ams.rpki-client.org