$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: RUcRoMw4e+vElyqX2jRD1JFD0u7qLt/ys5iFbqv2qOc= Subject key identifier: BF:9C:7E:DB:82:67:05:AC:5D:54:2A:09:1F:72:73:75:20:56:EA:AE Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 01EE Signing time: Fri 03 May 2024 04:20:27 +0000 Manifest this update: Fri 03 May 2024 04:20:26 +0000 Manifest next update: Fri 10 May 2024 04:20:26 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: UG0T8VJKEkOH7nONIpHcBjodc5uOZZaqwd5Uq8ENCe0=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: fgjQSywOQySi33KZcCK0XMHWIUlpuOcHxSki8u97JnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: May 3 04:20:26 2024 GMT Not After : May 10 04:20:26 2024 GMT Subject: CN=6634660b-71cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:b7:bd:11:9a:f6:92:25:60:47:12:7e:af: c9:dc:36:08:43:fc:37:99:61:a6:30:56:28:38:99: 78:51:bd:79:56:be:97:d2:5d:5a:c8:b5:e0:e7:af: 08:4e:60:b3:6f:a0:2a:15:5d:78:8f:c8:1b:bf:32: 6b:65:a4:1f:17:49:c4:2f:44:ac:83:d4:02:b6:33: a5:d7:a8:56:17:ca:71:bd:4b:74:e1:cb:51:99:b9: 00:1c:5b:15:29:c3:fe:e8:9b:37:e0:62:97:46:35: 8e:00:ce:19:5d:4d:2b:e4:50:17:54:0b:54:f3:2b: ac:45:90:77:4e:3c:f2:82:65:d2:bb:4d:37:f2:df: 24:39:6c:0c:e2:77:a5:bc:9e:fa:75:1c:08:0e:46: cf:94:c3:94:e6:09:fb:4c:e6:99:f9:da:3f:77:f3: ab:dd:59:fc:e3:b2:3c:5d:d9:0b:9b:12:fe:b0:9e: c3:5b:cd:4f:a8:c5:3f:21:a5:0a:89:61:df:11:85: b5:ae:ef:12:6d:32:70:89:39:0f:ce:43:0b:db:e0: f4:c9:6f:57:a6:ac:f6:5a:44:18:0b:9e:ff:92:2c: 1f:ca:06:16:9f:f0:0b:2b:05:2e:ab:2b:f0:7f:1e: 90:0e:4d:06:b1:c4:04:ce:98:ee:88:ed:e0:4c:cf: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:7E:DB:82:67:05:AC:5D:54:2A:09:1F:72:73:75:20:56:EA:AE X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b2:02:6b:97:a8:c1:cc:f0:27:e5:79:d0:f5:9b:a2:b3:da: 07:38:bf:86:3f:0f:03:d3:81:17:a4:e1:c9:09:0d:c6:47:e1: 3d:62:fb:6d:0f:0d:ae:5d:bd:f3:37:74:52:41:22:44:9e:b2: 18:a4:47:93:8f:4a:c9:e4:f1:d4:a3:d1:0f:06:f8:7a:c3:89: 05:62:9c:c9:58:d3:f1:1a:59:d7:7a:ab:64:09:08:3f:20:b9: 6a:cd:e4:3a:9a:1a:b3:70:04:ce:76:70:44:e2:91:4f:6d:0f: de:fe:10:e8:6d:bf:04:19:9d:98:a3:a4:4e:05:b1:8d:e4:68: 2e:f9:e9:95:36:a4:2e:eb:bc:d6:5a:1b:3b:bd:5d:06:ff:12: 40:43:3c:39:e9:74:d2:d1:dd:f2:c4:9d:48:82:76:12:c6:f5: ae:5e:65:5e:e5:6e:34:f8:78:ad:e6:8a:2d:9d:18:f8:bb:fd: c2:3f:60:fc:a4:0a:ee:ea:46:52:05:0c:13:c0:dc:2c:e6:e3: 66:d2:59:d3:67:8a:57:8b:55:a7:0a:7e:4b:4a:40:4c:18:54: 90:33:2f:d8:9e:d1:de:73:cb:a6:b7:3a:3c:23:6b:c0:e7:e4: 1f:9e:74:25:6b:95:81:c9:0a:97:02:5c:a4:bf:ef:10:30:52: 46:8a:12:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjQwNTAzMDQyMDI2WhcNMjQwNTEwMDQyMDI2WjAYMRYwFAYD VQQDEw02NjM0NjYwYi03MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArua3vRGa9pIlYEcSfq/J3DYIQ/w3mWGmMFYoOJl4Ub15Vr6X0l1ayLXg568I TmCzb6AqFV14j8gbvzJrZaQfF0nEL0Ssg9QCtjOl16hWF8pxvUt04ctRmbkAHFsV KcP+6Js34GKXRjWOAM4ZXU0r5FAXVAtU8yusRZB3TjzygmXSu0038t8kOWwM4nel vJ76dRwIDkbPlMOU5gn7TOaZ+do/d/Or3Vn847I8XdkLmxL+sJ7DW81PqMU/IaUK iWHfEYW1ru8SbTJwiTkPzkML2+D0yW9Xpqz2WkQYC57/kiwfygYWn/ALKwUuqyvw fx6QDk0GscQEzpjuiO3gTM/8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+cftuC ZwWsXVQqCR9yc3UgVuquMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7sgJrl6jBzPAn5XnQ9Zuis9oHOL+GPw8D04EXpOHJCQ3GR+E9Yvtt Dw2uXb3zN3RSQSJEnrIYpEeTj0rJ5PHUo9EPBvh6w4kFYpzJWNPxGlnXeqtkCQg/ ILlqzeQ6mhqzcATOdnBE4pFPbQ/e/hDobb8EGZ2Yo6ROBbGN5Ggu+emVNqQu67zW Whs7vV0G/xJAQzw56XTS0d3yxJ1IgnYSxvWuXmVe5W40+Hit5ootnRj4u/3CP2D8 pAru6kZSBQwTwNws5uNm0lnTZ4pXi1WnCn5LSkBMGFSQMy/YntHec8umtzo8I2vA 5+QfnnQla5WByQqXAlykv+8QMFJGihLY -----END CERTIFICATE-----Generated at Fri May 3 05:32:36 2024 by rpki-client on console-ams.rpki-client.org