$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: 7vl80PzQERJqRI+zHubfTio9Vz6TJs/IQsJ3LFjy8k0= Subject key identifier: 7E:D6:F1:A8:73:30:FC:09:CB:96:08:E5:4D:0E:68:CA:F8:BB:C5:E0 Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 2B Signing time: Fri 17 May 2024 08:37:47 +0000 Manifest this update: Fri 17 May 2024 08:37:46 +0000 Manifest next update: Fri 24 May 2024 08:37:46 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: +xB2w/o2NVWx/NejV06xP5DxNhM7nPb1vvkY05e+Spc=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: 3vecBaYSA0dCDccgeJa6vhwbdGlQxHLI8NtvBrCqZzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: May 17 08:37:46 2024 GMT Not After : May 24 08:37:46 2024 GMT Subject: CN=6647175b-b262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:20:61:9b:ca:1f:8f:aa:00:e8:8a:e8:74: 63:e2:60:a7:fb:07:3d:49:97:05:fc:8d:5e:40:c5: ad:41:d2:95:8d:a6:0b:78:fd:8f:5c:0d:cb:12:70: 7c:8f:7a:60:dd:b2:73:38:ab:a0:af:8a:84:ef:59: 7d:33:2a:69:9f:1f:ed:0e:a9:3a:19:38:b2:d4:d1: 2f:4b:2a:91:e6:0c:9b:ec:a0:2f:51:b2:e9:86:8d: 64:15:52:a2:b9:dc:25:5b:8a:ef:94:31:4a:cd:09: 6f:eb:00:c4:5b:1f:af:b2:dc:35:4a:22:d1:76:61: fb:68:06:eb:49:42:81:3e:2f:90:12:29:83:a6:19: ee:1c:df:56:cf:ef:65:b3:16:0e:b0:96:71:a7:90: ef:4b:dd:2a:9c:61:fd:b1:7c:65:3f:a5:7b:19:6e: 5e:3b:e6:ba:32:c9:53:71:eb:25:14:61:ac:c8:ac: 0b:ac:23:cd:94:83:8c:5f:31:80:2b:40:63:90:fa: 93:4f:7b:a0:9c:8c:f0:98:94:a7:ab:08:fa:8a:21: 63:42:33:df:fc:47:19:ec:e2:26:e7:94:a1:05:19: fc:b0:da:b0:93:b9:36:e1:7e:a3:f1:06:03:b1:e0: 40:23:37:4c:e9:56:a3:e3:43:f8:a7:88:78:0e:40: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:F1:A8:73:30:FC:09:CB:96:08:E5:4D:0E:68:CA:F8:BB:C5:E0 X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e2:a5:c6:a9:24:78:ab:8a:40:21:46:90:28:5e:0d:e4:b3: 7b:85:21:93:35:bc:c3:08:8c:e4:6e:8b:43:c2:d8:c3:88:e2: b5:d9:7e:30:f2:dc:68:ca:14:aa:c5:8b:e8:dc:48:54:9b:e6: 43:69:99:64:c3:fa:65:f2:45:c0:ad:58:14:05:93:dc:7c:25: 17:34:0a:c0:05:f5:3b:ce:fe:c8:32:b8:0c:3e:77:4d:fe:c3: d6:e1:cc:1a:9b:e2:9e:54:99:5c:6e:8d:85:4e:d5:7b:cc:3f: e5:61:bb:00:a2:27:fe:a3:be:71:10:4a:93:1f:70:d5:fc:2c: 51:df:b7:3a:d7:26:15:10:bd:c5:be:e2:ce:56:5b:a4:32:1a: 99:7c:98:3c:65:66:fc:73:c8:ad:86:55:b8:9a:2a:0a:fe:33: d7:fd:27:9a:57:1e:35:41:7e:6f:12:42:0a:63:09:ee:32:25: 3a:aa:c5:cd:5f:61:ec:05:bf:6d:cb:62:86:3b:d5:7f:9b:70: e4:87:54:57:38:a2:39:86:93:40:2f:de:75:d3:48:97:b8:2b: 12:36:30:f0:5d:dc:10:b9:32:6a:fe:07:16:29:40:d1:b5:e3: 96:5d:c0:46:83:b5:04:b6:a7:41:e7:39:db:51:76:3a:c1:72: 9f:11:31:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjkyOTExMC8GA1UEBRMoQTkyMTREQjk5MTg0OUIyOUM0RjA0NUMzMzY0NzBFOUQ4 MkM0OENFMjAeFw0yNDA1MTcwODM3NDZaFw0yNDA1MjQwODM3NDZaMBgxFjAUBgNV BAMTDTY2NDcxNzViLWIyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLxyBhm8ofj6oA6IrodGPiYKf7Bz1JlwX8jV5Axa1B0pWNpgt4/Y9cDcsScHyP emDdsnM4q6CvioTvWX0zKmmfH+0OqToZOLLU0S9LKpHmDJvsoC9RsumGjWQVUqK5 3CVbiu+UMUrNCW/rAMRbH6+y3DVKItF2YftoButJQoE+L5ASKYOmGe4c31bP72Wz Fg6wlnGnkO9L3SqcYf2xfGU/pXsZbl475royyVNx6yUUYazIrAusI82Ug4xfMYAr QGOQ+pNPe6CcjPCYlKerCPqKIWNCM9/8Rxns4ibnlKEFGfyw2rCTuTbhfqPxBgOx 4EAjN0zpVqPjQ/iniHgOQMHvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUftbxqHMw /AnLlgjlTQ5oyvi7xeAwHwYDVR0jBBgwFoAUqSFNuZGEmynE8EXDNkcOnYLEjOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTI5L0JFQkRFQTk4RDVF RTExRUU5RTIwMTc3REM0RjlBRTAyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVNGTnVaR0VteW5FOEVYRE5rY09uWUxFak9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTI5L0JFQkRFQTk4RDVFRTExRUU5RTIwMTc3REM0RjlBRTAyL3FTRk51WkdFbXlu RThFWEROa2NPbllMRWpPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfipcapJHirikAhRpAoXg3ks3uFIZM1vMMIjORui0PC2MOI4rXZfjDy 3GjKFKrFi+jcSFSb5kNpmWTD+mXyRcCtWBQFk9x8JRc0CsAF9TvO/sgyuAw+d03+ w9bhzBqb4p5UmVxujYVO1XvMP+VhuwCiJ/6jvnEQSpMfcNX8LFHftzrXJhUQvcW+ 4s5WW6QyGpl8mDxlZvxzyK2GVbiaKgr+M9f9J5pXHjVBfm8SQgpjCe4yJTqqxc1f YewFv23LYoY71X+bcOSHVFc4ojmGk0Av3nXTSJe4KxI2MPBd3BC5Mmr+BxYpQNG1 45ZdwEaDtQS2p0HnOdtRdjrBcp8RMZ0= -----END CERTIFICATE-----Generated at Fri May 17 10:59:15 2024 by rpki-client on console-ams.rpki-client.org