$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json) Hash identifier: 0TAHGuzUp6/wKPMrFyHmXN+sSSuKkOHksRDwIhsBsRA= Subject key identifier: CB:52:E0:B1:43:16:28:9D:D9:89:F7:6A:19:84:0F:A3:FD:15:B6:5D Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft Manifest number: 0966 Signing time: Sat 04 May 2024 21:11:50 +0000 Manifest this update: Sat 04 May 2024 21:11:49 +0000 Manifest next update: Sat 11 May 2024 21:11:49 +0000 Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: u/xZ3tE+7LOPHKLoDFXOmVT0OFWXtuQXqxq3JdO8wWE=) 2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: nJS/y/XuThPiPVOQl0kW5TPZfhPfqDNIwVRLES/rfFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: May 4 21:11:49 2024 GMT Not After : May 11 21:11:49 2024 GMT Subject: CN=6636a495-a49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:75:eb:c3:70:ad:53:a9:db:15:fb:ed:6c: 9a:03:e3:05:b9:2a:80:7c:ea:4c:d7:b1:4c:ce:9e: 79:c7:15:88:3e:f9:6e:52:8e:a7:24:18:8a:b4:bc: a9:0f:6c:bf:2f:6b:d0:4c:a4:58:18:3d:6c:d9:6c: 97:b5:63:df:14:07:0a:54:d5:e9:c2:ef:cc:fd:60: a7:66:0f:80:3d:91:b0:69:1f:0e:a2:d0:4e:9a:30: a6:a6:ee:27:8a:e6:46:d9:c4:57:cf:01:1d:89:b3: 58:37:77:c6:4a:06:a5:86:a2:2d:3d:12:43:d2:2e: 82:aa:2b:7f:36:8a:df:6c:de:0a:fa:cb:58:97:fe: 51:3a:6e:5f:17:78:e5:35:5c:e5:d3:79:39:23:30: 34:c1:62:62:f2:18:fc:c4:52:9a:11:b8:9a:06:2d: 1f:36:aa:cd:78:f6:93:8e:4d:b0:ea:f6:a6:74:d2: 47:1d:32:8e:0e:20:e6:be:0b:54:97:ed:ee:02:52: 46:ab:c7:d8:7b:ac:d0:07:b3:c6:0a:b0:62:6e:66: 9a:c3:27:ab:c4:df:62:2c:a4:f5:46:5a:c5:c4:c7: a4:64:1a:89:23:eb:b8:b8:38:04:b9:88:b4:fa:02: fc:21:f6:ea:ea:c4:4f:9c:1b:93:ff:fa:03:b7:af: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:E0:B1:43:16:28:9D:D9:89:F7:6A:19:84:0F:A3:FD:15:B6:5D X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:35:29:a1:c4:95:69:dd:97:f4:53:10:48:5d:30:f9:8e: b5:3f:9c:d9:61:17:51:4c:a9:9a:79:aa:b7:1b:52:92:d6:1f: bb:18:7d:f8:90:5e:ae:52:b6:45:a3:d1:7b:09:7b:97:4a:e7: 1d:ed:ce:ef:0f:f7:06:7f:8a:5c:13:83:84:e5:f4:6c:37:9c: 7a:cf:79:0c:53:75:7d:24:86:2b:49:85:e5:98:fa:6c:50:9e: e1:29:d0:11:a2:d1:be:f9:65:c5:5f:7f:a9:3b:bd:0a:8a:6b: 75:10:69:8b:96:fc:d5:a7:1d:3b:32:9d:af:49:8c:33:0e:d8: 47:2e:30:32:19:72:12:66:64:51:2d:e9:11:f7:33:39:cc:d5: 8c:e3:31:1b:95:d0:18:d3:fc:88:6a:62:1d:eb:cc:fd:7b:7d: c3:a8:f5:05:5f:28:0c:b9:9c:a8:8f:c4:b0:93:a4:32:f3:b2: 21:c6:a0:1f:d4:dd:dd:07:10:bb:9e:49:6a:8c:59:1d:0a:85: 5a:bc:7b:47:9e:5e:2b:d6:a4:1f:80:4f:91:6b:68:18:30:ae: e4:b8:61:9f:6d:ca:1b:11:06:34:2c:31:71:7c:06:c5:ce:96: a9:cb:6e:36:d3:fa:27:d7:9c:00:8d:a0:a5:eb:c7:cd:ee:2d: 60:e5:28:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjQwNTA0MjExMTQ5WhcNMjQwNTExMjExMTQ5WjAYMRYwFAYD VQQDEw02NjM2YTQ5NS1hNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPd168NwrVOp2xX77WyaA+MFuSqAfOpM17FMzp55xxWIPvluUo6nJBiKtLyp D2y/L2vQTKRYGD1s2WyXtWPfFAcKVNXpwu/M/WCnZg+APZGwaR8OotBOmjCmpu4n iuZG2cRXzwEdibNYN3fGSgalhqItPRJD0i6Cqit/NorfbN4K+stYl/5ROm5fF3jl NVzl03k5IzA0wWJi8hj8xFKaEbiaBi0fNqrNePaTjk2w6vamdNJHHTKODiDmvgtU l+3uAlJGq8fYe6zQB7PGCrBibmaawyerxN9iLKT1RlrFxMekZBqJI+u4uDgEuYi0 +gL8Ifbq6sRPnBuT//oDt68o0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtS4LFD Fiid2Yn3ahmED6P9FbZdMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJENy9GOTMyMTkxMjZDQjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlq dHlpRE8tQ3RaaU41YnNpaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVpjUpocSVad2X9FMQSF0w+Y61P5zZYRdRTKmaeaq3G1KS1h+7GH34 kF6uUrZFo9F7CXuXSucd7c7vD/cGf4pcE4OE5fRsN5x6z3kMU3V9JIYrSYXlmPps UJ7hKdARotG++WXFX3+pO70Kimt1EGmLlvzVpx07Mp2vSYwzDthHLjAyGXISZmRR LekR9zM5zNWM4zEbldAY0/yIamId68z9e33DqPUFXygMuZyoj8Swk6Qy87IhxqAf 1N3dBxC7nklqjFkdCoVavHtHnl4r1qQfgE+Ra2gYMK7kuGGfbcobEQY0LDFxfAbF zpapy2420/on15wAjaCl68fN7i1g5SiI -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org