$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: NHYFSW9kaxx3KmlQw7+csT5zbejZUFFuHXT90tojo6s= Subject key identifier: ED:4A:C0:2D:24:55:7F:26:E6:26:C9:BE:4D:11:05:3E:BB:77:BF:6C Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: DE Signing time: Sat 18 May 2024 16:17:54 +0000 Manifest this update: Sat 18 May 2024 16:17:53 +0000 Manifest next update: Sat 25 May 2024 16:17:53 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: r7Mtk9aSlhqF7CSj2iacVj7tTe1hOZbBED0PYrM9LR8=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: 2Sa4Qh8zy7UAIyROQUdYWBW/nS/7CVePmZ6lyfynp9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: May 18 16:17:53 2024 GMT Not After : May 25 16:17:53 2024 GMT Subject: CN=6648d4b1-3b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:b1:67:97:bd:a5:17:92:e3:9e:d1:22:4f: 19:a3:8e:3b:c5:ab:f0:78:54:bf:b4:05:29:02:e4: 7d:20:a8:70:1c:94:75:b1:87:d7:1d:e6:aa:ef:5f: 76:ca:f0:0f:98:34:16:13:3d:08:df:86:5b:ce:3d: 95:b0:c6:8a:e0:9b:ab:ed:f0:dc:dc:f6:ca:84:38: 7e:31:96:8e:53:64:26:21:64:ca:a7:53:1f:56:a6: d0:ce:2f:96:0e:64:92:6a:97:e0:1a:34:d6:e3:81: de:cb:a7:95:28:74:a7:70:41:e0:6a:20:70:87:93: 54:5c:2d:67:44:26:49:ba:fb:a1:e9:f4:fc:0f:0d: 30:ac:40:37:96:82:ea:3f:b0:e9:2d:94:68:a7:08: 09:23:9c:36:d3:6e:93:5b:6e:29:df:c4:ac:d1:aa: 9c:f1:a0:66:e0:9e:b6:f7:52:a4:a9:bf:d4:d3:67: 7f:3f:1d:76:a0:5d:77:2d:a4:28:2d:9f:7c:d6:c6: 4e:bb:61:cf:f4:83:2c:0d:c9:91:bc:f9:da:1f:85: 8b:08:6c:a1:d5:c5:1d:5a:85:f5:c2:2d:d8:8d:6a: 42:d5:17:e2:c0:ff:63:48:1b:2d:ac:7f:9b:de:37: 56:3a:3d:4d:d0:57:f3:aa:45:70:d6:a1:81:10:ab: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:C0:2D:24:55:7F:26:E6:26:C9:BE:4D:11:05:3E:BB:77:BF:6C X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:23:28:cf:6f:54:a3:3f:8b:e4:53:f2:94:71:dd:69:d0:b7: 43:5c:cd:57:5f:3b:21:8f:68:d5:4e:99:71:02:10:90:db:ba: 8f:17:56:8e:69:7f:a9:75:e0:1c:71:53:26:7f:a8:50:2d:bc: 27:56:14:ff:95:e8:88:f0:fa:de:e5:35:ed:33:9f:1b:0d:0b: 01:19:e7:2b:a9:da:d5:d8:37:42:9a:89:b6:49:0f:ed:0a:3a: 4a:99:79:e0:a1:32:93:35:55:c9:e9:53:20:91:81:63:93:36: e9:2a:03:d8:1a:62:a4:2f:4c:24:b6:f5:82:c3:54:f7:ec:7a: 2c:5f:76:4e:28:6a:7c:be:36:d5:0a:5c:08:c2:cf:7c:c8:b2: 37:9a:8c:36:85:22:09:f5:93:02:38:65:20:3c:a8:8b:63:65: 20:e4:be:67:fd:dd:c5:55:e3:07:4c:b0:0e:f2:10:38:e6:7d: 64:3f:50:c7:42:bd:b0:4d:8c:0e:6e:42:3d:b9:ef:21:8f:7d: 8b:d4:49:6a:73:32:84:2c:fc:28:6c:1a:a3:77:0e:6c:a1:f4: fe:9c:2a:5d:03:36:b4:14:f4:da:2d:99:f2:9c:19:1e:cb:82: 5b:06:93:a7:6e:9e:23:58:8f:7f:65:3f:37:1a:42:6d:22:da: 29:c3:7c:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjQwNTE4MTYxNzUzWhcNMjQwNTI1MTYxNzUzWjAYMRYwFAYD VQQDEw02NjQ4ZDRiMS0zYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SqxZ5e9pReS457RIk8Zo447xavweFS/tAUpAuR9IKhwHJR1sYfXHeaq7192 yvAPmDQWEz0I34Zbzj2VsMaK4Jur7fDc3PbKhDh+MZaOU2QmIWTKp1MfVqbQzi+W DmSSapfgGjTW44Hey6eVKHSncEHgaiBwh5NUXC1nRCZJuvuh6fT8Dw0wrEA3loLq P7DpLZRopwgJI5w2026TW24p38Ss0aqc8aBm4J6291Kkqb/U02d/Px12oF13LaQo LZ981sZOu2HP9IMsDcmRvPnaH4WLCGyh1cUdWoX1wi3YjWpC1RfiwP9jSBstrH+b 3jdWOj1N0FfzqkVw1qGBEKv6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1KwC0k VX8m5ibJvk0RBT67d79sMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOIyjPb1SjP4vkU/KUcd1p0LdDXM1XXzshj2jVTplxAhCQ27qPF1aO aX+pdeAccVMmf6hQLbwnVhT/leiI8Pre5TXtM58bDQsBGecrqdrV2DdCmom2SQ/t CjpKmXngoTKTNVXJ6VMgkYFjkzbpKgPYGmKkL0wktvWCw1T37HosX3ZOKGp8vjbV ClwIws98yLI3mow2hSIJ9ZMCOGUgPKiLY2Ug5L5n/d3FVeMHTLAO8hA45n1kP1DH Qr2wTYwObkI9ue8hj32L1ElqczKELPwobBqjdw5sofT+nCpdAza0FPTaLZnynBke y4JbBpOnbp4jWI9/ZT83GkJtItopw3zk -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org