$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: N2Qzln9ubN3dlApy8JDoXHkBGrQeDVaupJWUQBXsUz8= Subject key identifier: 18:7F:EE:AC:59:01:DD:87:2B:97:05:1C:47:7C:58:AB:6F:C0:31:F3 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0397 Signing time: Sun 19 May 2024 02:38:49 +0000 Manifest this update: Sun 19 May 2024 02:38:48 +0000 Manifest next update: Sun 26 May 2024 02:38:48 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: JAwHJNJFbHD9FjVdFfEzBEW80WqAGUHFLU+RlIlzBLg=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: BBjPZuth9y/c45Bak0At2ZjJGKm9wxuC946aQ8aMlsA=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: O0BcYyJsKcRiYGr2cjq8imow2Ta4XFCZ+PfIgeggNB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: May 19 02:38:48 2024 GMT Not After : May 26 02:38:48 2024 GMT Subject: CN=66496639-ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5b:b8:45:b4:f2:08:83:45:fa:55:0a:dc:38: 15:da:9c:ca:23:df:d5:8b:e3:70:61:c5:61:21:c8: d7:61:09:c9:0f:15:d6:13:27:65:be:20:08:50:08: 54:61:ae:f9:ff:9b:ad:cc:34:aa:c3:94:84:4c:8c: 45:86:d6:a3:b3:6e:89:43:a0:fb:43:44:b2:14:73: 71:b2:9c:2a:2b:0a:13:db:de:82:14:30:af:49:80: bc:80:98:75:aa:2e:90:62:53:c3:eb:40:93:4d:cd: 0f:6a:16:44:9a:a9:4d:72:45:b0:6d:5d:fa:99:4b: 78:bd:8b:94:77:cc:15:87:0d:e2:a0:40:7e:4d:7d: 62:7b:a9:0e:b4:f2:65:b8:cd:ad:32:5d:56:58:c0: fc:f9:a5:e8:4d:f3:8b:24:c2:3f:71:b5:9d:3b:f1: 90:6a:3d:b3:02:91:fd:3b:42:f4:df:bf:b3:59:d9: 17:60:67:74:ca:ce:b2:5c:dc:36:77:80:3b:93:34: 63:a2:80:c7:3c:8c:6e:ae:12:72:36:93:7f:d3:8c: 76:ef:ce:6a:e9:61:80:b2:a4:89:fa:7d:c3:74:ee: cf:02:7e:6d:24:9e:2a:0e:73:a5:a7:0f:fe:0d:28: ed:d4:9a:b3:8b:de:32:5f:0c:05:29:bd:88:39:38: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:EE:AC:59:01:DD:87:2B:97:05:1C:47:7C:58:AB:6F:C0:31:F3 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:e1:d1:de:97:09:f4:d2:2f:9d:f8:1c:40:4a:dd:2a:bf: da:b3:e8:6a:8b:07:17:16:1a:83:98:8b:66:92:0c:0a:6b:9e: 26:86:66:59:91:bc:0f:d1:88:13:70:c6:45:66:cf:1b:09:4e: fd:db:12:97:6e:cc:3f:74:f3:fe:a5:dc:56:fa:63:dc:f0:44: f0:f5:26:fb:ea:8e:8f:20:93:fe:7e:b0:ac:52:ab:bb:9b:41: 3f:90:55:27:2e:3a:59:98:05:64:44:2f:d6:b5:e4:d3:7c:a4: 5a:ad:13:c2:ba:d6:e7:ca:22:55:33:90:16:a1:0e:12:4b:03: 06:d7:c1:98:09:86:99:5c:c0:62:78:63:80:84:21:ab:02:21: f3:88:44:e3:8d:db:56:4d:e7:6a:8b:29:a7:cf:5a:14:33:98: 5f:77:cd:bd:3f:2c:40:fd:6f:58:e6:4b:c9:ee:b4:b0:54:fc: e2:a3:a9:b6:09:39:3e:82:65:ed:59:c5:c0:4d:87:ec:db:06: 97:f3:4a:c5:28:c5:75:b9:e3:09:be:24:05:a9:f4:b0:a1:b4: 3d:07:7b:38:bf:1a:47:07:f5:9d:75:03:38:eb:98:5d:99:5e: 2d:ca:53:67:03:fc:c3:2d:81:2a:7a:1e:72:c0:c8:d3:01:2c: b7:da:a4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjQwNTE5MDIzODQ4WhcNMjQwNTI2MDIzODQ4WjAYMRYwFAYD VQQDEw02NjQ5NjYzOS1lZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61u4RbTyCINF+lUK3DgV2pzKI9/Vi+NwYcVhIcjXYQnJDxXWEydlviAIUAhU Ya75/5utzDSqw5SETIxFhtajs26JQ6D7Q0SyFHNxspwqKwoT296CFDCvSYC8gJh1 qi6QYlPD60CTTc0PahZEmqlNckWwbV36mUt4vYuUd8wVhw3ioEB+TX1ie6kOtPJl uM2tMl1WWMD8+aXoTfOLJMI/cbWdO/GQaj2zApH9O0L037+zWdkXYGd0ys6yXNw2 d4A7kzRjooDHPIxurhJyNpN/04x2785q6WGAsqSJ+n3DdO7PAn5tJJ4qDnOlpw/+ DSjt1Jqzi94yXwwFKb2IOThp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh/7qxZ Ad2HK5cFHEd8WKtvwDHzMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl7OHR3pcJ9NIvnfgcQErdKr/as+hqiwcXFhqDmItmkgwKa54mhmZZ kbwP0YgTcMZFZs8bCU792xKXbsw/dPP+pdxW+mPc8ETw9Sb76o6PIJP+frCsUqu7 m0E/kFUnLjpZmAVkRC/WteTTfKRarRPCutbnyiJVM5AWoQ4SSwMG18GYCYaZXMBi eGOAhCGrAiHziETjjdtWTedqiymnz1oUM5hfd829PyxA/W9Y5kvJ7rSwVPzio6m2 CTk+gmXtWcXATYfs2waX80rFKMV1ueMJviQFqfSwobQ9B3s4vxpHB/WddQM465hd mV4tylNnA/zDLYEqeh5ywMjTASy32qTR -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org