$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: bid1HIRt2udN9idOTWbYwnblf+pjqqU0UZkUxtgPOag= Subject key identifier: 54:56:3A:64:E3:33:92:3C:28:90:C5:82:83:E1:96:EC:8D:C5:72:04 Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 0672 Signing time: Sat 18 May 2024 23:29:53 +0000 Manifest this update: Sat 18 May 2024 23:29:53 +0000 Manifest next update: Sat 25 May 2024 23:29:53 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: isNq96InrbdZP/H8wfSIdMiCn+aZDPSCYbeP3CAaxFM=) 2: 765EF4EC2FB411EB9720723EC4F9AE02.roa (hash: g/bDSbiGLy9Ib5ggQX4O6TPdKn7KMsf6PZdpxfys5jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: May 18 23:29:53 2024 GMT Not After : May 25 23:29:53 2024 GMT Subject: CN=664939f1-59bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:60:4b:24:8c:7f:6b:3f:4d:2e:08:63:2d: 29:b9:93:dc:48:8f:fc:78:39:67:69:e0:f3:24:19: c6:a4:85:49:03:e1:58:46:fb:4a:c6:63:93:93:a8: 9e:13:5a:57:3f:98:a6:f5:11:f6:93:95:12:c3:3c: 1c:b0:a2:33:70:85:57:a0:12:78:ee:21:8a:74:0a: b1:e6:ec:26:8c:fd:0f:a6:20:d0:cb:3e:f8:9d:b8: 52:c1:e7:66:e9:8f:30:53:f1:72:8c:d1:29:40:08: 84:30:94:8b:66:7a:45:8a:6f:d2:8a:65:4e:fb:55: 05:f3:79:25:69:20:9e:ae:dc:62:b1:a9:45:47:70: d4:8f:fa:a7:33:f4:e4:b1:e4:db:80:0e:ab:7e:6b: 31:77:b0:3f:e2:ab:e6:a7:ed:89:cf:ea:d8:5c:3c: af:64:8d:76:e0:64:61:bc:48:84:81:93:69:eb:5e: 4f:60:31:45:77:32:ef:33:89:2d:82:ab:dc:c4:48: a0:e1:e3:1b:21:d1:32:69:85:a0:33:c4:74:ef:9e: 96:15:6c:fe:46:8a:e2:e6:34:e9:bc:35:67:99:30: c7:96:52:5e:26:ae:a2:a8:d3:8c:8c:61:10:d2:c8: 7b:38:30:c5:e5:ef:e5:bb:f5:ce:b9:57:c8:29:5a: 3c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:56:3A:64:E3:33:92:3C:28:90:C5:82:83:E1:96:EC:8D:C5:72:04 X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b8:43:a4:37:bd:f9:83:9d:f3:a3:63:f6:8c:13:a3:8d:f7: b1:1e:55:d3:af:30:1b:89:67:fe:86:9d:7e:64:45:a0:bb:6a: b8:94:c0:79:11:8b:3a:74:b1:04:ef:8e:cf:df:00:7a:8f:c0: 65:b3:58:19:b8:20:f5:8e:bd:48:f8:76:ea:48:4a:c2:d3:90: 68:46:88:79:1f:52:dc:c5:52:92:b0:95:d4:8a:1a:a3:03:13: 2b:aa:9c:f2:92:e7:af:02:43:fe:90:7e:32:1e:ec:ba:9c:5b: 2d:54:d8:84:16:3b:52:d0:e0:7b:19:41:59:a6:a4:f4:d6:cc: de:9e:86:7d:c2:ca:76:dd:9a:32:de:25:40:e5:d8:96:84:a2: 44:76:07:24:dd:ce:1e:0a:fb:4d:e7:87:76:e7:29:3a:3a:12: 61:bb:7a:93:5f:97:7b:fe:3f:c4:5c:b9:ff:4b:d0:e7:d5:e4: 20:84:47:e9:bb:66:62:b7:f2:eb:b7:12:f7:bf:d0:37:de:91: e0:92:dc:35:13:14:17:e8:ce:08:69:4a:7a:5c:5f:47:d0:39: 1b:2d:90:33:03:7d:26:1c:fd:17:af:d6:16:aa:e0:d7:e0:27: d9:18:b9:ba:5d:ed:c0:d7:3e:8b:78:c2:c7:75:10:b7:7d:a8: 36:1f:59:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjQwNTE4MjMyOTUzWhcNMjQwNTI1MjMyOTUzWjAYMRYwFAYD VQQDEw02NjQ5MzlmMS01OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxVgSySMf2s/TS4IYy0puZPcSI/8eDlnaeDzJBnGpIVJA+FYRvtKxmOTk6ie E1pXP5im9RH2k5USwzwcsKIzcIVXoBJ47iGKdAqx5uwmjP0PpiDQyz74nbhSwedm 6Y8wU/FyjNEpQAiEMJSLZnpFim/SimVO+1UF83klaSCertxisalFR3DUj/qnM/Tk seTbgA6rfmsxd7A/4qvmp+2Jz+rYXDyvZI124GRhvEiEgZNp615PYDFFdzLvM4kt gqvcxEig4eMbIdEyaYWgM8R0756WFWz+Rori5jTpvDVnmTDHllJeJq6iqNOMjGEQ 0sh7ODDF5e/lu/XOuVfIKVo8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRWOmTj M5I8KJDFgoPhluyNxXIEMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQuEOkN735g53zo2P2jBOjjfexHlXTrzAbiWf+hp1+ZEWgu2q4lMB5 EYs6dLEE747P3wB6j8Bls1gZuCD1jr1I+HbqSErC05BoRoh5H1LcxVKSsJXUihqj AxMrqpzykuevAkP+kH4yHuy6nFstVNiEFjtS0OB7GUFZpqT01szenoZ9wsp23Zoy 3iVA5diWhKJEdgck3c4eCvtN54d25yk6OhJhu3qTX5d7/j/EXLn/S9Dn1eQghEfp u2Zit/LrtxL3v9A33pHgktw1ExQX6M4IaUp6XF9H0DkbLZAzA30mHP0Xr9YWquDX 4CfZGLm6Xe3A1z6LeMLHdRC3fag2H1nQ -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org