$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: vaCJ+84reiJybasxRkDvH4ngqIQONq5Ze0IVdCxNbJY= Subject key identifier: 7D:25:95:4C:2F:88:D7:C5:DE:5D:B3:37:F4:2E:21:71:5E:1E:77:C6 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 0722 Signing time: Sat 18 May 2024 22:42:33 +0000 Manifest this update: Sat 18 May 2024 22:42:32 +0000 Manifest next update: Sat 25 May 2024 22:42:32 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: 27+18P80WTwqrmfGalnBGzWL2zyX5lI9gwwG9T3bRQ8=) 2: 426AABC85B4911ED8862970DC4F9AE02.roa (hash: wpGhBH/J+/3fOukxxBIf1uBClg/KuHxGIQw1iGgeNuM=) 3: A6D1B25E5AE511EEAD94D258C4F9AE02.roa (hash: EzEYabFcQBT7DQUHvsyIR1OYJ3FLe0PQZ9jlh2G8s6c=) 4: 47BE563CEA5A11EE92E5221CC4F9AE02.roa (hash: 7x4NakpluCkmWYYDryCnQ1IzpwHgcjNVH6n3LNHtQAs=) 5: 1B72273C5C2311EDA3D17465C4F9AE02.roa (hash: mDw0kbJm/iTDRcernzDRE+RgGH524TQRk+/OLJTymJ8=) 6: 6DAF87AA21BA11ECB2027C56C4F9AE02.roa (hash: qwkFPw4Rc2+jY6s2aO6HPfgbL0rdxDEn0Izi2UbjB9s=) 7: C49C7ED272E111EDBF1C7C81C4F9AE02.roa (hash: AA9pKQD3K1s6bDOsh71a6T8aY7Z2HrBGgcZtF4T6xEg=) 8: 030BA3A6D78A11EEB7D96310C4F9AE02.roa (hash: m6jnolx7aJrlX6SiFtgg9jnhRDD9OlFHffN8lKfl76U=) 9: 8FFCD106CF5511ED870A7753C4F9AE02.roa (hash: HGq9rZMUk6E+ZJUpbIS2PTfkw0l15X0kWo1fQB0mkmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: May 18 22:42:32 2024 GMT Not After : May 25 22:42:32 2024 GMT Subject: CN=66492ed9-98c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:21:97:d1:e7:f7:41:50:92:e2:62:db:ad: cd:69:84:dd:dd:4d:26:06:d2:3a:8b:e2:5c:2e:e0: d3:e6:9b:16:66:9e:ea:b9:7e:93:06:c3:ac:9b:54: 8a:c3:63:82:44:2e:cb:6c:b9:fe:1a:ea:98:3d:31: 41:96:b6:a9:12:06:fc:ec:62:82:f6:5b:95:2c:f4: 09:73:a0:68:fb:21:df:85:c0:58:66:66:2d:93:62: 65:3f:61:ce:64:1a:50:f0:78:66:00:68:fe:8c:d2: c8:01:7c:f6:94:a9:40:6f:1e:d6:d5:b6:8e:f1:6e: 7c:eb:ab:34:74:c9:83:83:0b:12:a8:7f:7b:77:85: 14:0a:f2:fc:de:40:e2:3c:2f:81:3a:f3:f8:65:1b: c3:5b:41:15:45:59:66:da:8d:d1:b0:e6:7c:a7:e9: 4e:37:c9:3d:45:54:75:c7:45:a9:be:5d:d5:7c:7d: b8:6a:52:c7:a0:ad:28:cc:f8:3c:53:d6:be:5f:0f: f8:51:47:dd:50:8d:34:e3:50:eb:b6:29:7b:32:61: 48:9c:a2:58:87:f0:e0:f3:72:29:5e:e0:e9:c7:61: 49:40:00:64:0a:b4:b0:bd:96:af:60:bd:70:33:a8: 9b:47:f0:e2:f0:f9:68:1d:d5:7a:80:0e:1b:0d:7f: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:95:4C:2F:88:D7:C5:DE:5D:B3:37:F4:2E:21:71:5E:1E:77:C6 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:71:e0:1d:5e:93:d5:4b:a4:72:50:dd:bf:f5:29:3c:d3: 90:e0:94:71:ee:b5:bd:ab:14:83:52:55:37:31:1c:1e:21:0c: 52:07:21:44:85:bb:5c:fc:62:a3:04:bf:19:4c:b2:62:f8:63: 58:63:3b:6a:0b:8d:77:fe:1d:8b:c3:2f:f2:48:4b:e7:de:9a: c8:25:f2:1e:2b:78:ca:87:b8:11:f4:86:f5:0a:17:55:65:d8: f8:40:be:82:e1:6d:96:74:51:c3:79:9f:12:b6:a1:9c:a1:cf: 0d:7f:05:c7:2d:55:42:3c:b8:63:de:30:7f:c6:c1:27:32:a8: e2:a1:c5:78:c3:54:64:ff:b2:9d:ba:af:db:54:af:f6:53:ad: b0:f8:23:9e:9d:62:6c:e9:77:54:88:d3:cf:7b:e6:6d:ae:8b: c0:c0:3e:c9:94:97:a7:09:9b:83:4b:ba:f2:7f:8b:e3:f4:29: 64:19:0a:eb:13:4e:2b:df:8d:79:8f:36:30:59:49:e3:29:25: 23:8c:d6:a9:a2:1f:41:e7:c3:c4:d5:73:4d:30:6c:be:99:05: 94:c8:d9:44:2b:28:cf:e8:d2:4a:3f:4f:db:7d:33:51:7e:99: 41:c3:dc:da:c3:05:9e:c9:75:c4:90:1b:3f:47:23:d6:10:51: 1c:29:e7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjQwNTE4MjI0MjMyWhcNMjQwNTI1MjI0MjMyWjAYMRYwFAYD VQQDEw02NjQ5MmVkOS05OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw34hl9Hn90FQkuJi263NaYTd3U0mBtI6i+JcLuDT5psWZp7quX6TBsOsm1SK w2OCRC7LbLn+GuqYPTFBlrapEgb87GKC9luVLPQJc6Bo+yHfhcBYZmYtk2JlP2HO ZBpQ8HhmAGj+jNLIAXz2lKlAbx7W1baO8W5866s0dMmDgwsSqH97d4UUCvL83kDi PC+BOvP4ZRvDW0EVRVlm2o3RsOZ8p+lON8k9RVR1x0Wpvl3VfH24alLHoK0ozPg8 U9a+Xw/4UUfdUI0041Drtil7MmFInKJYh/Dg83IpXuDpx2FJQABkCrSwvZavYL1w M6ibR/Di8PloHdV6gA4bDX8AdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0llUwv iNfF3l2zN/QuIXFeHnfGMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhUHHgHV6T1UukclDdv/UpPNOQ4JRx7rW9qxSDUlU3MRweIQxSByFE hbtc/GKjBL8ZTLJi+GNYYztqC413/h2Lwy/ySEvn3prIJfIeK3jKh7gR9Ib1ChdV Zdj4QL6C4W2WdFHDeZ8StqGcoc8NfwXHLVVCPLhj3jB/xsEnMqjiocV4w1Rk/7Kd uq/bVK/2U62w+COenWJs6XdUiNPPe+ZtrovAwD7JlJenCZuDS7ryf4vj9ClkGQrr E04r3415jzYwWUnjKSUjjNapoh9B58PE1XNNMGy+mQWUyNlEKyjP6NJKP0/bfTNR fplBw9zawwWeyXXEkBs/RyPWEFEcKec2 -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org