$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: SE+b0khReUVl+hiTapfuTp42tpV8zwbHZLTQSuFC0nU= Subject key identifier: 7A:0E:72:7F:42:03:8F:AF:33:B8:86:1A:12:35:04:EB:72:83:B3:98 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 07AC Signing time: Thu 30 May 2024 22:40:49 +0000 Manifest this update: Thu 30 May 2024 22:40:49 +0000 Manifest next update: Thu 06 Jun 2024 22:40:49 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: 3rnMqs3oqzfSYf4tQMZQVEfthXnwT/9/7hugXfnRD0s=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: I+1rdMFlu0j7ia3qK0QlemFhqFiTfHZq0qG04UwCuns=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: VodRmYDriDSsRlbAbKg2ev0WOG4qQ0c561pGb4IEG9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: May 30 22:40:49 2024 GMT Not After : Jun 6 22:40:49 2024 GMT Subject: CN=66590071-fe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:9d:c1:7d:3c:c7:72:7e:7a:c4:95:24:a5: 59:d5:ee:fa:46:5c:5a:65:e0:df:9e:73:3c:21:0f: cd:95:ec:55:fb:cc:9b:8b:55:a8:9f:7a:ac:80:8a: d6:cd:e0:f3:4d:24:8e:77:02:c9:df:4b:28:4b:6f: 4c:d2:10:78:ed:68:15:a9:c6:67:65:da:e6:8f:bc: c5:7e:c3:c8:bc:ca:89:a4:99:0e:9e:26:0c:83:81: 17:44:a8:90:1f:e0:22:93:af:f7:aa:1c:1a:39:ca: c7:4c:02:aa:79:5f:2e:bc:39:68:b2:99:da:63:d4: cb:b9:d2:8f:20:a6:69:a3:1b:8b:a6:f0:31:63:41: 0a:05:4f:3b:ae:a3:1d:37:24:2b:ac:3f:bf:83:c8: e2:80:91:70:2a:f8:a6:8c:31:4a:51:24:96:63:7e: 3a:6a:d4:c7:56:f4:39:97:ac:5a:3e:3f:11:50:8d: b4:da:7d:4f:e8:f6:c5:72:fd:16:a1:76:c6:9a:b9: 8e:69:61:b2:84:91:db:67:88:ec:be:f2:65:88:ed: aa:e2:7a:ac:59:5f:70:77:01:1f:98:0f:0a:c0:23: 97:cc:9e:0a:24:b7:be:cd:af:1a:8b:84:18:bf:b7: 9a:63:44:e8:6c:23:c6:4c:4c:fc:68:33:2f:f7:f0: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:72:7F:42:03:8F:AF:33:B8:86:1A:12:35:04:EB:72:83:B3:98 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:f8:c6:32:f3:fa:40:a1:ad:eb:30:99:a2:ce:07:88:53:88: b7:50:b2:84:3f:c5:84:67:a3:b6:08:3d:13:0b:8e:1c:2a:2f: 30:de:fb:87:95:3d:4f:3f:6f:ef:bc:5d:fa:5e:a7:30:63:b4: b3:8c:da:8c:e2:77:0c:9b:0c:d3:cf:4b:2a:6e:15:66:42:03: 6c:6a:67:a5:55:96:57:3f:1a:38:ad:ce:cc:95:bf:99:1c:83: 4c:33:86:d2:2b:ae:51:89:da:a7:0c:74:4d:0e:00:18:fa:c5: 77:f5:be:39:f1:6d:89:5d:ca:d4:fc:c9:19:d6:64:ec:b0:ff: ef:a1:a5:42:e9:0a:b2:cc:df:dd:b2:83:d4:29:19:61:6a:f2: ba:e0:e6:94:09:73:2a:48:e1:74:19:2c:a5:2a:a6:8e:24:68: 99:f0:50:62:fb:e9:ec:f2:93:c1:b5:9b:0c:6c:b9:53:77:87: 80:34:ae:b4:78:96:ab:64:87:74:f4:ba:09:be:f3:6e:6d:f6: 62:32:20:a9:2f:5b:34:1d:93:da:c1:91:e5:c2:c4:73:fd:d9: 47:b6:85:35:99:b3:61:0f:3a:b9:53:dc:b5:91:a0:6e:77:fe: 97:56:aa:23:c8:5f:46:c2:0a:db:7b:fd:cc:e5:ea:73:30:65: 91:6e:86:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjQwNTMwMjI0MDQ5WhcNMjQwNjA2MjI0MDQ5WjAYMRYwFAYD VQQDEw02NjU5MDA3MS1mZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mGdwX08x3J+esSVJKVZ1e76RlxaZeDfnnM8IQ/NlexV+8ybi1Won3qsgIrW zeDzTSSOdwLJ30soS29M0hB47WgVqcZnZdrmj7zFfsPIvMqJpJkOniYMg4EXRKiQ H+Aik6/3qhwaOcrHTAKqeV8uvDlospnaY9TLudKPIKZpoxuLpvAxY0EKBU87rqMd NyQrrD+/g8jigJFwKvimjDFKUSSWY346atTHVvQ5l6xaPj8RUI202n1P6PbFcv0W oXbGmrmOaWGyhJHbZ4jsvvJliO2q4nqsWV9wdwEfmA8KwCOXzJ4KJLe+za8ai4QY v7eaY0TobCPGTEz8aDMv9/DBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoOcn9C A4+vM7iGGhI1BOtyg7OYMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY+MYy8/pAoa3rMJmizgeIU4i3ULKEP8WEZ6O2CD0TC44cKi8w3vuH lT1PP2/vvF36XqcwY7SzjNqM4ncMmwzTz0sqbhVmQgNsamelVZZXPxo4rc7Mlb+Z HINMM4bSK65RidqnDHRNDgAY+sV39b458W2JXcrU/MkZ1mTssP/voaVC6QqyzN/d soPUKRlhavK64OaUCXMqSOF0GSylKqaOJGiZ8FBi++ns8pPBtZsMbLlTd4eANK60 eJarZId09LoJvvNubfZiMiCpL1s0HZPawZHlwsRz/dlHtoU1mbNhDzq5U9y1kaBu d/6XVqojyF9Gwgrbe/3M5epzMGWRboab -----END CERTIFICATE-----Generated at Thu May 30 23:45:12 2024 by rpki-client on console-fra.rpki-client.org