$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: vND6fBRc+OvQlEVcsZQHlYAN3TgUuEKtMgdz2uPQT78= Subject key identifier: E1:63:D2:51:92:86:65:F0:5B:DD:CE:D7:8E:E5:16:C8:C0:3B:6A:F3 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 047D Signing time: Wed 01 May 2024 01:58:31 +0000 Manifest this update: Wed 01 May 2024 01:58:31 +0000 Manifest next update: Wed 08 May 2024 01:58:31 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: 7VhvFBVUv5yhaeMBJ5q+iLK1yoVmrZrfn0+CF0vFK/U=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: L0GPAaTO/zUuo8/ywpi/empeBCEhT7S0e3ZEy5Wo7pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: May 1 01:58:31 2024 GMT Not After : May 8 01:58:31 2024 GMT Subject: CN=6631a1c7-eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:2d:36:88:86:1f:c0:69:c3:9c:25:8e:45: 6c:d4:f3:64:29:7f:37:20:07:4a:17:ff:14:04:4a: 01:ec:73:d9:ab:8d:06:42:a3:4c:dd:c0:64:9e:1c: 70:57:6a:1f:fc:34:ff:f0:43:8c:b5:e1:5f:a5:b7: 7c:ce:b6:9b:4b:6f:5b:56:cf:7e:33:53:9c:c8:2a: 72:ed:e2:4c:31:c9:65:14:46:56:cc:6e:9c:0d:42: cf:05:cc:bb:44:ff:51:19:06:ff:d9:c9:9b:cf:e4: 97:26:1e:3d:93:4d:3e:68:39:18:05:7f:73:f7:53: 96:76:17:07:79:39:a8:41:22:00:81:ac:6b:f9:4c: 96:d5:a7:c4:93:0b:d5:23:7a:e5:29:91:04:34:0d: 2c:63:f6:c9:67:69:dc:33:45:99:15:f2:3c:55:7d: bd:2e:14:cb:29:e3:19:24:79:95:91:29:d7:63:63: eb:f0:24:b4:5c:99:fd:57:30:8f:f1:44:66:d6:21: 31:85:de:42:43:4f:87:bf:40:07:a4:d5:37:ca:21: 1d:72:39:6b:27:52:19:06:68:b1:6d:b4:52:72:a4: fe:ba:f3:c7:51:67:9f:b7:39:26:2c:41:e2:8f:fe: 4a:7f:3c:ad:fc:a5:99:bc:ce:96:41:00:2c:e4:e4: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:D2:51:92:86:65:F0:5B:DD:CE:D7:8E:E5:16:C8:C0:3B:6A:F3 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d8:e8:83:40:c1:17:e8:9c:b2:00:ab:37:a1:ae:43:dd:21: b6:34:c7:e8:ae:df:ff:02:5b:04:cf:dc:f5:52:d7:ad:49:aa: 74:15:62:b9:42:01:21:03:2d:7c:b3:43:87:f5:8d:a5:f7:93: c4:07:58:96:d4:d9:03:b1:89:90:9f:80:37:b3:2e:da:c7:11: 10:c0:d6:a1:32:58:25:06:88:89:5d:fe:b9:32:04:b9:5d:e8: a3:9f:c8:63:79:5b:61:8f:cc:43:86:7c:a4:c4:50:e3:0b:05: 8d:61:f8:7a:fc:5a:fa:a4:ff:26:98:25:c6:ea:68:f2:90:c5: 65:af:1c:bc:ff:bb:6c:c9:9d:96:36:a6:01:9a:28:8e:23:06: 2a:10:d2:53:22:f1:91:8a:93:3e:ae:63:36:aa:fa:49:dc:f7: 18:f0:a2:d7:75:81:a0:9c:91:8b:14:f8:3d:d5:49:50:05:a9: ca:7e:da:6a:6e:81:55:8d:0d:8f:a2:e4:d7:0c:cc:1e:fd:e3: a5:20:7f:00:b3:30:ec:d7:97:8c:13:a3:a7:99:93:b8:a9:84: 7c:90:2b:6f:31:9d:e7:40:1e:ed:31:6d:02:55:d4:12:e5:f9: 2a:b1:40:04:18:35:cd:c9:10:db:9a:11:b0:49:ef:c8:7e:d4: be:da:b2:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjQwNTAxMDE1ODMxWhcNMjQwNTA4MDE1ODMxWjAYMRYwFAYD VQQDEw02NjMxYTFjNy1lYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlItNoiGH8Bpw5wljkVs1PNkKX83IAdKF/8UBEoB7HPZq40GQqNM3cBknhxw V2of/DT/8EOMteFfpbd8zrabS29bVs9+M1OcyCpy7eJMMcllFEZWzG6cDULPBcy7 RP9RGQb/2cmbz+SXJh49k00+aDkYBX9z91OWdhcHeTmoQSIAgaxr+UyW1afEkwvV I3rlKZEENA0sY/bJZ2ncM0WZFfI8VX29LhTLKeMZJHmVkSnXY2Pr8CS0XJn9VzCP 8URm1iExhd5CQ0+Hv0AHpNU3yiEdcjlrJ1IZBmixbbRScqT+uvPHUWeftzkmLEHi j/5Kfzyt/KWZvM6WQQAs5OQcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFj0lGS hmXwW93O147lFsjAO2rzMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC2OiDQMEX6JyyAKs3oa5D3SG2NMfort//AlsEz9z1UtetSap0FWK5 QgEhAy18s0OH9Y2l95PEB1iW1NkDsYmQn4A3sy7axxEQwNahMlglBoiJXf65MgS5 Xeijn8hjeVthj8xDhnykxFDjCwWNYfh6/Fr6pP8mmCXG6mjykMVlrxy8/7tsyZ2W NqYBmiiOIwYqENJTIvGRipM+rmM2qvpJ3PcY8KLXdYGgnJGLFPg91UlQBanKftpq boFVjQ2PouTXDMwe/eOlIH8AszDs15eME6OnmZO4qYR8kCtvMZ3nQB7tMW0CVdQS 5fkqsUAEGDXNyRDbmhGwSe/IftS+2rKb -----END CERTIFICATE-----Generated at Wed May 1 03:20:31 2024 by rpki-client on console-fra.rpki-client.org