$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: Trghl7dqZVxlGYoUWFvAx5Uit3GelqL1rkcs3JmNRaY= Subject key identifier: 15:62:4D:A9:A0:2F:A6:4C:BA:D1:B5:32:7C:40:5A:A1:74:DE:FC:EE Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0391 Signing time: Sun 05 May 2024 02:47:35 +0000 Manifest this update: Sun 05 May 2024 02:47:34 +0000 Manifest next update: Sun 12 May 2024 02:47:34 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: TRSl1AClUyl2FOgZdxFRBGfndLD0rnCNaaKoVGdU+30=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: BBjPZuth9y/c45Bak0At2ZjJGKm9wxuC946aQ8aMlsA=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: O0BcYyJsKcRiYGr2cjq8imow2Ta4XFCZ+PfIgeggNB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: May 5 02:47:34 2024 GMT Not After : May 12 02:47:34 2024 GMT Subject: CN=6636f347-564a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:e3:a3:7c:97:72:95:08:27:04:4e:7e:9a: ac:16:a6:3d:e4:c7:a4:ba:91:b4:c7:bd:0c:cc:e2: a6:00:b3:66:56:8e:25:0b:7e:3f:58:71:cd:cb:2d: 45:92:55:f1:91:51:5d:30:49:81:94:d1:33:d7:eb: f8:21:b3:bc:71:24:24:71:8e:9f:9b:18:4e:6e:0e: 3e:18:57:66:6d:a7:ce:4e:03:11:4a:41:bb:75:17: 26:62:10:24:10:38:7a:34:b5:f2:81:67:8d:8b:74: c8:0c:cf:dc:0d:a2:47:52:71:cc:72:8e:b1:d4:0d: 26:0b:83:6a:23:f3:a1:70:cf:52:d2:91:f1:7c:eb: b8:a4:f0:6b:a7:5d:ad:b3:26:3c:42:0a:21:8e:77: 4d:bc:bd:a8:15:1b:df:4b:b6:34:54:ba:0f:00:49: 4a:d1:7c:32:c6:de:50:22:3d:87:d4:9c:47:66:2d: 4b:6d:f2:e1:85:7c:9e:b8:87:d4:22:ed:54:fc:9c: e7:83:9e:4a:04:d8:9f:7d:7f:6e:25:a8:18:e3:aa: 72:2f:65:b5:3b:06:5b:c3:6b:f5:58:e1:43:3a:35: e7:22:44:52:43:96:f5:87:de:55:dc:bb:94:2a:5e: f6:80:a5:4d:58:b6:df:20:dd:1b:27:93:09:31:a9: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:4D:A9:A0:2F:A6:4C:BA:D1:B5:32:7C:40:5A:A1:74:DE:FC:EE X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:16:81:95:fb:c7:e7:64:13:66:65:80:4e:08:e0:03:8b:c3: 5e:2d:c7:55:47:54:94:f8:b4:6e:ad:42:79:63:26:a2:89:d4: ea:9d:6e:eb:44:2c:b4:9c:d5:cd:26:b0:7c:ac:3a:d7:6c:5f: c7:59:56:d5:f1:a6:40:b1:94:cb:7e:be:01:e7:57:f7:15:32: 65:39:1e:35:8f:70:6f:09:2e:ca:f8:e2:4a:ea:2c:af:d5:51: 8a:e8:18:13:4f:65:6e:29:86:d5:b7:1c:ec:6e:b8:52:44:4f: 8f:b1:b8:07:1a:9e:d9:6f:05:1e:d7:2c:2f:1d:be:b5:be:98: 00:64:ca:f3:c6:41:68:4d:0d:b1:1b:eb:09:4b:5a:03:dc:78: 13:30:e6:01:22:4d:a0:dd:d6:61:28:00:0d:c0:92:e2:dd:57: 36:f0:27:96:53:e0:1a:57:14:f4:37:ce:ef:79:f6:0d:11:40: e3:a4:3a:ac:8c:ee:63:99:b2:e7:95:5e:b3:9d:ff:2c:2b:71: 40:1e:5c:f1:a8:4e:35:ab:34:b9:82:29:bc:3e:cb:3e:19:d5: 4c:70:a2:24:a5:96:c5:fd:52:0b:90:0f:05:e1:8a:cd:a9:08: 74:af:5d:d9:85:4c:ae:98:38:2e:54:b4:b5:a7:59:48:d3:d8: 2f:c1:f2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjQwNTA1MDI0NzM0WhcNMjQwNTEyMDI0NzM0WjAYMRYwFAYD VQQDEw02NjM2ZjM0Ny01NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXfjo3yXcpUIJwROfpqsFqY95MekupG0x70MzOKmALNmVo4lC34/WHHNyy1F klXxkVFdMEmBlNEz1+v4IbO8cSQkcY6fmxhObg4+GFdmbafOTgMRSkG7dRcmYhAk EDh6NLXygWeNi3TIDM/cDaJHUnHMco6x1A0mC4NqI/OhcM9S0pHxfOu4pPBrp12t syY8QgohjndNvL2oFRvfS7Y0VLoPAElK0Xwyxt5QIj2H1JxHZi1LbfLhhXyeuIfU Iu1U/Jzng55KBNiffX9uJagY46pyL2W1OwZbw2v1WOFDOjXnIkRSQ5b1h95V3LuU Kl72gKVNWLbfIN0bJ5MJMalLZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBViTamg L6ZMutG1MnxAWqF03vzuMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFFoGV+8fnZBNmZYBOCOADi8NeLcdVR1SU+LRurUJ5YyaiidTqnW7r RCy0nNXNJrB8rDrXbF/HWVbV8aZAsZTLfr4B51f3FTJlOR41j3BvCS7K+OJK6iyv 1VGK6BgTT2VuKYbVtxzsbrhSRE+PsbgHGp7ZbwUe1ywvHb61vpgAZMrzxkFoTQ2x G+sJS1oD3HgTMOYBIk2g3dZhKAANwJLi3Vc28CeWU+AaVxT0N87vefYNEUDjpDqs jO5jmbLnlV6znf8sK3FAHlzxqE41qzS5gim8Pss+GdVMcKIkpZbF/VILkA8F4YrN qQh0r13ZhUyumDguVLS1p1lI09gvwfIT -----END CERTIFICATE-----Generated at Sun May 5 03:47:44 2024 by rpki-client on console-fra.rpki-client.org