$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: nXA5iBVA4o5Ty+4gD6kbOp+i/tSCZEaclaVkeG+Uv6I= Subject key identifier: 5D:6A:A4:C1:C4:A3:0D:E7:3D:F3:13:C7:29:25:6C:18:E9:0E:E9:02 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 0326 Signing time: Fri 03 May 2024 03:11:09 +0000 Manifest this update: Fri 03 May 2024 03:11:08 +0000 Manifest next update: Fri 10 May 2024 03:11:08 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: V5APsN+bQxGTGColKHKqxiNolQPgHPqQsCPFBITy+zk=) 2: 8332CBAE3B6411ED8FDBD173C4F9AE02.roa (hash: 8RuHmH/09Bx3XKeZI2IxqYh0bwR19nnODt7IOsfXl1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: May 3 03:11:08 2024 GMT Not After : May 10 03:11:08 2024 GMT Subject: CN=663455cc-c297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:23:4c:6a:53:6c:a7:42:28:30:6f:79:81: 89:76:4a:a1:d6:8a:23:26:b6:c6:e9:0b:6e:10:f0: 32:0b:03:ce:64:c4:1f:39:e1:dc:0b:e1:b9:f9:49: d5:a6:1f:55:c1:86:77:41:4a:b0:f8:63:b4:ef:ed: cb:90:5a:cd:bc:76:69:fe:f3:d8:81:10:71:03:09: 4e:28:4b:1a:3e:1a:b3:18:ee:c9:98:82:fd:d0:ad: 6e:b6:b8:04:10:d7:4a:22:95:b4:fc:c0:c8:c2:f9: 79:d7:ad:7f:86:4b:cb:f0:32:10:ad:fa:96:f2:4b: d4:66:cf:c0:61:20:5b:aa:ac:f2:70:48:48:41:c2: f6:99:84:d4:2b:75:12:28:15:de:e4:12:6f:66:26: 2c:fe:09:ea:c6:d9:66:fa:e3:b3:a8:17:2f:91:aa: 30:16:ea:8d:63:1d:1d:1b:4c:24:c3:62:bc:25:0b: 25:f0:5d:d7:08:ba:27:a6:79:30:0c:32:1b:95:48: 01:23:34:3e:02:54:1b:0d:43:b9:c2:d0:eb:6e:e9: 34:33:20:1f:59:6f:d4:98:1b:8f:a8:3d:f8:31:bb: da:9a:93:cf:d7:cb:04:4c:ad:2c:0f:6a:aa:17:99: f1:00:42:14:74:27:57:4a:df:af:a1:0d:02:be:35: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6A:A4:C1:C4:A3:0D:E7:3D:F3:13:C7:29:25:6C:18:E9:0E:E9:02 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:21:17:46:e4:82:8d:1f:a6:34:7e:cf:d5:50:bb:b0:91: 76:79:6f:ec:8b:90:fa:41:27:68:a1:72:74:51:45:01:5f:8a: b2:4a:4e:45:38:19:2c:c1:b1:db:90:47:f5:bd:b0:c4:8c:d3: ad:30:ee:a4:c2:09:29:de:8b:9c:ba:0d:55:69:1b:c6:12:fd: ff:a8:7e:7c:cd:a0:4c:e1:f7:f1:78:9a:53:d5:ae:1f:4a:38: 89:59:ed:2f:d8:89:01:ed:52:ae:c0:dc:0c:56:78:eb:ab:d0: 36:50:c8:41:d1:46:0c:fe:82:97:7f:f6:98:48:dc:62:f2:eb: bd:5c:0f:53:79:ca:89:f0:7b:eb:d9:49:d5:4c:68:04:71:12: 41:84:26:12:ad:1c:df:9e:45:0c:1e:b9:6a:30:3b:92:bc:31: 65:37:5b:d4:e0:9d:2f:f4:5c:ad:1f:53:c5:2d:aa:15:cd:28: bd:f6:a5:8b:b8:92:c1:88:34:d7:95:f8:30:f1:2e:18:23:10: 77:6d:78:ab:5f:8f:ea:f2:93:d1:ea:fc:ef:69:1b:02:95:7d: 08:18:0b:50:35:df:9b:1a:f8:2b:27:53:06:ed:14:b8:12:b2: 29:eb:3d:80:d8:16:de:53:56:87:71:5d:48:10:e3:dd:db:b9: bc:65:e1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjQwNTAzMDMxMTA4WhcNMjQwNTEwMDMxMTA4WjAYMRYwFAYD VQQDEw02NjM0NTVjYy1jMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HEjTGpTbKdCKDBveYGJdkqh1oojJrbG6QtuEPAyCwPOZMQfOeHcC+G5+UnV ph9VwYZ3QUqw+GO07+3LkFrNvHZp/vPYgRBxAwlOKEsaPhqzGO7JmIL90K1utrgE ENdKIpW0/MDIwvl5161/hkvL8DIQrfqW8kvUZs/AYSBbqqzycEhIQcL2mYTUK3US KBXe5BJvZiYs/gnqxtlm+uOzqBcvkaowFuqNYx0dG0wkw2K8JQsl8F3XCLonpnkw DDIblUgBIzQ+AlQbDUO5wtDrbuk0MyAfWW/UmBuPqD34MbvampPP18sETK0sD2qq F5nxAEIUdCdXSt+voQ0CvjXyGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1qpMHE ow3nPfMTxyklbBjpDukCMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWASEXRuSCjR+mNH7P1VC7sJF2eW/si5D6QSdooXJ0UUUBX4qySk5F OBkswbHbkEf1vbDEjNOtMO6kwgkp3oucug1VaRvGEv3/qH58zaBM4ffxeJpT1a4f SjiJWe0v2IkB7VKuwNwMVnjrq9A2UMhB0UYM/oKXf/aYSNxi8uu9XA9TecqJ8Hvr 2UnVTGgEcRJBhCYSrRzfnkUMHrlqMDuSvDFlN1vU4J0v9FytH1PFLaoVzSi99qWL uJLBiDTXlfgw8S4YIxB3bXirX4/q8pPR6vzvaRsClX0IGAtQNd+bGvgrJ1MG7RS4 ErIp6z2A2BbeU1aHcV1IEOPd27m8ZeGH -----END CERTIFICATE-----Generated at Fri May 3 04:45:15 2024 by rpki-client on console-fra.rpki-client.org