$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: nvkMuEIAzTOYlwf2yIxU9ElIyuLGoiPeuBcK3f77nVs= Subject key identifier: 29:93:C9:6D:C5:CC:DC:2C:25:AB:5D:31:FF:C6:01:B5:B7:54:CD:BB Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 071C Signing time: Sat 04 May 2024 22:53:18 +0000 Manifest this update: Sat 04 May 2024 22:53:17 +0000 Manifest next update: Sat 11 May 2024 22:53:17 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: l0TE3u7Z5lqc4mENXbGSoAqcmGcGurMQLvh8sbEC1W8=) 2: 426AABC85B4911ED8862970DC4F9AE02.roa (hash: wpGhBH/J+/3fOukxxBIf1uBClg/KuHxGIQw1iGgeNuM=) 3: A6D1B25E5AE511EEAD94D258C4F9AE02.roa (hash: EzEYabFcQBT7DQUHvsyIR1OYJ3FLe0PQZ9jlh2G8s6c=) 4: 47BE563CEA5A11EE92E5221CC4F9AE02.roa (hash: 7x4NakpluCkmWYYDryCnQ1IzpwHgcjNVH6n3LNHtQAs=) 5: 1B72273C5C2311EDA3D17465C4F9AE02.roa (hash: mDw0kbJm/iTDRcernzDRE+RgGH524TQRk+/OLJTymJ8=) 6: 6DAF87AA21BA11ECB2027C56C4F9AE02.roa (hash: qwkFPw4Rc2+jY6s2aO6HPfgbL0rdxDEn0Izi2UbjB9s=) 7: C49C7ED272E111EDBF1C7C81C4F9AE02.roa (hash: AA9pKQD3K1s6bDOsh71a6T8aY7Z2HrBGgcZtF4T6xEg=) 8: 030BA3A6D78A11EEB7D96310C4F9AE02.roa (hash: m6jnolx7aJrlX6SiFtgg9jnhRDD9OlFHffN8lKfl76U=) 9: 8FFCD106CF5511ED870A7753C4F9AE02.roa (hash: HGq9rZMUk6E+ZJUpbIS2PTfkw0l15X0kWo1fQB0mkmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: May 4 22:53:17 2024 GMT Not After : May 11 22:53:17 2024 GMT Subject: CN=6636bc5e-255c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:bc:9b:ad:24:26:c3:2a:a6:dd:ae:0f:8b: 56:ca:9c:c8:cd:b2:29:00:26:46:e1:c6:e6:5b:63: 96:ab:31:48:6c:10:f4:b2:95:c9:3a:62:99:63:33: f6:f8:65:d1:3a:d8:2f:3d:85:c3:e7:f1:50:55:75: a7:4f:41:cf:db:42:e8:de:e2:8f:a2:87:ea:e1:bc: d7:33:97:23:5e:f7:93:4c:f3:5b:ed:2b:0a:e3:b7: 74:bc:1b:a1:84:6e:cd:d5:cb:c6:c3:2b:f3:a2:b7: cf:e6:c3:df:b2:18:c8:ba:9f:d9:91:dd:9f:3b:1c: 9b:e6:d7:82:d9:25:7d:e8:f3:41:c2:12:51:e9:8e: 1f:3d:0f:35:80:02:98:d4:f9:0e:b4:4d:80:8a:a3: 13:dd:cd:39:0c:9e:b4:4f:96:a8:fb:59:37:ee:44: 4e:c4:fd:ef:20:0b:7b:2e:e9:a1:c0:db:7c:45:29: 83:2d:32:cb:bf:05:65:01:19:d8:44:78:60:27:62: 6f:d7:d6:a3:92:5b:08:12:a3:8d:c1:a5:ea:52:0c: 5d:b1:4c:ac:19:26:36:5f:71:f2:7d:6a:29:72:bb: ce:4d:7e:1b:fa:c3:07:fb:5d:1f:6a:a2:7d:2c:8d: eb:c4:6b:c8:bc:da:36:cb:70:30:43:37:f4:35:4e: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:C9:6D:C5:CC:DC:2C:25:AB:5D:31:FF:C6:01:B5:B7:54:CD:BB X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:65:d0:19:3a:d9:90:5a:33:c7:b4:84:b4:7f:94:57:08: 92:5a:bf:00:5b:a1:21:bc:f0:01:66:e1:38:3a:ca:ea:94:0a: 08:63:48:e8:38:ca:bf:61:7c:83:9e:0b:93:ba:b7:8a:ea:15: 4e:11:81:ab:c8:04:d2:49:e5:50:82:8f:ad:2c:bd:7e:fd:9f: 0b:ca:34:60:ff:e1:20:6d:54:6a:df:d8:bd:c4:fa:9f:3b:14: f5:f7:2d:51:52:0f:fa:6b:89:c4:0c:99:00:46:67:94:2d:60: 68:b9:e3:0c:9b:5a:bd:51:4e:d5:c3:69:0c:41:18:9f:80:da: bb:ad:ee:3d:fe:04:a7:db:d5:b4:16:94:7e:53:7c:f4:74:04: db:94:62:77:8c:db:4b:8e:d2:df:e2:62:9c:bd:dc:8d:d5:52: a9:b0:66:8f:bc:24:cf:33:2f:52:95:0f:d2:f1:88:ee:85:28: e1:d6:1b:80:f1:8d:78:ec:0c:78:3b:f2:6e:3c:ad:0f:35:94: e4:b5:8b:68:d1:29:74:b1:08:3e:e0:67:85:27:af:ef:0d:77: 9f:74:72:cd:5a:19:a6:83:9d:c3:9e:9b:0d:79:78:db:4a:13: 30:c1:a3:e3:b1:09:bf:d6:a8:d9:bf:79:85:8d:2c:df:b8:6c: 0c:96:23:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjQwNTA0MjI1MzE3WhcNMjQwNTExMjI1MzE3WjAYMRYwFAYD VQQDEw02NjM2YmM1ZS0yNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzC8m60kJsMqpt2uD4tWypzIzbIpACZG4cbmW2OWqzFIbBD0spXJOmKZYzP2 +GXROtgvPYXD5/FQVXWnT0HP20Lo3uKPoofq4bzXM5cjXveTTPNb7SsK47d0vBuh hG7N1cvGwyvzorfP5sPfshjIup/Zkd2fOxyb5teC2SV96PNBwhJR6Y4fPQ81gAKY 1PkOtE2AiqMT3c05DJ60T5ao+1k37kROxP3vIAt7LumhwNt8RSmDLTLLvwVlARnY RHhgJ2Jv19ajklsIEqONwaXqUgxdsUysGSY2X3HyfWopcrvOTX4b+sMH+10faqJ9 LI3rxGvIvNo2y3AwQzf0NU7nfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmTyW3F zNwsJatdMf/GAbW3VM27MB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPiWXQGTrZkFozx7SEtH+UVwiSWr8AW6EhvPABZuE4OsrqlAoIY0jo OMq/YXyDnguTureK6hVOEYGryATSSeVQgo+tLL1+/Z8LyjRg/+EgbVRq39i9xPqf OxT19y1RUg/6a4nEDJkARmeULWBoueMMm1q9UU7Vw2kMQRifgNq7re49/gSn29W0 FpR+U3z0dATblGJ3jNtLjtLf4mKcvdyN1VKpsGaPvCTPMy9SlQ/S8YjuhSjh1huA 8Y147Ax4O/JuPK0PNZTktYto0Sl0sQg+4GeFJ6/vDXefdHLNWhmmg53DnpsNeXjb ShMwwaPjsQm/1qjZv3mFjSzfuGwMliM7 -----END CERTIFICATE-----Generated at Sun May 5 00:14:42 2024 by rpki-client on console-ams.rpki-client.org