$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: 2JdrbPdBA8vNmu7jGpZiGZ8kCpgQdXayuCZC1thRr0c= Subject key identifier: 25:07:65:6F:01:7E:12:3F:8D:3B:41:E9:DE:C2:F4:95:06:22:B3:89 Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 0637 Signing time: Fri 17 May 2024 00:00:34 +0000 Manifest this update: Fri 17 May 2024 00:00:33 +0000 Manifest next update: Fri 24 May 2024 00:00:33 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: oWN29xjj+NYHvqcIZzIQ/ngpb2obLIYaMdBggJUgFTs=) 2: 1844CACEF68C11EEAD8EB82EC4F9AE02.roa (hash: 9JG4ZRrKmUy4v3GYhIiQIt/vbIgOdAYFq9JUuJK5b7U=) 3: 38EA642E56BD11EE8C084A30C4F9AE02.roa (hash: NPubn+unfjcZmVgNay2VpxJOoDeb/X30J30a9VYk6zI=) 4: B389D236CD0111EE990FC163C4F9AE02.roa (hash: K3vFa+UeZmzcbmQO3jBtTlT3Mbf/sRl5+Q+MiHUlXpA=) 5: 8500C442CD0111EEAD315363C4F9AE02.roa (hash: XdYvKVx4rhI9ZKbSrWRFI/JrvDhvSU9FFwHFl8cBQkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: May 17 00:00:33 2024 GMT Not After : May 24 00:00:33 2024 GMT Subject: CN=66469e21-070f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:6e:e0:d9:45:a2:b6:f2:26:8d:f0:6d:7f: 59:a1:be:05:71:2b:04:34:3c:92:1b:89:90:58:9a: 98:39:6c:04:7e:d5:46:8a:23:f8:9a:bd:3a:5e:d3: 76:bf:ba:17:c4:d7:fc:78:b2:b9:9c:ca:41:3e:e4: 0c:d2:f9:f9:fc:b4:59:a9:4b:8c:68:8e:52:91:03: 11:d6:67:4c:c9:71:e5:7f:57:73:fb:0e:23:64:22: b4:26:96:f3:2d:eb:28:5a:66:72:a5:d8:73:27:a3: 95:a5:48:27:28:d8:56:1b:0c:4c:b0:66:7f:92:31: c1:83:3e:28:54:de:48:4a:c9:38:be:99:18:55:17: f4:90:c3:17:69:ca:6f:f1:47:e1:ca:04:bd:12:34: d7:9d:ac:c9:8c:80:ba:55:9b:f7:f8:46:4c:29:f6: 47:2e:3a:12:c1:84:8d:31:42:a3:64:94:c5:84:af: 30:ab:93:17:e8:a7:7f:bc:90:d4:42:41:e8:78:6c: f5:51:b5:e3:2d:b1:97:b7:8e:31:4d:cd:6a:7d:6d: d5:f2:b5:8f:37:ef:a0:f3:e7:b7:58:21:8a:44:9a: dd:5b:05:b2:da:11:54:4f:e4:82:05:72:82:49:ed: 52:38:bb:9c:7b:78:dd:79:a5:56:59:58:fb:c2:5e: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:07:65:6F:01:7E:12:3F:8D:3B:41:E9:DE:C2:F4:95:06:22:B3:89 X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:13:6b:ee:a0:2d:91:9e:ab:15:8b:f9:14:29:38:9b:82:bb: 13:ab:8f:95:9f:0d:ff:c9:ec:32:42:0f:0d:3c:02:92:cb:0d: b0:a0:81:7b:b7:46:27:f9:64:63:99:f9:a9:23:8c:60:ec:41: ce:73:98:e5:15:c0:1b:bb:9a:92:ec:a1:be:cf:05:36:54:04: 89:7f:dc:ee:95:f1:46:17:5e:01:c5:f1:81:a6:9e:3b:5d:ad: db:1c:80:e3:86:fd:db:8b:52:e1:43:fc:c9:9c:06:58:6c:81: 04:a4:bd:4e:db:9e:21:b3:c0:82:d6:91:1a:2b:5f:af:ed:6c: ff:9e:11:e6:e5:e9:a2:20:f4:8c:23:d2:95:ae:3d:b6:0f:d9: e0:f7:fb:ab:8a:71:36:be:bc:80:96:4f:49:ec:51:a2:d8:38: 42:92:18:02:15:8d:3a:c8:4c:7d:75:87:37:58:dd:28:b9:fe: 12:14:fb:21:47:3a:b9:7d:99:6f:5f:79:db:33:24:dc:db:ec: fc:8a:83:e9:03:94:ab:20:5d:80:ed:95:b7:91:e4:19:60:b9: 62:07:09:a9:53:d6:dd:32:e4:d0:10:29:d3:b8:65:2a:cb:ff: 90:12:41:d6:d2:6f:e0:b9:75:5a:a0:40:34:45:89:51:3a:92: ca:af:90:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjQwNTE3MDAwMDMzWhcNMjQwNTI0MDAwMDMzWjAYMRYwFAYD VQQDEw02NjQ2OWUyMS0wNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8Ru4NlForbyJo3wbX9Zob4FcSsENDySG4mQWJqYOWwEftVGiiP4mr06XtN2 v7oXxNf8eLK5nMpBPuQM0vn5/LRZqUuMaI5SkQMR1mdMyXHlf1dz+w4jZCK0Jpbz LesoWmZypdhzJ6OVpUgnKNhWGwxMsGZ/kjHBgz4oVN5ISsk4vpkYVRf0kMMXacpv 8UfhygS9EjTXnazJjIC6VZv3+EZMKfZHLjoSwYSNMUKjZJTFhK8wq5MX6Kd/vJDU QkHoeGz1UbXjLbGXt44xTc1qfW3V8rWPN++g8+e3WCGKRJrdWwWy2hFUT+SCBXKC Se1SOLuce3jdeaVWWVj7wl7eRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUHZW8B fhI/jTtB6d7C9JUGIrOJMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpE2vuoC2RnqsVi/kUKTibgrsTq4+Vnw3/yewyQg8NPAKSyw2woIF7 t0Yn+WRjmfmpI4xg7EHOc5jlFcAbu5qS7KG+zwU2VASJf9zulfFGF14BxfGBpp47 Xa3bHIDjhv3bi1LhQ/zJnAZYbIEEpL1O254hs8CC1pEaK1+v7Wz/nhHm5emiIPSM I9KVrj22D9ng9/urinE2vryAlk9J7FGi2DhCkhgCFY06yEx9dYc3WN0ouf4SFPsh Rzq5fZlvX3nbMyTc2+z8ioPpA5SrIF2A7ZW3keQZYLliBwmpU9bdMuTQECnTuGUq y/+QEkHW0m/guXVaoEA0RYlROpLKr5C9 -----END CERTIFICATE-----Generated at Fri May 17 00:24:21 2024 by rpki-client on console-fra.rpki-client.org