$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: WMSUtzMDc8hyS4n1uzAmsOWj4YujCGUb7edf1JZY+TE= Subject key identifier: 3B:77:84:C2:35:A9:15:0F:CC:A3:38:98:C6:C4:FE:93:C9:40:E5:9C Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 07F7 Signing time: Sat 18 May 2024 21:54:59 +0000 Manifest this update: Sat 18 May 2024 21:54:58 +0000 Manifest next update: Sat 25 May 2024 21:54:58 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: fnUz4yNRBnYesWczacCtiC94I+jzEGzzlVU5viy+QOE=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: tTT8521eqCETDqz4+sHnOdxTbgNFFlJoAdsqLu2m7HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: May 18 21:54:58 2024 GMT Not After : May 25 21:54:58 2024 GMT Subject: CN=664923b3-74c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:e0:10:84:19:82:01:96:b3:c8:78:1c:a0: 93:c3:09:d8:e7:91:30:ae:5a:bb:ba:1c:a1:7b:ad: f4:10:de:8d:bd:91:ec:37:ab:45:91:e5:83:39:a3: 81:29:c8:74:cf:e2:36:56:aa:a5:5b:59:ae:71:40: ce:8c:15:f5:32:7c:4e:40:c8:ae:c9:57:d9:b2:be: b6:36:4a:97:fd:91:3b:74:80:9a:5f:1c:a8:67:75: 17:eb:82:42:cd:b8:e6:f0:0c:4e:88:d2:45:a7:73: c6:00:7e:e3:51:85:5c:f2:6b:cc:d0:6e:38:4d:ba: d1:99:cc:42:86:a3:f1:86:fd:e3:bc:4a:95:fa:8e: f1:7f:4e:a5:00:ef:93:36:21:92:d9:3f:17:e3:68: f4:44:bb:de:03:44:bf:2d:76:c5:5f:43:36:90:a0: 22:f9:98:2e:03:8c:6b:7b:ca:fd:c0:90:c5:f4:03: 37:05:64:e7:00:8f:a8:58:21:db:ec:40:a1:99:a7: 6a:2a:c9:d7:dc:31:e4:1e:57:93:e2:9d:a7:00:20: d4:d8:ae:3f:43:e8:cc:8d:83:21:34:72:54:de:75: 3c:97:5f:df:ca:48:a5:e8:7e:51:71:37:11:ff:a0: 7b:af:e3:a5:f2:5d:9c:d9:ae:44:98:ad:64:76:8f: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:77:84:C2:35:A9:15:0F:CC:A3:38:98:C6:C4:FE:93:C9:40:E5:9C X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4e:a1:80:b9:a2:6a:69:8a:05:68:bb:68:f9:cb:40:77:a0: 69:24:a9:4c:62:72:76:87:6d:a0:2d:c1:dd:2f:41:ce:30:2a: 18:8d:aa:4b:e1:9f:ef:03:35:07:74:f9:79:9d:35:4c:14:4f: a2:9b:d8:92:60:8a:ef:7d:0e:28:b7:69:4f:3c:f1:e9:5a:1a: 2e:01:84:cf:4a:8a:2b:d6:f7:d0:7e:ce:d1:91:07:bc:f6:46: 30:aa:b0:4a:c1:b3:23:9b:a8:95:9b:03:8a:54:bc:bb:a8:12: bd:d4:3b:0b:26:e0:b1:6c:6b:04:37:af:dc:71:5d:7c:dc:24: 46:df:b6:e1:d3:40:37:2c:99:7f:43:8a:61:b3:34:bc:08:a8: 3f:f0:24:9a:23:3d:16:d7:af:55:a0:5a:bb:16:e7:f8:64:2d: 3d:7e:51:4c:41:d5:59:9d:36:a8:4f:97:52:20:45:33:dd:59: 0e:b5:c7:d3:a9:74:30:76:ef:05:95:d5:08:e1:8f:8c:82:5c: 8f:15:59:5b:d1:0a:7d:e2:77:22:17:e7:cf:6f:c4:0e:c9:9c: 1b:41:e2:4c:70:0a:9c:d6:7a:1e:3f:0a:c5:64:72:61:0e:d8: e6:be:08:f3:08:37:f1:32:c8:89:41:35:79:1c:cd:56:14:50: 53:38:e4:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjQwNTE4MjE1NDU4WhcNMjQwNTI1MjE1NDU4WjAYMRYwFAYD VQQDEw02NjQ5MjNiMy03NGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kHgEIQZggGWs8h4HKCTwwnY55Ewrlq7uhyhe630EN6NvZHsN6tFkeWDOaOB Kch0z+I2VqqlW1mucUDOjBX1MnxOQMiuyVfZsr62NkqX/ZE7dICaXxyoZ3UX64JC zbjm8AxOiNJFp3PGAH7jUYVc8mvM0G44TbrRmcxChqPxhv3jvEqV+o7xf06lAO+T NiGS2T8X42j0RLveA0S/LXbFX0M2kKAi+ZguA4xre8r9wJDF9AM3BWTnAI+oWCHb 7EChmadqKsnX3DHkHleT4p2nACDU2K4/Q+jMjYMhNHJU3nU8l1/fykil6H5RcTcR /6B7r+Ol8l2c2a5EmK1kdo+a1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDt3hMI1 qRUPzKM4mMbE/pPJQOWcMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoTqGAuaJqaYoFaLto+ctAd6BpJKlMYnJ2h22gLcHdL0HOMCoYjapL 4Z/vAzUHdPl5nTVMFE+im9iSYIrvfQ4ot2lPPPHpWhouAYTPSoor1vfQfs7RkQe8 9kYwqrBKwbMjm6iVmwOKVLy7qBK91DsLJuCxbGsEN6/ccV183CRG37bh00A3LJl/ Q4phszS8CKg/8CSaIz0W169VoFq7Fuf4ZC09flFMQdVZnTaoT5dSIEUz3VkOtcfT qXQwdu8FldUI4Y+MglyPFVlb0Qp94nciF+fPb8QOyZwbQeJMcAqc1noePwrFZHJh DtjmvgjzCDfxMsiJQTV5HM1WFFBTOOQ5 -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org