$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: yRi2W8Id3GPIfACenzQN1b3PdC+j2SfAe5SDtQ7DjXo= Subject key identifier: 97:2D:20:D8:C7:C5:6C:4A:0D:15:98:9D:A4:39:1D:F8:3C:9D:D7:8D Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0177 Signing time: Fri 03 May 2024 04:53:12 +0000 Manifest this update: Fri 03 May 2024 04:53:11 +0000 Manifest next update: Fri 10 May 2024 04:53:11 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: 6wfK1I0hetxJ6Yzdwj224Dn9tJXIOz07h5hJesbGP54=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 3Lk2g2hVz5E71XhRhOVqH1aOoyA9IqRTXohzwQ084rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: May 3 04:53:11 2024 GMT Not After : May 10 04:53:11 2024 GMT Subject: CN=66346db8-8a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:bb:d7:b1:e5:e8:93:fa:7a:b7:75:67:3d: 44:3d:3d:41:62:d6:01:b1:2a:d4:dd:d7:0d:9f:d8: 43:6d:77:a6:12:cc:07:f1:91:87:94:38:aa:a3:05: 26:3f:28:3d:db:62:46:dd:87:57:e8:08:91:05:ae: 76:92:c0:cc:7e:9b:ce:63:d6:75:89:fa:e5:23:9c: e2:76:63:bf:18:26:b0:f9:67:07:a7:4b:76:d2:3c: 17:5c:7c:ab:7d:ea:2f:33:1c:36:ce:a0:a9:fe:ca: 38:ca:05:f4:d7:41:f3:9c:d8:7d:1a:15:d3:b4:bd: 80:d8:19:f6:af:7e:f2:3b:2c:b8:31:fa:e7:97:62: c1:a6:f2:05:e0:f8:4c:09:fc:89:49:3d:19:ee:cb: 53:dd:be:64:3c:e0:a9:b0:97:00:73:b6:1d:aa:33: 47:64:75:35:f5:8b:58:ef:11:d1:10:bd:2b:7c:0e: ad:2d:93:48:72:93:bb:fe:c3:63:e4:c3:b3:9d:3a: 7b:eb:a3:8e:16:bf:10:31:2d:ea:2d:46:0a:50:74: 8d:d3:9e:c7:35:a1:f3:a4:0a:7d:0b:a8:d5:85:82: df:a4:59:50:fd:be:c1:7f:e8:98:83:a2:82:f5:2d: cd:dc:bd:07:af:36:a1:ff:01:35:9e:5d:a2:f7:15: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2D:20:D8:C7:C5:6C:4A:0D:15:98:9D:A4:39:1D:F8:3C:9D:D7:8D X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f8:55:31:98:96:eb:ae:c3:8a:16:94:81:64:53:4b:f4:42: a6:d3:16:94:46:1f:93:06:03:30:23:0b:c6:1f:62:d2:22:87: ea:f5:81:5d:cb:fc:54:89:c0:8d:50:24:6b:88:2d:c4:d7:48: b4:74:f2:6e:d8:0f:25:63:10:63:90:9f:6e:b6:36:5f:d0:d8: 54:1c:36:1f:fe:37:fe:3f:15:00:5d:07:f9:af:69:6d:69:13: 2f:4e:86:10:d7:e9:4d:69:7d:14:e1:13:81:82:2d:74:df:79: fb:aa:44:ae:9d:2c:f3:ca:1a:10:a9:52:fc:ef:5f:f3:5a:53: 5c:87:d9:d8:c0:81:0d:c5:e5:62:79:db:e6:35:4c:39:a9:e9: f9:f0:b3:32:17:64:3b:38:00:8a:b8:84:aa:52:3f:83:de:1b: 96:4a:a9:65:34:74:a0:60:f0:14:7e:ef:14:d4:1c:54:b3:44: 8d:e0:2b:16:ba:6d:c9:79:50:f6:84:78:81:fb:5f:0c:d3:37: ec:cd:d6:42:0f:9e:c2:ef:ae:f0:c2:06:02:fc:56:9b:79:83: 06:85:43:8a:bb:08:79:45:fe:d0:20:6d:12:2d:35:62:1b:2c: 06:bd:c8:c9:be:38:c3:f8:3c:16:92:37:5b:5f:13:63:2a:d0: fb:4b:fd:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjQwNTAzMDQ1MzExWhcNMjQwNTEwMDQ1MzExWjAYMRYwFAYD VQQDEw02NjM0NmRiOC04YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJK717Hl6JP6erd1Zz1EPT1BYtYBsSrU3dcNn9hDbXemEswH8ZGHlDiqowUm Pyg922JG3YdX6AiRBa52ksDMfpvOY9Z1ifrlI5zidmO/GCaw+WcHp0t20jwXXHyr feovMxw2zqCp/so4ygX010HznNh9GhXTtL2A2Bn2r37yOyy4Mfrnl2LBpvIF4PhM CfyJST0Z7stT3b5kPOCpsJcAc7YdqjNHZHU19YtY7xHREL0rfA6tLZNIcpO7/sNj 5MOznTp766OOFr8QMS3qLUYKUHSN057HNaHzpAp9C6jVhYLfpFlQ/b7Bf+iYg6KC 9S3N3L0Hrzah/wE1nl2i9xXAZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJctINjH xWxKDRWYnaQ5Hfg8ndeNMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4+FUxmJbrrsOKFpSBZFNL9EKm0xaURh+TBgMwIwvGH2LSIofq9YFd y/xUicCNUCRriC3E10i0dPJu2A8lYxBjkJ9utjZf0NhUHDYf/jf+PxUAXQf5r2lt aRMvToYQ1+lNaX0U4ROBgi1033n7qkSunSzzyhoQqVL871/zWlNch9nYwIENxeVi edvmNUw5qen58LMyF2Q7OACKuISqUj+D3huWSqllNHSgYPAUfu8U1BxUs0SN4CsW um3JeVD2hHiB+18M0zfszdZCD57C767wwgYC/FabeYMGhUOKuwh5Rf7QIG0SLTVi GywGvcjJvjjD+DwWkjdbXxNjKtD7S/2x -----END CERTIFICATE-----Generated at Fri May 3 05:32:34 2024 by rpki-client on console-ams.rpki-client.org