$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: VPZcqtlpwpSZyMNTawG08EIikwnGVKl8Cp/gukpxRaM= Subject key identifier: DA:F4:CE:15:E2:9E:7C:BF:85:0E:5F:B3:20:15:A0:B7:7E:48:C9:F5 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0B71 Signing time: Thu 02 May 2024 19:45:27 +0000 Manifest this update: Thu 02 May 2024 19:45:27 +0000 Manifest next update: Thu 09 May 2024 19:45:27 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: KbBVdK+LGjKJ3zmef25R3GHeu33xS9i/vvqJq8GU380=) 2: 3C719B64EA8B11EEAFEF872BC4F9AE02.roa (hash: FUTy/lo1z8mp0GryXZyPvcoilmNYwt/GXvIYxtSxbmE=) 3: 68B37622ED0711EBA8904D13C4F9AE02.roa (hash: huA8Z5cAW/Txr6r/bEBl8JkQL9Vuju18j/gN5EKxmqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: May 2 19:45:27 2024 GMT Not After : May 9 19:45:27 2024 GMT Subject: CN=6633ed57-1d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:57:39:90:92:30:e0:b5:22:31:34:4e:fe: ab:45:df:85:30:a8:95:15:1b:8e:8d:3a:c6:d5:d1: a2:21:e2:d8:27:37:4c:27:54:dd:7b:5c:a3:98:0d: ab:58:e3:9f:87:77:34:42:8d:98:c0:b6:27:ee:61: 06:1a:b5:e4:0f:e4:20:5e:c6:e9:87:29:07:a0:21: 6b:dd:8a:34:3c:47:1b:9e:d3:4f:c3:18:b9:55:da: 60:24:5a:ad:a6:46:f7:48:78:61:7d:78:1b:a5:f0: ef:7a:99:9e:d9:5c:c1:82:61:3c:34:15:bb:25:f7: 04:7d:f6:4e:76:42:21:8b:d6:1a:0d:02:82:e2:ab: 3a:fe:16:ca:6a:02:af:f4:a0:c2:a0:5b:c1:8a:c3: 6d:ee:36:4b:d7:b5:8e:82:c2:19:67:6d:9e:b5:65: 2a:1b:1f:90:46:6b:61:ab:2f:86:d4:1e:39:df:6d: 1b:20:1f:0e:f3:e4:1b:05:27:98:19:82:94:3b:28: 23:ca:61:fa:51:86:2f:a1:65:26:15:c5:b1:89:b0: 06:fe:84:a4:68:a0:4b:d1:48:3d:fc:c5:f7:38:7c: 61:4e:5c:b1:0c:e0:9b:d4:ae:ac:e4:00:6d:06:2f: 3d:01:56:36:0f:da:c8:c7:63:d0:40:9b:0f:35:90: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:CE:15:E2:9E:7C:BF:85:0E:5F:B3:20:15:A0:B7:7E:48:C9:F5 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:89:07:52:8d:8d:a7:48:0b:c8:5c:90:10:30:51:5e:46:c0: 46:41:2b:05:8f:31:4a:c9:19:9c:7e:5b:84:2e:91:1f:d8:18: c7:90:c6:af:bc:36:e7:9e:3c:bc:39:ad:b4:90:fe:02:53:c0: 5c:18:cc:c2:95:fe:f9:16:00:e5:97:0e:e3:b6:9b:05:33:8d: 42:59:b3:47:cd:a2:6c:f9:64:36:bf:13:99:1f:4c:bb:33:fd: 89:d6:64:19:64:d4:16:e5:a5:67:44:af:97:f2:f7:3e:9c:3e: 15:db:c3:38:c6:19:44:ca:86:72:fa:0a:74:c9:53:dc:0a:23: ea:08:d7:4d:a0:33:2d:ab:c2:18:53:d1:06:ae:d9:5b:e9:6f: a1:3a:60:d4:4c:cb:2d:52:c5:7f:f0:c0:ef:36:e1:ef:ed:b9: b4:9f:5c:ac:72:da:f4:b9:e6:bc:e6:0d:45:5e:aa:25:93:be: d2:6d:ce:ad:79:c8:43:2f:a0:72:f2:e7:c4:09:bf:44:14:35: 97:f0:75:3b:c4:71:9f:fe:7c:e5:5a:f7:f3:6e:25:c3:d4:78: f9:8e:b0:15:4b:5f:66:ed:49:d1:2d:c6:84:ca:25:ed:39:32: a7:39:3a:cc:a2:fd:c0:cd:af:1a:53:f7:57:2a:61:ec:23:e9: d0:cb:0a:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjQwNTAyMTk0NTI3WhcNMjQwNTA5MTk0NTI3WjAYMRYwFAYD VQQDEw02NjMzZWQ1Ny0xZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGhXOZCSMOC1IjE0Tv6rRd+FMKiVFRuOjTrG1dGiIeLYJzdMJ1Tde1yjmA2r WOOfh3c0Qo2YwLYn7mEGGrXkD+QgXsbphykHoCFr3Yo0PEcbntNPwxi5VdpgJFqt pkb3SHhhfXgbpfDvepme2VzBgmE8NBW7JfcEffZOdkIhi9YaDQKC4qs6/hbKagKv 9KDCoFvBisNt7jZL17WOgsIZZ22etWUqGx+QRmthqy+G1B45320bIB8O8+QbBSeY GYKUOygjymH6UYYvoWUmFcWxibAG/oSkaKBL0Ug9/MX3OHxhTlyxDOCb1K6s5ABt Bi89AVY2D9rIx2PQQJsPNZB6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNr0zhXi nny/hQ5fsyAVoLd+SMn1MB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMiQdSjY2nSAvIXJAQMFFeRsBGQSsFjzFKyRmcfluELpEf2BjHkMav vDbnnjy8Oa20kP4CU8BcGMzClf75FgDllw7jtpsFM41CWbNHzaJs+WQ2vxOZH0y7 M/2J1mQZZNQW5aVnRK+X8vc+nD4V28M4xhlEyoZy+gp0yVPcCiPqCNdNoDMtq8IY U9EGrtlb6W+hOmDUTMstUsV/8MDvNuHv7bm0n1ysctr0uea85g1FXqolk77Sbc6t echDL6By8ufECb9EFDWX8HU7xHGf/nzlWvfzbiXD1Hj5jrAVS19m7UnRLcaEyiXt OTKnOTrMov3Aza8aU/dXKmHsI+nQywpw -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org