$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: 8KdpzW8/KZFAcPuyuOhkWcX59QJDG4xO2eQ/JwfHRFk= Subject key identifier: 43:34:EE:5E:38:E2:72:42:69:AC:BA:F6:AC:7A:F7:59:16:84:B4:DC Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 03D4 Signing time: Fri 03 May 2024 02:27:36 +0000 Manifest this update: Fri 03 May 2024 02:27:36 +0000 Manifest next update: Fri 10 May 2024 02:27:36 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: 88NySra5rWMDfEyeT+vW3GdSZ2mkYJh+m2j5OcfuYwE=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: h2VFu+bRi/Tc7d1D9Q7uqR0rEcZTl9eTudd8RE6n4PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: May 3 02:27:36 2024 GMT Not After : May 10 02:27:36 2024 GMT Subject: CN=66344b98-0cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:2e:82:0d:ae:0f:5d:78:86:52:c0:d3:21: f9:69:a3:ee:7a:8b:2f:ef:96:18:41:77:e6:01:00: 39:dc:f7:f3:4a:b9:e9:0a:8e:27:5e:dc:e5:ff:d2: 91:7a:8c:0e:d6:d1:82:89:e3:66:d9:f9:d4:e5:0a: 06:09:ba:18:c2:79:95:ca:c5:cc:4b:43:e7:e4:a9: 49:f6:bc:61:44:e1:99:08:f7:f3:a6:ba:16:d1:29: 26:75:39:69:d4:13:c2:5c:73:43:5b:8f:ac:60:a2: e6:d4:a6:e7:a9:54:60:c2:fa:06:37:83:bd:95:27: 5b:12:92:43:d2:8a:ec:ea:7d:b4:5f:53:58:63:0d: 36:21:82:88:f5:44:c7:ce:46:e9:16:78:da:4e:aa: d4:2a:ee:fe:a3:c1:97:c3:9a:95:81:35:05:88:e7: 6d:d8:a1:64:12:35:62:bc:c7:7f:3d:6b:92:76:e7: 3b:f3:14:b9:93:f2:07:66:5f:60:da:7b:ff:71:fa: 09:99:07:41:64:db:a6:c5:bf:0d:78:ea:93:53:59: 43:47:b3:45:1f:5b:cb:79:42:f4:d3:47:b2:6e:c9: ca:80:e5:d5:5d:da:2d:97:87:a5:54:46:d2:42:56: 94:7d:79:51:0d:64:ed:c9:54:e5:53:0f:6c:c9:eb: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:EE:5E:38:E2:72:42:69:AC:BA:F6:AC:7A:F7:59:16:84:B4:DC X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:74:12:5c:f0:49:f7:e4:13:51:fe:c8:a0:22:cf:32:de:8f: 66:de:e8:4d:0c:f5:53:82:ca:fe:b9:b8:f0:6d:4b:cc:51:08: 72:87:6f:54:92:e2:b8:91:8b:12:2c:c9:69:eb:f1:65:1c:b1: 2e:19:84:c6:ab:cd:b7:69:d2:0d:61:e0:3a:2e:d0:44:32:76: de:cf:a6:a8:93:dc:0b:5a:0a:01:1b:b5:9c:77:15:96:9b:db: 6a:10:e5:15:88:a6:e1:7d:80:21:7a:04:d2:20:04:c4:9a:7c: 68:c8:56:b4:ee:b4:49:db:0b:c7:e3:51:e1:2b:6f:b1:47:00: c4:e1:f6:0c:7f:f5:c7:73:4a:ba:c0:f6:f4:d3:8a:9d:fb:e7: b9:2f:7a:7e:b1:e7:dc:78:c5:b2:79:42:7c:d5:6f:8e:49:ac: b0:10:de:59:f2:32:63:38:4e:51:55:25:47:b9:de:25:26:91: 8e:91:0e:3e:00:f2:e4:25:77:ff:45:53:3e:02:46:79:ea:40: 03:86:a4:c2:59:6c:ac:ed:f1:f7:6a:a4:92:f1:3b:56:f3:0d: 15:99:e7:65:bb:bb:70:7f:80:5f:50:c9:77:53:ca:5a:06:d7: b2:c1:dd:8e:b0:79:73:49:e6:1a:ac:7a:1f:9c:e9:06:f7:fd: 85:ab:9f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjQwNTAzMDIyNzM2WhcNMjQwNTEwMDIyNzM2WjAYMRYwFAYD VQQDEw02NjM0NGI5OC0wY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweAugg2uD114hlLA0yH5aaPueosv75YYQXfmAQA53PfzSrnpCo4nXtzl/9KR eowO1tGCieNm2fnU5QoGCboYwnmVysXMS0Pn5KlJ9rxhROGZCPfzproW0SkmdTlp 1BPCXHNDW4+sYKLm1KbnqVRgwvoGN4O9lSdbEpJD0ors6n20X1NYYw02IYKI9UTH zkbpFnjaTqrUKu7+o8GXw5qVgTUFiOdt2KFkEjVivMd/PWuSduc78xS5k/IHZl9g 2nv/cfoJmQdBZNumxb8NeOqTU1lDR7NFH1vLeUL000eybsnKgOXVXdotl4elVEbS QlaUfXlRDWTtyVTlUw9syetlLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM07l44 4nJCaay69qx691kWhLTcMB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4dBJc8En35BNR/sigIs8y3o9m3uhNDPVTgsr+ubjwbUvMUQhyh29U kuK4kYsSLMlp6/FlHLEuGYTGq823adINYeA6LtBEMnbez6aok9wLWgoBG7WcdxWW m9tqEOUViKbhfYAhegTSIATEmnxoyFa07rRJ2wvH41HhK2+xRwDE4fYMf/XHc0q6 wPb004qd++e5L3p+sefceMWyeUJ81W+OSaywEN5Z8jJjOE5RVSVHud4lJpGOkQ4+ APLkJXf/RVM+AkZ56kADhqTCWWys7fH3aqSS8TtW8w0Vmedlu7twf4BfUMl3U8pa Bteywd2OsHlzSeYarHofnOkG9/2Fq59b -----END CERTIFICATE-----Generated at Fri May 3 03:10:53 2024 by rpki-client on console-ams.rpki-client.org