$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: DL6JnoQuB5HKr73QzkZYlDABRJjIXwCj6NwOEO98eN8= Subject key identifier: D3:11:40:EB:D3:78:3D:0E:56:4F:FB:AB:31:44:90:A2:F1:DA:48:2E Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 67 Signing time: Wed 15 May 2024 08:07:50 +0000 Manifest this update: Wed 15 May 2024 08:07:50 +0000 Manifest next update: Wed 22 May 2024 08:07:50 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: OHwXZVAsBUGfKBPLb1eJKI2QxO6GEfdREYvn0cMM1Ic=) 2: 206CBC5CF76811EEAF5CBE5FC4F9AE02.roa (hash: Zbfa5MMYIb5XjdO39IICaP2hG6ZT9IQx+CLPJhnO76o=) 3: 9CDA9126F76611EE99BA2B43C4F9AE02.roa (hash: OpyXnyA/Ad1XYEszmU5CKJ88pHcx3yghHfsVKBcNcyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: May 15 08:07:50 2024 GMT Not After : May 22 08:07:50 2024 GMT Subject: CN=66446d56-41e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:56:f8:b9:bc:43:35:25:6e:41:d8:86:3a: c9:37:f5:58:26:15:a3:a6:3b:a0:74:7e:23:02:d0: d4:d9:b9:c5:f7:df:4c:8c:95:1e:f2:9c:31:9e:fb: 59:96:08:cc:bd:59:18:37:db:5e:9f:9b:09:36:4d: 55:08:a2:08:15:49:8f:24:50:5e:2b:69:e5:bc:38: d4:57:3c:7c:17:90:67:22:78:55:46:25:a1:fc:62: cb:fd:b5:b6:22:de:61:af:ad:5d:9f:49:8d:2a:8d: 89:54:89:c4:12:57:31:ca:d6:79:81:b2:61:79:07: f5:e7:8f:64:aa:0b:6c:ee:36:e0:72:20:ec:53:e4: c9:8d:50:4d:a6:d6:ea:35:97:d0:ea:27:bd:98:f0: c9:68:56:45:7c:98:08:61:a2:9f:4b:7c:d5:5a:3a: a0:51:b3:1e:74:8d:7b:a0:3f:2a:2a:8e:9d:97:46: 78:e9:7e:d6:75:58:3b:2c:a4:2a:3d:f5:74:95:2f: e4:fc:71:78:cf:5f:33:1b:8a:19:4d:40:cf:00:fb: 08:51:94:b8:a7:91:49:72:58:6e:87:04:16:84:a8: ce:14:f9:99:ef:af:e4:e0:9f:d4:18:9b:61:1f:fd: dc:2f:cf:01:59:5a:be:eb:26:03:1e:d3:e4:05:07: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:11:40:EB:D3:78:3D:0E:56:4F:FB:AB:31:44:90:A2:F1:DA:48:2E X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ab:29:f5:43:5b:6d:6d:84:0f:a6:15:e8:84:55:8b:15:90: 81:6c:52:ba:df:e4:c8:e7:ed:64:16:c7:2f:83:7d:2a:0b:5d: 6d:9a:54:05:5b:24:07:4b:71:8a:ad:6f:a7:3e:9f:94:63:cf: 5f:fc:a5:54:66:0a:6b:0a:16:03:9d:2b:c5:fd:fc:e1:17:61: 00:78:69:fd:d1:9b:63:72:c7:58:39:ab:32:5a:4b:ff:9f:a3: d4:c7:da:f9:45:04:02:eb:4f:2d:91:a1:54:3c:f2:17:ec:f1: 29:24:5a:db:e3:a6:b7:4a:41:1e:5d:b0:d9:8e:39:99:81:62: 2a:96:2a:6d:ae:b0:f0:df:65:e4:f6:f0:b6:c2:9c:24:70:e0: db:23:c9:42:20:d4:7f:74:04:de:e9:26:18:0a:4e:9c:97:bd: 3a:20:6c:bb:2a:d4:b9:d4:5e:1c:5a:f7:da:71:41:6f:5e:f1: 43:19:61:f7:49:1c:e1:d4:f4:f4:06:da:67:94:ae:3c:c9:9e: 41:d7:90:b4:ff:04:c6:c0:70:40:ca:2d:60:15:95:fa:3f:7c: 0c:ca:2a:82:b2:00:82:77:77:94:43:6a:1a:cb:b6:3a:36:89: f5:6c:b8:83:4a:0e:df:48:bd:7e:a3:e4:10:dc:a8:16:30:6d: 22:d4:b7:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTkyRDExMC8GA1UEBRMoQTgxRDBENjFGN0I3MzBEREI3NDJDQzQ4QUREODhBMDRE NDZGRDAyNDAeFw0yNDA1MTUwODA3NTBaFw0yNDA1MjIwODA3NTBaMBgxFjAUBgNV BAMTDTY2NDQ2ZDU2LTQxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEIlb4ubxDNSVuQdiGOsk39VgmFaOmO6B0fiMC0NTZucX330yMlR7ynDGe+1mW CMy9WRg3216fmwk2TVUIoggVSY8kUF4raeW8ONRXPHwXkGcieFVGJaH8Ysv9tbYi 3mGvrV2fSY0qjYlUicQSVzHK1nmBsmF5B/Xnj2SqC2zuNuByIOxT5MmNUE2m1uo1 l9DqJ72Y8MloVkV8mAhhop9LfNVaOqBRsx50jXugPyoqjp2XRnjpftZ1WDsspCo9 9XSVL+T8cXjPXzMbihlNQM8A+whRlLinkUlyWG6HBBaEqM4U+Znvr+Tgn9QYm2Ef /dwvzwFZWr7rJgMe0+QFByJpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0xFA69N4 PQ5WT/urMUSQovHaSC4wHwYDVR0jBBgwFoAUqB0NYfe3MN23QsxIrdiKBNRv0CQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExOTJEL0NDNjdEMjUyQTRC QzExRUU5RTVBNUQ3MkM0RjlBRTAyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUIwTllmZTNNTjIzUXN4SXJkaUtCTlJ2MENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx OTJEL0NDNjdEMjUyQTRCQzExRUU5RTVBNUQ3MkM0RjlBRTAyL3FCME5ZZmUzTU4y M1FzeElyZGlLQk5SdjBDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOrKfVDW21thA+mFeiEVYsVkIFsUrrf5Mjn7WQWxy+DfSoLXW2aVAVb JAdLcYqtb6c+n5Rjz1/8pVRmCmsKFgOdK8X9/OEXYQB4af3Rm2Nyx1g5qzJaS/+f o9TH2vlFBALrTy2RoVQ88hfs8SkkWtvjprdKQR5dsNmOOZmBYiqWKm2usPDfZeT2 8LbCnCRw4NsjyUIg1H90BN7pJhgKTpyXvTogbLsq1LnUXhxa99pxQW9e8UMZYfdJ HOHU9PQG2meUrjzJnkHXkLT/BMbAcEDKLWAVlfo/fAzKKoKyAIJ3d5RDahrLtjo2 ifVsuINKDt9IvX6j5BDcqBYwbSLUty4= -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org