$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: Uedz6IkXkdEVYOencXRUr8QMDWEfvAkyyoRuJeuWMmg= Subject key identifier: A1:56:11:81:61:FB:9A:EA:0A:3B:B6:C1:03:32:BC:72:BA:B0:B7:F2 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 079E Signing time: Tue 30 Apr 2024 22:33:37 +0000 Manifest this update: Tue 30 Apr 2024 22:33:36 +0000 Manifest next update: Tue 07 May 2024 22:33:36 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: PRfWqTnjFo51lC46YA9K5b90M7+ALzlbZhDfhBME1VM=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: I+1rdMFlu0j7ia3qK0QlemFhqFiTfHZq0qG04UwCuns=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: VodRmYDriDSsRlbAbKg2ev0WOG4qQ0c561pGb4IEG9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Apr 30 22:33:36 2024 GMT Not After : May 7 22:33:36 2024 GMT Subject: CN=663171c0-057f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:29:a1:73:88:fe:c7:a3:76:1e:10:4c:19: 87:f5:f9:94:36:d6:b7:40:20:23:49:e2:a9:b2:ac: 37:41:13:d6:4c:f3:50:ee:dd:be:3c:78:4a:0b:03: 87:17:bf:b3:32:e3:82:43:47:f3:01:f2:52:e0:62: c0:b4:06:15:de:e2:c1:79:80:f5:c5:95:ab:f7:57: 13:16:51:47:c4:11:4b:4b:96:df:3c:34:4c:9c:2e: 79:45:8e:03:94:4a:22:29:a0:7a:8c:05:1e:a6:58: 87:df:d9:a1:ec:44:e9:a6:18:04:8d:9e:d5:8d:dd: d0:53:48:7b:4f:3a:e9:ef:66:45:8b:db:e7:4a:b7: 47:b2:d0:30:44:a2:90:e8:c6:22:c5:86:70:d3:b4: 42:76:09:b9:18:aa:0b:ae:5d:13:48:94:5f:3a:00: 55:85:c6:28:be:e8:7c:72:66:d2:12:ca:51:39:ca: df:7a:f6:f7:08:4a:b1:b8:60:cc:a7:5c:e5:84:b7: 7c:41:c8:3b:51:8a:9d:8f:c7:64:c5:72:19:8d:65: c3:a0:f1:2b:d0:ca:34:8e:e6:2e:b0:68:78:f3:12: 2f:52:f4:8d:55:5c:9e:ac:ea:66:c0:1e:21:c3:6e: d8:fe:ec:20:a0:f9:e6:43:a3:f0:51:a1:32:8b:1b: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:11:81:61:FB:9A:EA:0A:3B:B6:C1:03:32:BC:72:BA:B0:B7:F2 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a9:d3:21:53:fa:ac:6a:b5:50:b4:b1:ac:ba:c1:a5:f7:f1: 7c:a1:81:fc:2e:db:8b:3f:ce:9d:a0:76:95:73:0c:6e:40:39: 78:5c:7e:4e:df:85:c2:96:99:44:58:8c:a5:2c:64:ba:20:9c: 24:5a:09:3c:6a:d6:2d:c7:76:59:91:8c:eb:40:11:bf:d5:ca: 5f:35:42:44:d1:03:9a:ac:34:14:82:88:d4:9f:17:14:53:c5: 3e:ee:d8:fb:1e:b4:69:43:32:1c:eb:85:cf:7f:89:cc:74:3b: 93:00:38:e9:67:c8:08:48:3d:97:e5:5b:63:3f:ca:a8:5d:7d: 22:a4:f6:10:90:c7:fb:d0:84:3b:17:19:87:d7:22:cb:fb:8e: 6f:54:3c:af:84:af:d2:60:2f:a2:10:d8:17:c5:90:51:bf:ef: 7c:e9:6a:06:3f:cf:c9:15:70:62:28:c0:88:dd:82:ff:d3:e7: 74:b9:f2:7d:7c:bb:54:e6:eb:ca:9e:ad:26:4d:3b:54:b9:9c: b9:93:9d:ab:df:09:1e:f2:bd:e4:e2:7f:8e:d2:69:52:a4:00: 96:5f:e1:2e:74:a7:6d:af:6b:e7:b9:49:14:8b:6b:5e:f8:fd: 09:58:c7:f0:59:59:0f:00:dd:73:b5:4e:51:b8:c1:1d:76:5d: b1:c5:6a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjQwNDMwMjIzMzM2WhcNMjQwNTA3MjIzMzM2WjAYMRYwFAYD VQQDEw02NjMxNzFjMC0wNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFcpoXOI/sejdh4QTBmH9fmUNta3QCAjSeKpsqw3QRPWTPNQ7t2+PHhKCwOH F7+zMuOCQ0fzAfJS4GLAtAYV3uLBeYD1xZWr91cTFlFHxBFLS5bfPDRMnC55RY4D lEoiKaB6jAUepliH39mh7ETpphgEjZ7Vjd3QU0h7Tzrp72ZFi9vnSrdHstAwRKKQ 6MYixYZw07RCdgm5GKoLrl0TSJRfOgBVhcYovuh8cmbSEspROcrfevb3CEqxuGDM p1zlhLd8Qcg7UYqdj8dkxXIZjWXDoPEr0Mo0juYusGh48xIvUvSNVVyerOpmwB4h w27Y/uwgoPnmQ6PwUaEyixvs4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFWEYFh +5rqCju2wQMyvHK6sLfyMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqdMhU/qsarVQtLGsusGl9/F8oYH8LtuLP86doHaVcwxuQDl4XH5O 34XClplEWIylLGS6IJwkWgk8atYtx3ZZkYzrQBG/1cpfNUJE0QOarDQUgojUnxcU U8U+7tj7HrRpQzIc64XPf4nMdDuTADjpZ8gISD2X5VtjP8qoXX0ipPYQkMf70IQ7 FxmH1yLL+45vVDyvhK/SYC+iENgXxZBRv+986WoGP8/JFXBiKMCI3YL/0+d0ufJ9 fLtU5uvKnq0mTTtUuZy5k52r3wke8r3k4n+O0mlSpACWX+EudKdtr2vnuUkUi2te +P0JWMfwWVkPAN1ztU5RuMEddl2xxWr/ -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:17 2024 by rpki-client on console-fra.rpki-client.org