$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json) Hash identifier: Th+nazGyu+wTM92xN8Rb/hwFFyu3xTig8VRQuIeIue0= Subject key identifier: B9:5B:8B:3E:E2:7D:3F:C7:68:45:64:FD:74:2E:A2:61:49:66:2D:F4 Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft Manifest number: 65 Signing time: Fri 31 May 2024 08:35:56 +0000 Manifest this update: Fri 31 May 2024 08:35:55 +0000 Manifest next update: Fri 07 Jun 2024 08:35:55 +0000 Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: 89TW4R8/js8IdLvweWBqyXtg+0dQGZLO9WSDr03eMOA=) 2: 209A2EA88D9B11EEB4F6C646C4F9AE02.roa (hash: t98TzM/dH6Z0S1YjmBFC8aqcGxXk9nsgXCocY//ngE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: May 31 08:35:55 2024 GMT Not After : Jun 7 08:35:55 2024 GMT Subject: CN=66598beb-27d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:45:15:01:05:58:8c:eb:0a:fb:6f:81:46: 09:61:8f:1e:33:43:69:24:f8:1b:ff:72:87:7a:ac: ed:e2:d2:a8:9d:12:03:f5:3a:c1:a9:e9:b8:30:b7: 26:13:69:d1:01:de:56:c0:ae:05:0c:76:b6:ab:a4: e7:3f:4d:b9:dd:f2:67:32:80:fa:9e:03:fc:04:1b: 25:ce:33:44:54:3f:19:96:34:6c:cc:1d:15:30:d9: 4b:19:50:85:a5:92:90:f2:57:41:d7:45:aa:c1:4d: f1:4f:08:1a:b3:e5:4d:87:7b:3c:50:dd:46:a4:cc: 42:e3:47:a8:bc:3e:f0:f0:cd:4f:93:69:83:b9:c0: a6:c5:91:98:8e:b6:02:ff:1e:cf:1c:af:d3:4d:2c: bc:81:58:97:ee:98:68:b0:74:a5:d8:a5:a4:ea:83: a4:37:a7:d4:7b:66:6b:94:c5:7d:dc:98:af:db:be: ba:f9:c9:3c:cd:8b:1c:da:17:b1:a7:0e:b2:80:79: 23:46:b2:26:c5:9b:d3:0a:d0:0d:e0:7b:a6:92:e0: 47:36:79:ee:34:13:35:fe:55:9d:58:44:e4:5b:3d: 81:e3:b8:cb:b4:a2:d4:2c:de:f5:8e:9c:8e:91:28: 1c:b6:e9:96:09:f9:8a:39:61:c8:ea:29:ed:f2:89: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5B:8B:3E:E2:7D:3F:C7:68:45:64:FD:74:2E:A2:61:49:66:2D:F4 X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:57:64:c0:c0:c9:9d:80:50:9c:e1:69:a7:55:f1:6d:f9:9c: 31:9d:ef:38:43:f6:c2:fa:61:68:09:97:88:03:b1:50:86:f9: 4b:d6:c1:64:3d:b0:bb:8f:50:f9:3f:fc:37:a1:4e:8f:e2:e2: 56:ad:4e:18:23:85:26:e6:f1:2d:b9:0b:86:3a:60:6d:99:1e: 17:85:f5:7e:a8:80:31:f8:9c:60:12:37:80:d6:8c:2c:14:62: 95:d9:0d:87:22:72:e5:a0:4b:6b:38:ba:a3:8a:e2:29:11:96: 15:d1:a7:93:4d:da:13:0e:7a:2b:3c:88:22:10:2c:fb:61:2b: 0c:46:e1:21:e2:3b:c8:3a:be:a1:ad:cf:72:53:5a:e8:89:0e: aa:18:47:ac:7e:f4:b6:82:60:85:fb:f8:c3:d7:f6:e7:8b:a2: 8a:51:92:79:1c:5b:6a:86:a0:e1:57:40:48:e5:5a:67:9e:52: b2:cb:b1:e5:d0:f7:c4:7e:d9:b9:b1:e2:62:b5:be:91:eb:3e: 92:61:f7:0d:1f:9b:41:e9:d4:95:d9:0f:d5:a5:40:ac:8d:4c: e0:ad:dd:c8:8e:98:92:b0:06:9d:f7:21:fe:04:1d:10:e6:e7: 31:c4:1b:61:fc:14:40:ad:f0:f2:be:61:9f:89:ab:ef:9d:ea: 58:e9:4e:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjNDMTExMC8GA1UEBRMoNDE1M0JBNDk5QTQ0RTdFQzEwNDFDNjBFRjdGMzY5QUM2 MjM1N0FBODAeFw0yNDA1MzEwODM1NTVaFw0yNDA2MDcwODM1NTVaMBgxFjAUBgNV BAMTDTY2NTk4YmViLTI3ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrtkUVAQVYjOsK+2+BRglhjx4zQ2kk+Bv/cod6rO3i0qidEgP1OsGp6bgwtyYT adEB3lbArgUMdrarpOc/Tbnd8mcygPqeA/wEGyXOM0RUPxmWNGzMHRUw2UsZUIWl kpDyV0HXRarBTfFPCBqz5U2HezxQ3UakzELjR6i8PvDwzU+TaYO5wKbFkZiOtgL/ Hs8cr9NNLLyBWJfumGiwdKXYpaTqg6Q3p9R7ZmuUxX3cmK/bvrr5yTzNixzaF7Gn DrKAeSNGsibFm9MK0A3ge6aS4Ec2ee40EzX+VZ1YRORbPYHjuMu0otQs3vWOnI6R KBy26ZYJ+Yo5YcjqKe3yiQI/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuVuLPuJ9 P8doRWT9dC6iYUlmLfQwHwYDVR0jBBgwFoAUQVO6SZpE5+wQQcYO9/NprGI1eqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyM0MxLzBFMERGQTk4OEND RjExRUU5NkY0RTY1QUM0RjlBRTAyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVx Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVZPNlNacEU1LXdRUWNZTzlfTnByR0kxZXFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy M0MxLzBFMERGQTk4OENDRjExRUU5NkY0RTY1QUM0RjlBRTAyL1FWTzZTWnBFNS13 UVFjWU85X05wckdJMWVxZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD9XZMDAyZ2AUJzhaadV8W35nDGd7zhD9sL6YWgJl4gDsVCG+UvWwWQ9 sLuPUPk//DehTo/i4latThgjhSbm8S25C4Y6YG2ZHheF9X6ogDH4nGASN4DWjCwU YpXZDYcicuWgS2s4uqOK4ikRlhXRp5NN2hMOeis8iCIQLPthKwxG4SHiO8g6vqGt z3JTWuiJDqoYR6x+9LaCYIX7+MPX9ueLoopRknkcW2qGoOFXQEjlWmeeUrLLseXQ 98R+2bmx4mK1vpHrPpJh9w0fm0Hp1JXZD9WlQKyNTOCt3ciOmJKwBp33If4EHRDm 5zHEG2H8FECt8PK+YZ+Jq++d6ljpTog= -----END CERTIFICATE-----Generated at Fri May 31 10:01:43 2024 by rpki-client on console-ams.rpki-client.org