$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json) Hash identifier: gPwNzZN3Pvjvr840xVEZ7MLoRLxZCLb3O6xJsw78A/k= Subject key identifier: 80:E2:B4:72:90:17:B5:EA:ED:CD:D4:DA:8A:0D:C3:B4:1B:D1:09:CE Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft Manifest number: 67 Signing time: Sat 01 Jun 2024 09:00:08 +0000 Manifest this update: Sat 01 Jun 2024 09:00:07 +0000 Manifest next update: Sat 08 Jun 2024 09:00:07 +0000 Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: +RM6V+nS0WJJy6xh+27oRM5puXWgA4zMWhqx1SXH1qE=) 2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: n4N0FT2lZDwaB7NLBXSRmim8K1WaikU2H0XvlYORAuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Validity Not Before: Jun 1 09:00:07 2024 GMT Not After : Jun 8 09:00:07 2024 GMT Subject: CN=665ae318-94e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:51:6d:5b:ba:b6:21:90:57:6a:83:20:1c: 47:6c:93:b0:77:71:56:c0:2e:77:35:79:79:1c:b8: 06:98:b7:26:14:18:83:2b:cb:99:15:d6:4f:2a:d0: c1:95:9f:44:df:f1:c4:fd:6a:3d:ec:14:c5:07:21: 82:d8:90:97:83:e6:48:50:0a:38:d2:78:e4:03:a4: aa:83:fa:64:8d:bc:3d:07:55:6c:28:0f:42:20:33: 4d:5f:2e:e5:42:4c:4f:46:fb:ce:52:f7:c2:be:b1: f2:c5:43:6a:a5:e4:90:57:33:22:2c:5c:ed:b7:8c: 07:1a:60:0f:8f:7e:c2:25:ee:75:45:4f:0d:94:44: ce:c5:b9:81:e3:db:98:68:82:f4:85:f1:5a:5f:a8: 29:d2:70:25:c7:5b:36:80:1b:68:83:99:ba:e1:77: 4d:79:97:61:56:ba:fe:e0:5c:e2:1d:dc:05:da:4d: b7:c3:32:0f:fd:94:eb:7e:3c:e3:c1:38:32:4e:bf: 87:d7:31:87:57:76:61:5b:2c:c1:f6:bc:cf:83:7d: 68:44:b6:cb:ef:88:07:f6:4b:cc:d0:a8:5a:ba:94: 49:a2:4d:67:69:29:fc:eb:cf:25:0f:d4:d6:cd:79: 67:7f:11:84:62:bc:1c:6b:b0:4b:f1:73:eb:6f:f5: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:B4:72:90:17:B5:EA:ED:CD:D4:DA:8A:0D:C3:B4:1B:D1:09:CE X509v3 Authority Key Identifier: keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:bd:90:38:25:62:0b:cc:82:1b:3d:15:95:64:be:d5:19:f6: c2:70:9e:24:b7:72:41:98:57:9b:47:4f:8b:69:73:1a:56:02: 54:b0:c7:87:51:c5:3f:98:9d:ab:8f:65:ed:04:bc:3d:77:8c: 68:10:0e:0c:7e:22:68:0e:ca:e3:78:81:78:a0:4b:6e:e1:30: 29:a6:c9:e7:a0:97:4f:ed:1d:8f:80:b0:51:18:27:51:0f:87: 45:ae:20:b5:c1:61:d9:40:43:bf:a2:f8:5c:f0:8e:ff:25:2c: b9:bb:09:2f:bf:40:f7:24:7f:f9:b4:be:64:a9:88:e3:7a:9b: 30:2b:2f:be:1d:09:f1:40:2d:45:e5:16:fb:1e:a0:c0:1d:3e: 0d:c2:71:0f:16:6e:cf:89:b2:df:a3:4e:e1:1c:27:32:41:9b: d6:f4:36:be:00:49:83:5c:aa:d2:93:b0:89:0b:43:2c:3d:94: ee:28:4e:e9:99:a1:83:38:5c:81:87:d9:0e:d4:d4:a3:17:fd: e3:30:64:c9:1f:e5:8c:17:ae:ec:39:08:14:a0:44:08:20:be: 9c:75:ce:74:b7:50:07:47:bb:6a:ba:77:a6:0d:c7:51:f6:98: ed:b0:bb:26:ff:06:b4:dd:15:f1:92:35:3f:1c:cc:3d:d0:3b: 8d:56:99:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjdCMTExMC8GA1UEBRMoNDMyQTM2RTZENTcwMEIwQkNBQ0NFMEY0MTU3NkFFNkIx M0NBRDNDMDAeFw0yNDA2MDEwOTAwMDdaFw0yNDA2MDgwOTAwMDdaMBgxFjAUBgNV BAMTDTY2NWFlMzE4LTk0ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxNlFtW7q2IZBXaoMgHEdsk7B3cVbALnc1eXkcuAaYtyYUGIMry5kV1k8q0MGV n0Tf8cT9aj3sFMUHIYLYkJeD5khQCjjSeOQDpKqD+mSNvD0HVWwoD0IgM01fLuVC TE9G+85S98K+sfLFQ2ql5JBXMyIsXO23jAcaYA+PfsIl7nVFTw2URM7FuYHj25ho gvSF8VpfqCnScCXHWzaAG2iDmbrhd015l2FWuv7gXOId3AXaTbfDMg/9lOt+POPB ODJOv4fXMYdXdmFbLMH2vM+DfWhEtsvviAf2S8zQqFq6lEmiTWdpKfzrzyUP1NbN eWd/EYRivBxrsEvxc+tv9WIBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgOK0cpAX tertzdTaig3DtBvRCc4wHwYDVR0jBBgwFoAUQyo25tVwCwvKzOD0FXauaxPK08Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyN0IxLzhGQUYyQkRFODJB MzExRUVBQzY5RjQ1NkM0RjlBRTAyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXlvMjV0VndDd3ZLek9EMEZYYXVheFBLMDhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy N0IxLzhGQUYyQkRFODJBMzExRUVBQzY5RjQ1NkM0RjlBRTAyL1F5bzI1dFZ3Q3d2 S3pPRDBGWGF1YXhQSzA4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABa9kDglYgvMghs9FZVkvtUZ9sJwniS3ckGYV5tHT4tpcxpWAlSwx4dR xT+YnauPZe0EvD13jGgQDgx+ImgOyuN4gXigS27hMCmmyeegl0/tHY+AsFEYJ1EP h0WuILXBYdlAQ7+i+Fzwjv8lLLm7CS+/QPckf/m0vmSpiON6mzArL74dCfFALUXl FvseoMAdPg3CcQ8Wbs+Jst+jTuEcJzJBm9b0Nr4ASYNcqtKTsIkLQyw9lO4oTumZ oYM4XIGH2Q7U1KMX/eMwZMkf5YwXruw5CBSgRAggvpx1znS3UAdHu2q6d6YNx1H2 mO2wuyb/BrTdFfGSNT8czD3QO41WmWw= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:28 2024 by rpki-client on console-fra.rpki-client.org