$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft File: QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft (raw, json) Hash identifier: hFx/ZrGf1e4ACAQdbBdC/dUzrUdpow3pwyCqwh03qoM= Subject key identifier: 8C:EA:E3:E8:B2:9C:FF:EF:23:8F:FD:87:0C:F2:10:7B:10:E7:33:A8 Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Certificate serial: 06BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft Manifest number: 06B3 Signing time: Sat 18 May 2024 23:10:18 +0000 Manifest this update: Sat 18 May 2024 23:10:17 +0000 Manifest next update: Sat 25 May 2024 23:10:17 +0000 Files and hashes: 1: QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl (hash: xooth/MBJ0El33IxFMBjPZD4R5O0kByLu8KhYRa/VGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Validity Not Before: May 18 23:10:17 2024 GMT Not After : May 25 23:10:17 2024 GMT Subject: CN=66493559-f14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:f1:54:b0:e2:8b:4e:64:f9:e4:d9:9b:83: b0:27:4b:d4:9b:53:18:fe:7a:87:b1:6c:fc:b3:34: a5:07:60:c4:1f:9c:b0:c9:8b:5a:36:c5:b0:68:72: 19:90:d9:cd:52:6a:7c:c3:5a:b7:db:de:6f:bd:cd: 89:17:b0:9b:e5:64:ec:17:cd:d5:5a:89:a3:76:20: da:3a:9c:ec:c8:21:e9:1e:7f:24:f9:36:7c:a3:5e: eb:eb:d7:7d:50:40:a9:f5:69:41:7c:82:c4:8c:d1: 2c:0a:4c:1a:9e:be:e1:ef:55:39:0a:19:6a:d8:88: 65:dd:d5:8c:47:5e:e1:c3:6b:f3:a4:1a:67:c4:f9: 0e:36:a9:99:e5:ef:20:0f:09:bb:8a:82:0f:10:bd: e3:16:e8:1e:78:7a:56:67:74:f5:67:bb:65:05:52: 47:62:e0:07:c8:16:ea:1a:16:c5:01:be:be:3c:e7: 64:7e:92:29:d8:e8:b7:b4:c2:10:f0:6e:b4:56:cd: c2:ac:49:4a:22:99:ff:ec:3b:0d:fb:c5:8b:c6:2e: 38:50:a4:e9:7b:a9:75:01:4e:9c:06:9e:9c:38:cf: 74:4a:99:6b:97:71:6c:46:bc:ef:c9:2c:4d:7b:e1: f1:0a:8a:55:e6:1f:6f:37:75:64:fe:bf:0c:5d:c8: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EA:E3:E8:B2:9C:FF:EF:23:8F:FD:87:0C:F2:10:7B:10:E7:33:A8 X509v3 Authority Key Identifier: keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ad:9f:e1:01:d2:ef:0e:37:f8:50:e6:fe:61:53:8e:3b:62: 55:9d:d0:88:65:17:31:0d:55:df:53:b8:0a:5f:82:22:8a:ae: 51:d4:6d:dd:16:70:85:c7:4d:df:b3:04:4c:cf:27:ad:3d:b4: a3:2a:17:d7:4f:f7:40:5e:f9:ff:05:0d:8f:88:3f:03:cd:e8: 85:03:7a:27:e1:cc:e7:7b:10:07:f6:6c:3f:46:6c:ca:42:bb: 12:24:e6:69:4f:7f:21:10:a0:54:9a:20:e1:fa:1c:0b:3b:87: 98:50:d2:22:d0:2e:0d:e4:0f:4b:46:11:eb:71:76:21:05:aa: 46:2b:30:af:f4:a7:38:94:dd:a4:61:cf:b3:96:ab:6d:18:4d: 17:89:f6:c1:04:aa:60:6b:6e:6f:83:69:e3:ec:7f:c6:16:03: a3:60:44:93:4f:2b:91:a9:6a:61:3f:d7:ad:47:a7:96:3c:ac: 9b:1d:f2:d7:ba:8d:8f:88:44:13:7f:ea:36:75:69:5d:f3:27: 8a:b6:71:c6:44:42:b2:3d:33:58:02:8d:83:cc:0a:c0:1e:7a: 43:3f:7d:29:b0:18:28:34:d2:9a:7a:10:69:05:b0:fb:65:40: ea:12:a9:cc:4a:db:fe:99:64:db:a5:04:24:41:82:74:42:06: af:b6:da:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5NDYxMTAvBgNVBAUTKDQzMzhDRTNDMDYzMTBBN0E5NEYwOUJCMTM2RkFDQkMy ODM1NUFGQ0IwHhcNMjQwNTE4MjMxMDE3WhcNMjQwNTI1MjMxMDE3WjAYMRYwFAYD VQQDEw02NjQ5MzU1OS1mMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSvxVLDii05k+eTZm4OwJ0vUm1MY/nqHsWz8szSlB2DEH5ywyYtaNsWwaHIZ kNnNUmp8w1q3295vvc2JF7Cb5WTsF83VWomjdiDaOpzsyCHpHn8k+TZ8o17r69d9 UECp9WlBfILEjNEsCkwanr7h71U5Chlq2Ihl3dWMR17hw2vzpBpnxPkONqmZ5e8g Dwm7ioIPEL3jFugeeHpWZ3T1Z7tlBVJHYuAHyBbqGhbFAb6+POdkfpIp2Oi3tMIQ 8G60Vs3CrElKIpn/7DsN+8WLxi44UKTpe6l1AU6cBp6cOM90Splrl3FsRrzvySxN e+HxCopV5h9vN3Vk/r8MXch1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzq4+iy nP/vI4/9hwzyEHsQ5zOoMB8GA1UdIwQYMBaAFEM4zjwGMQp6lPCbsTb6y8KDVa/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTk0Ni9DNjdFRDFGRTE3 RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENucVU4SnV4TnZyTHdvTlZy OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F6ak9QQVl4Q25xVThKdXhOdnJMd29OVnI4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTk0Ni9DNjdFRDFGRTE3RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENu cVU4SnV4TnZyTHdvTlZyOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPrZ/hAdLvDjf4UOb+YVOOO2JVndCIZRcxDVXfU7gKX4Iiiq5R1G3d FnCFx03fswRMzyetPbSjKhfXT/dAXvn/BQ2PiD8DzeiFA3on4cznexAH9mw/RmzK QrsSJOZpT38hEKBUmiDh+hwLO4eYUNIi0C4N5A9LRhHrcXYhBapGKzCv9Kc4lN2k Yc+zlqttGE0XifbBBKpga25vg2nj7H/GFgOjYESTTyuRqWphP9etR6eWPKybHfLX uo2PiEQTf+o2dWld8yeKtnHGREKyPTNYAo2DzArAHnpDP30psBgoNNKaehBpBbD7 ZUDqEqnMStv+mWTbpQQkQYJ0Qgavttq2 -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org