$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: Tav4BqreyPakisDsknAs0qjpzDH6n4+wZHcquvURUos= Subject key identifier: 87:AE:06:70:5C:C3:64:7E:F8:53:53:29:9A:A8:AB:D7:FE:97:38:DE Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 074A Signing time: Sat 18 May 2024 22:21:53 +0000 Manifest this update: Sat 18 May 2024 22:21:53 +0000 Manifest next update: Sat 25 May 2024 22:21:53 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: o1sC4kXIxG+UCz1mmN9B2GKhGqYRj2APkg26+zuiC34=) 2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: JQJpjuE7dTLHbnHIUhjbyxmUJz3KthVC6JU7hRdjeUo=) 3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: 2VtzC1wNl+/IWRn1jdogIA2gjxLNEWi2d4TWXps0MWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: May 18 22:21:53 2024 GMT Not After : May 25 22:21:53 2024 GMT Subject: CN=66492a01-75a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:2b:6f:25:6f:5f:d2:fd:e6:ce:3e:8a:6e: 50:8d:cb:cc:bd:15:8e:ac:15:04:ef:01:b5:92:60: da:1b:72:34:ad:ac:ff:5e:34:30:24:fe:20:0c:2d: 1e:28:f4:9d:ac:5d:b5:c1:06:2a:51:c4:7e:2c:75: ae:1f:38:99:3e:a0:38:2e:86:b2:30:36:3d:6d:b4: f4:26:e1:94:43:35:45:e3:26:38:73:f4:7e:f6:44: 9f:23:5d:53:20:1b:ec:75:81:c9:ac:df:1f:d6:cd: 1f:42:74:a1:91:cf:b0:f4:38:c6:1c:7b:86:3e:21: 90:cf:ea:fa:eb:86:92:8e:64:c9:17:e8:3b:93:7f: e0:78:6b:aa:1e:2c:84:7e:de:69:f0:c4:01:4c:aa: 03:98:43:10:ba:4e:20:ee:0e:f6:9f:1c:a8:65:ed: 76:44:f9:e1:f7:26:82:7f:97:7a:ea:c4:b6:af:2f: e5:8e:0a:e4:4b:57:0f:e2:e0:14:32:51:93:d7:3d: 2a:45:51:4a:8f:b2:47:70:22:2a:38:be:e9:9e:1d: a2:9e:e9:97:bb:1e:4e:5f:36:05:95:9a:e4:86:8a: 94:29:75:50:ff:44:2d:0a:d5:48:44:78:67:54:21: e1:5c:c7:1d:76:c5:89:6c:79:79:3b:aa:67:d4:72: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:06:70:5C:C3:64:7E:F8:53:53:29:9A:A8:AB:D7:FE:97:38:DE X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:4f:12:eb:7e:0b:77:22:2c:ee:17:f0:be:2f:19:4d:85: 66:e5:6c:b9:4a:04:fa:be:49:fc:0f:ca:38:8e:ec:81:a1:a7: a5:08:2b:fb:fd:b2:82:2a:1e:ca:b4:68:ba:6d:d3:05:7e:c2: 39:fb:3a:0b:cd:f8:6e:c1:fc:87:66:a2:c1:38:1f:21:82:89: 08:41:85:68:ed:e0:90:c7:23:3d:89:41:c7:1a:78:46:8f:da: c3:9a:db:86:eb:17:fe:8b:b4:28:ab:31:48:43:d0:3b:ef:00: da:8c:9b:27:af:5e:18:0d:f8:b8:fb:44:02:85:2f:47:be:c5: 1f:d9:c5:2b:e8:43:3f:bf:b5:f5:b2:fd:a0:9b:0e:fe:0d:8a: 86:8a:6a:b6:49:56:a7:36:2d:0d:06:af:56:6e:c2:d1:10:53: 73:8f:8e:43:f3:58:81:2d:33:42:2a:dd:4a:cb:cd:51:c5:21: 3c:fb:e9:67:28:c6:f6:c8:44:8d:f2:f7:86:f1:9d:18:6e:62: ac:5b:ab:80:f9:a6:b4:30:03:96:fd:81:37:0c:c3:3e:d5:7a: bc:1e:b6:3d:14:c6:f5:ca:0f:93:7c:72:b2:ed:6e:03:9f:19: d2:01:24:3c:3d:c2:6a:91:11:61:0a:dd:5e:31:82:97:6f:17: 20:85:b2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjQwNTE4MjIyMTUzWhcNMjQwNTI1MjIyMTUzWjAYMRYwFAYD VQQDEw02NjQ5MmEwMS03NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M4rbyVvX9L95s4+im5QjcvMvRWOrBUE7wG1kmDaG3I0raz/XjQwJP4gDC0e KPSdrF21wQYqUcR+LHWuHziZPqA4LoayMDY9bbT0JuGUQzVF4yY4c/R+9kSfI11T IBvsdYHJrN8f1s0fQnShkc+w9DjGHHuGPiGQz+r664aSjmTJF+g7k3/geGuqHiyE ft5p8MQBTKoDmEMQuk4g7g72nxyoZe12RPnh9yaCf5d66sS2ry/ljgrkS1cP4uAU MlGT1z0qRVFKj7JHcCIqOL7pnh2inumXux5OXzYFlZrkhoqUKXVQ/0QtCtVIRHhn VCHhXMcddsWJbHl5O6pn1HL24QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeuBnBc w2R++FNTKZqoq9f+lzjeMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr408S634LdyIs7hfwvi8ZTYVm5Wy5SgT6vkn8D8o4juyBoaelCCv7 /bKCKh7KtGi6bdMFfsI5+zoLzfhuwfyHZqLBOB8hgokIQYVo7eCQxyM9iUHHGnhG j9rDmtuG6xf+i7QoqzFIQ9A77wDajJsnr14YDfi4+0QChS9HvsUf2cUr6EM/v7X1 sv2gmw7+DYqGimq2SVanNi0NBq9WbsLREFNzj45D81iBLTNCKt1Ky81RxSE8++ln KMb2yESN8veG8Z0YbmKsW6uA+aa0MAOW/YE3DMM+1Xq8HrY9FMb1yg+TfHKy7W4D nxnSASQ8PcJqkRFhCt1eMYKXbxcghbIn -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org