$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json) Hash identifier: PlC3QSu9zmGPXdYR6izCkMrWnQA6UJpt/RUf+G80KdA= Subject key identifier: 21:7A:B8:C8:AB:06:12:30:A1:4A:B1:5D:36:70:FD:29:80:44:7B:14 Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft Manifest number: B7 Signing time: Fri 31 May 2024 07:21:41 +0000 Manifest this update: Fri 31 May 2024 07:21:41 +0000 Manifest next update: Fri 07 Jun 2024 07:21:41 +0000 Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: g8+kuSMPGVh1BwyzQE/6yBKfkjqfdskq+zK3E9S+6T0=) 2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: zBhQH2QPBJjbtff0NqJ2sRxz4Z/5Qhlp3SplF8PFlbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Validity Not Before: May 31 07:21:41 2024 GMT Not After : Jun 7 07:21:41 2024 GMT Subject: CN=66597a85-fc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:f2:82:2e:d1:30:d1:23:47:71:82:51:ef: f1:73:2c:f7:f4:c3:35:62:6b:d0:43:df:0d:ad:3c: 66:6b:11:79:d1:f9:1f:1c:d8:f2:6f:36:b1:1c:a4: ed:d5:09:f5:64:5f:c6:33:d8:3c:31:6e:03:6a:2b: 90:fb:8a:20:67:4d:6e:b2:b0:63:aa:ea:58:61:22: 2f:1b:df:36:8a:96:58:65:7f:05:86:43:47:b4:f0: 97:6a:1f:8c:4b:24:ab:b7:04:d0:32:eb:2b:84:93: ea:ff:ac:e9:33:f2:3b:82:ef:3e:7e:5b:bd:73:21: d2:2c:90:88:8a:3b:80:21:46:7b:8f:15:b0:7d:90: b9:24:e9:80:2c:21:1b:72:2b:ac:5a:f0:fc:a4:f9: 13:f2:d8:a4:cd:94:d1:f0:eb:f1:09:8d:61:74:98: 00:cf:00:1c:58:40:06:a6:b9:48:7c:e4:aa:4c:44: 11:9d:0d:e6:70:71:74:60:ee:1f:31:73:bf:b8:86: b4:fd:cb:ae:ae:74:bb:e7:b7:c9:00:19:98:14:1f: 2f:19:21:d1:a2:d6:1f:cf:5d:0c:ad:59:53:bb:d8: ba:a1:74:87:9f:5e:6c:2f:cb:53:90:f6:5c:31:f4: 24:4e:c3:69:da:c6:92:1a:59:a8:09:ee:9a:9c:36: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:B8:C8:AB:06:12:30:A1:4A:B1:5D:36:70:FD:29:80:44:7B:14 X509v3 Authority Key Identifier: keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c9:a8:cb:aa:2f:ed:dd:01:d6:d9:55:93:1b:51:89:d5:b1: b6:ab:95:d0:db:3e:48:af:1e:51:d2:ca:05:fb:2e:67:6f:ea: ea:af:07:83:a5:b1:a0:6a:4c:1e:f6:a2:84:c2:f0:0f:0b:e9: bd:d9:d6:ea:5a:bc:25:d0:65:58:b4:89:88:96:1f:79:04:14: 14:2d:2c:40:6a:e8:9c:ea:7f:a5:94:b2:e0:70:fa:60:59:78: 6e:ec:b9:cb:6e:76:f4:21:e9:fc:4b:9c:72:bf:e5:35:e6:6c: 13:f3:bc:04:17:93:5b:df:15:fe:de:bb:09:10:6c:74:e7:9a: 52:bb:36:9c:ce:a6:68:67:79:09:89:ab:f9:6a:f3:b2:69:58: 09:79:ce:38:1d:f7:d2:27:66:a5:8f:cf:3e:ba:b9:3a:c3:61: 88:e1:16:34:c5:51:d2:f0:09:7b:a8:7f:52:9f:d5:0a:05:3d: dd:47:5b:41:68:9d:f1:cc:b4:7e:ea:4b:82:81:17:3d:0e:fc: 13:7a:45:36:44:66:ee:31:d3:a6:5e:11:13:b5:ef:2c:e7:ad: 74:8c:61:5c:1a:e6:0a:fa:6d:33:c4:fb:2a:e4:5a:6a:ac:0a: 11:64:3f:c8:5c:de:3f:16:12:6d:56:dc:6d:b9:3f:9f:ce:ee: 5d:dc:c8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1 ODMzMjBEMTgwHhcNMjQwNTMxMDcyMTQxWhcNMjQwNjA3MDcyMTQxWjAYMRYwFAYD VQQDEw02NjU5N2E4NS1mYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1fygi7RMNEjR3GCUe/xcyz39MM1YmvQQ98NrTxmaxF50fkfHNjybzaxHKTt 1Qn1ZF/GM9g8MW4DaiuQ+4ogZ01usrBjqupYYSIvG982ipZYZX8FhkNHtPCXah+M SySrtwTQMusrhJPq/6zpM/I7gu8+flu9cyHSLJCIijuAIUZ7jxWwfZC5JOmALCEb ciusWvD8pPkT8tikzZTR8OvxCY1hdJgAzwAcWEAGprlIfOSqTEQRnQ3mcHF0YO4f MXO/uIa0/cuurnS757fJABmYFB8vGSHRotYfz10MrVlTu9i6oXSHn15sL8tTkPZc MfQkTsNp2saSGlmoCe6anDbuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCF6uMir BhIwoUqxXTZw/SmARHsUMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH STRYQjZEM1RlR05ZTXlEUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyyajLqi/t3QHW2VWTG1GJ1bG2q5XQ2z5Irx5R0soF+y5nb+rqrweD pbGgakwe9qKEwvAPC+m92dbqWrwl0GVYtImIlh95BBQULSxAauic6n+llLLgcPpg WXhu7LnLbnb0Ien8S5xyv+U15mwT87wEF5Nb3xX+3rsJEGx055pSuzaczqZoZ3kJ iav5avOyaVgJec44HffSJ2alj88+urk6w2GI4RY0xVHS8Al7qH9Sn9UKBT3dR1tB aJ3xzLR+6kuCgRc9DvwTekU2RGbuMdOmXhETte8s5610jGFcGuYK+m0zxPsq5Fpq rAoRZD/IXN4/FhJtVtxtuT+fzu5d3MgQ -----END CERTIFICATE-----Generated at Fri May 31 10:02:44 2024 by rpki-client on console-ams.rpki-client.org