$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: yYqGZbPYUcRFyhJxa8OG34GnrwPz1NzLdTmUgfpMpMA= Subject key identifier: 1C:C3:55:B6:48:C5:88:E1:CC:2A:B9:B0:08:DF:8B:06:C8:A4:F9:6B Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: BD Signing time: Sun 19 May 2024 06:24:40 +0000 Manifest this update: Sun 19 May 2024 06:24:39 +0000 Manifest next update: Sun 26 May 2024 06:24:39 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: vmCZmEBjguupKkHQ4LRiM2t4pyssDkqcDgPPj9df2PA=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: 5uqHr9WzaI9hGdiEKRKQvARm6NgS6ujezLHWBDKu2RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Validity Not Before: May 19 06:24:39 2024 GMT Not After : May 26 06:24:39 2024 GMT Subject: CN=66499b28-e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:36:54:25:a9:4d:ec:0b:d1:4b:dc:bb:fe: 7b:9a:67:7e:b6:4f:ac:2a:9d:90:c5:86:c5:a4:03: b6:25:b0:4e:6f:fc:e5:a6:21:2b:da:1a:df:db:36: 2c:9f:7c:0f:d4:51:dd:bf:90:ec:ff:66:dc:70:58: 57:17:e2:12:1f:26:89:5f:4c:ac:e9:60:e3:c6:87: e2:53:d7:f8:c2:94:0e:5f:e8:23:12:0c:8c:a3:2c: 8f:db:aa:b4:f5:8c:ee:0d:8e:d3:5a:8d:28:36:78: 97:e8:e5:df:3f:63:3c:01:95:b1:10:77:cc:0e:94: 6c:00:63:f3:a6:ec:c0:31:56:d2:58:21:c3:a5:3a: 6c:e2:c3:8c:d0:3d:3b:9a:8d:2a:19:0b:25:f1:0e: 7d:93:1a:03:88:d7:23:fc:ca:57:0e:e6:68:92:2e: f5:05:3e:e2:1d:af:b4:8f:3b:de:4b:7e:ec:b9:ec: af:07:bf:d8:7f:1b:7f:33:a8:63:e5:63:74:32:79: 24:4d:03:d0:6d:53:69:8f:fa:8a:ab:17:a3:61:69: 30:99:bf:58:6a:9e:1b:49:3e:0b:82:7a:83:ff:f2: 02:15:6e:6f:42:ea:aa:7e:ac:ec:b9:fd:f4:f8:7e: b3:ad:68:56:0b:cd:00:70:62:59:5f:c3:02:b3:0b: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:55:B6:48:C5:88:E1:CC:2A:B9:B0:08:DF:8B:06:C8:A4:F9:6B X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:da:a3:a6:60:98:38:5d:ea:b4:32:0e:88:41:11:23:1c:e1: e9:ab:65:84:30:eb:83:78:2a:41:54:5c:d3:8c:50:8b:c8:52: 9f:f8:7e:d3:c8:38:eb:10:59:79:b5:45:d5:d4:49:16:0f:38: da:39:4f:83:24:f7:8f:8b:93:bd:5c:bc:bc:8b:15:36:92:39: 71:b6:03:62:19:5e:33:15:51:d1:84:d5:bb:4f:00:c8:e9:f1: aa:ef:79:e5:5f:24:f3:3b:7e:8a:84:d2:92:4f:a0:1a:18:9a: 10:6f:d9:ab:a0:be:b2:b3:5d:9b:69:8e:2f:4d:52:fb:e5:9c: ed:cb:d1:d0:3b:9b:38:14:b3:44:11:19:a6:05:1a:a0:27:68: e6:2d:d0:08:bf:f5:85:fe:8c:ef:da:98:c5:c4:1c:87:86:32: 40:23:d2:0b:d3:b8:f7:1d:59:2a:b0:69:d1:fc:a8:3c:f5:05: 18:09:2f:b0:67:df:7e:b3:0f:df:0b:97:40:d0:c5:49:31:97: 43:ca:8b:06:e4:54:c8:7c:c7:5d:5b:0a:38:79:14:a3:f8:22: 6e:34:e7:3d:b3:c2:87:8d:f5:cc:f9:ac:96:aa:8c:85:e2:64: 76:90:8c:3d:af:86:63:87:79:fb:aa:df:74:cd:6b:49:8a:42: 6d:27:5f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjQwNTE5MDYyNDM5WhcNMjQwNTI2MDYyNDM5WjAYMRYwFAYD VQQDEw02NjQ5OWIyOC1lOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19g2VCWpTewL0Uvcu/57mmd+tk+sKp2QxYbFpAO2JbBOb/zlpiEr2hrf2zYs n3wP1FHdv5Ds/2bccFhXF+ISHyaJX0ys6WDjxofiU9f4wpQOX+gjEgyMoyyP26q0 9YzuDY7TWo0oNniX6OXfP2M8AZWxEHfMDpRsAGPzpuzAMVbSWCHDpTps4sOM0D07 mo0qGQsl8Q59kxoDiNcj/MpXDuZoki71BT7iHa+0jzveS37sueyvB7/Yfxt/M6hj 5WN0MnkkTQPQbVNpj/qKqxejYWkwmb9Yap4bST4LgnqD//ICFW5vQuqqfqzsuf30 +H6zrWhWC80AcGJZX8MCswtCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzDVbZI xYjhzCq5sAjfiwbIpPlrMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv2qOmYJg4Xeq0Mg6IQREjHOHpq2WEMOuDeCpBVFzTjFCLyFKf+H7T yDjrEFl5tUXV1EkWDzjaOU+DJPePi5O9XLy8ixU2kjlxtgNiGV4zFVHRhNW7TwDI 6fGq73nlXyTzO36KhNKST6AaGJoQb9mroL6ys12baY4vTVL75Zzty9HQO5s4FLNE ERmmBRqgJ2jmLdAIv/WF/ozv2pjFxByHhjJAI9IL07j3HVkqsGnR/Kg89QUYCS+w Z99+sw/fC5dA0MVJMZdDyosG5FTIfMddWwo4eRSj+CJuNOc9s8KHjfXM+ayWqoyF 4mR2kIw9r4Zjh3n7qt90zWtJikJtJ1/h -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org