$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: BX2UzqV/IZRguB26GOa6J/E7z7LZdW9LI5Nmmuj5tKc= Subject key identifier: 32:71:37:1E:69:75:75:DE:7F:8D:3A:7B:B8:CD:AE:E5:13:A8:CA:50 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 181C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 17F6 Signing time: Sat 18 May 2024 16:59:25 +0000 Manifest this update: Sat 18 May 2024 16:59:25 +0000 Manifest next update: Sat 25 May 2024 16:59:25 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: vFdvtdLDRRgaqDRTb2RwJOClKZwrnPjrVQmYmpQBM+E=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: SdAiulr3si8tYO7W0fyJa1BzzDsMRJIQU+pa3P9bs5E=) 3: A16BFA9CE03011EE9FD7291DC4F9AE02.roa (hash: OKUB1S+qDYeFUc1kb7xpOUTrPm9FqnkD5ZuYg/M3Vbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6172 (0x181c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: May 18 16:59:25 2024 GMT Not After : May 25 16:59:25 2024 GMT Subject: CN=6648de6d-09c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:01:bb:ad:0d:53:f2:97:ff:c2:d7:b6:71: 61:31:30:0e:18:9f:01:ed:42:91:86:47:18:6b:ea: 8c:9a:e2:fd:ac:20:c9:7f:b6:5e:db:11:0f:9f:43: d6:8b:84:6e:1b:72:db:d1:be:b3:7d:1c:ca:b2:eb: 5b:c1:fe:ec:d0:c1:43:cb:70:48:22:db:3d:26:9b: 74:27:03:ef:91:5e:5f:42:cb:37:ad:c1:24:fd:6d: 35:fb:15:c7:80:59:12:68:d4:74:51:b4:16:68:9b: 63:3d:9f:df:f7:64:94:a6:dc:96:00:9c:fc:34:a1: 3e:f3:dd:0f:01:ab:4e:ee:06:6d:76:a3:e7:68:3f: 11:dd:b7:13:ac:60:c4:d3:ed:44:7f:f3:a7:a5:36: b3:ec:1d:f9:6c:38:58:e4:c2:df:56:b5:cf:73:5c: 80:50:08:fe:cf:a8:d9:c7:9f:e0:72:07:28:77:48: b9:83:25:3a:56:e2:cd:f8:a5:5e:32:7f:33:78:92: 42:8d:4e:10:6c:6b:a2:7f:eb:47:2d:2d:11:ec:23: 91:12:06:4c:f8:3b:7c:e3:64:7d:54:03:c5:0e:9c: 93:d8:e3:04:69:02:95:a3:5f:2b:b1:5b:cd:b6:60: 9b:a1:d8:e2:cf:b1:a6:58:86:b5:ae:71:d0:a7:c4: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:37:1E:69:75:75:DE:7F:8D:3A:7B:B8:CD:AE:E5:13:A8:CA:50 X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:ac:d0:fa:88:06:d8:24:ad:2c:07:a7:53:6c:f1:82:76: cb:2a:58:02:59:02:4f:e8:99:f9:2d:37:93:e6:e6:77:23:ac: 63:83:80:06:34:3b:33:f1:5b:d0:c0:01:9b:84:08:a5:23:75: 85:da:b4:c0:25:dd:6c:94:cb:5b:82:a5:68:e4:1e:81:3e:b1: 52:00:8c:d2:29:91:67:80:13:87:d1:bf:4a:a6:e7:26:6c:c0: 64:53:d6:f4:da:13:0d:be:dc:48:52:58:21:6f:63:7b:1c:c8: 11:79:d0:ec:05:c0:f4:c5:ee:ca:6c:51:a2:04:df:c8:b0:bc: 18:1e:65:28:27:34:2b:d7:ac:33:fb:a5:ff:0c:a2:96:4c:58: 01:29:75:30:c7:5d:79:e4:22:13:8f:bd:fb:a6:3e:61:ca:14: e1:4c:ad:4d:c0:c3:eb:bd:29:f8:bb:89:3e:da:c3:8a:92:08: f8:b5:3a:5a:a4:ee:37:06:50:5b:e6:df:fc:26:50:e4:87:07: 42:a4:78:fc:7a:b0:53:b7:93:56:07:1d:df:c5:e5:a3:af:87: 53:0d:ad:e1:70:bb:2d:4e:3a:3e:02:d4:60:bc:22:af:99:40: 91:c9:84:68:1a:de:08:02:45:89:f5:b3:3c:79:10:e0:ba:44: 66:aa:02:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjQwNTE4MTY1OTI1WhcNMjQwNTI1MTY1OTI1WjAYMRYwFAYD VQQDEw02NjQ4ZGU2ZC0wOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugQBu60NU/KX/8LXtnFhMTAOGJ8B7UKRhkcYa+qMmuL9rCDJf7Ze2xEPn0PW i4RuG3Lb0b6zfRzKsutbwf7s0MFDy3BIIts9Jpt0JwPvkV5fQss3rcEk/W01+xXH gFkSaNR0UbQWaJtjPZ/f92SUptyWAJz8NKE+890PAatO7gZtdqPnaD8R3bcTrGDE 0+1Ef/OnpTaz7B35bDhY5MLfVrXPc1yAUAj+z6jZx5/gcgcod0i5gyU6VuLN+KVe Mn8zeJJCjU4QbGuif+tHLS0R7COREgZM+Dt842R9VAPFDpyT2OMEaQKVo18rsVvN tmCbodjiz7GmWIa1rnHQp8QqiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJxNx5p dXXef406e7jNruUTqMpQMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/6zQ+ogG2CStLAenU2zxgnbLKlgCWQJP6Jn5LTeT5uZ3I6xjg4AG NDsz8VvQwAGbhAilI3WF2rTAJd1slMtbgqVo5B6BPrFSAIzSKZFngBOH0b9Kpucm bMBkU9b02hMNvtxIUlghb2N7HMgRedDsBcD0xe7KbFGiBN/IsLwYHmUoJzQr16wz +6X/DKKWTFgBKXUwx1155CITj737pj5hyhThTK1NwMPrvSn4u4k+2sOKkgj4tTpa pO43BlBb5t/8JlDkhwdCpHj8erBTt5NWBx3fxeWjr4dTDa3hcLstTjo+AtRgvCKv mUCRyYRoGt4IAkWJ9bM8eRDgukRmqgKc -----END CERTIFICATE-----Generated at Sat May 18 18:21:40 2024 by rpki-client on console-ams.rpki-client.org