$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json) Hash identifier: MZ1b4TmqCknTvc7RZ7Dq5kmxsgOmlRR1ozQlNu6pIoQ= Subject key identifier: 07:8D:6F:AE:07:57:B5:0E:24:3F:35:3F:01:81:F4:01:D4:88:14:81 Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 23DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft Manifest number: 23BE Signing time: Mon 06 May 2024 16:11:42 +0000 Manifest this update: Mon 06 May 2024 16:11:41 +0000 Manifest next update: Mon 13 May 2024 16:11:41 +0000 Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: qYsH/U3Rvma9zFCRNspzqsVr1aVvG3X5reQFpY37ZpI=) 2: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: WLCV7j0m7MwIE1IEY/qWdx/Um58dvec4q0VL3BD8Z+U=) 3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: /tFNPFcAlkltOR4Cb/tycUVKBSfOAFnQscvr/fRQDrI=) 4: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: PS+cNqIF54kPaI4om+gp58yFr0sx/dvjCXLPY9dgm5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9179 (0x23db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: May 6 16:11:41 2024 GMT Not After : May 13 16:11:41 2024 GMT Subject: CN=6639013e-5650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:ff:b1:c7:27:f0:6b:e2:b2:da:c3:da:e5: 32:72:08:73:ed:2d:a7:14:75:85:3e:02:f1:b8:cb: 13:de:85:55:9e:56:78:2b:17:4e:ac:89:4a:ed:ab: fa:8f:18:ff:2d:af:5b:ca:f0:ac:9c:83:af:28:06: 88:fa:44:bd:36:31:f4:87:1d:6e:2a:f0:77:55:57: 01:38:d2:73:12:6c:dc:d2:b1:b8:78:db:75:18:c5: 8f:2f:f2:ba:d4:a3:25:70:5c:ac:ac:3d:16:3d:d5: f5:61:16:43:9f:e3:35:a7:e8:95:15:50:0a:4d:1a: 2b:a7:ac:aa:b0:ad:4f:75:d3:c8:f2:08:56:2c:17: 2e:42:61:9b:df:3d:7f:2a:c1:f6:8c:93:09:ed:13: a1:81:4a:3a:a4:3d:19:55:f8:e0:90:d4:b7:d0:bc: 4a:48:29:be:1f:df:1d:e9:6a:27:0c:8d:f0:b0:0a: 2c:b3:93:13:08:2f:aa:42:e0:1f:ac:6c:3c:a9:3a: 34:1f:6f:67:a1:0a:83:c4:85:b2:76:3e:a6:4f:ac: 5e:32:96:26:16:61:0f:8b:c3:61:69:ab:a3:30:25: 8a:10:7e:d9:87:3a:2a:eb:29:56:8b:b4:51:49:99: 18:81:71:d7:b8:4a:5d:92:ca:1a:b9:94:9e:9e:d0: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8D:6F:AE:07:57:B5:0E:24:3F:35:3F:01:81:F4:01:D4:88:14:81 X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9e:18:86:3d:a6:99:8e:33:17:3d:47:46:59:b8:2d:bb:66: 31:d9:61:4a:17:40:46:74:d6:db:80:d5:b1:94:93:f8:ff:8b: 66:90:a4:9e:39:a6:11:27:03:d8:c0:28:c4:28:26:d6:93:ad: a5:8d:4b:81:74:87:0b:56:6d:a3:f3:54:1c:93:89:30:16:4e: 70:a5:7f:66:3f:05:5c:67:30:16:62:b7:77:02:e3:66:21:91: d6:15:ec:a5:e9:86:14:3c:81:8a:44:b0:ac:ee:36:98:bc:13: 0d:2f:55:f5:14:c0:f2:4f:54:ac:87:1e:77:80:a3:df:bb:23: 7a:10:60:b3:2d:3d:2d:97:ff:8d:44:fa:23:0f:09:72:0a:0a: 90:f8:0d:c8:e9:2a:ef:79:02:4d:82:21:c8:7a:aa:bf:87:97: 31:08:d3:2b:86:56:28:df:5a:2e:7a:5d:3e:ed:23:ca:ad:4c: 88:64:fb:82:81:0b:5b:c0:16:ee:8e:25:4a:1a:44:44:fd:3f: 31:91:7a:25:cf:ee:52:11:81:6a:1c:aa:a8:e1:ae:55:79:93: 8f:25:33:66:b3:84:07:2d:18:40:6d:e9:3a:70:dd:af:a5:27: 7c:bf:67:82:07:ef:eb:1b:a4:d3:0c:22:81:a7:31:fc:82:e9: 32:55:1c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjQwNTA2MTYxMTQxWhcNMjQwNTEzMTYxMTQxWjAYMRYwFAYD VQQDEw02NjM5MDEzZS01NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDv/sccn8GvistrD2uUycghz7S2nFHWFPgLxuMsT3oVVnlZ4KxdOrIlK7av6 jxj/La9byvCsnIOvKAaI+kS9NjH0hx1uKvB3VVcBONJzEmzc0rG4eNt1GMWPL/K6 1KMlcFysrD0WPdX1YRZDn+M1p+iVFVAKTRorp6yqsK1PddPI8ghWLBcuQmGb3z1/ KsH2jJMJ7ROhgUo6pD0ZVfjgkNS30LxKSCm+H98d6WonDI3wsAoss5MTCC+qQuAf rGw8qTo0H29noQqDxIWydj6mT6xeMpYmFmEPi8NhaaujMCWKEH7Zhzoq6ylWi7RR SZkYgXHXuEpdksoauZSentDWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeNb64H V7UOJD81PwGB9AHUiBSBMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC WkVsRnMwZDZueUkwNjFlUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnnhiGPaaZjjMXPUdGWbgtu2Yx2WFKF0BGdNbbgNWxlJP4/4tmkKSe OaYRJwPYwCjEKCbWk62ljUuBdIcLVm2j81Qck4kwFk5wpX9mPwVcZzAWYrd3AuNm IZHWFeyl6YYUPIGKRLCs7jaYvBMNL1X1FMDyT1Sshx53gKPfuyN6EGCzLT0tl/+N RPojDwlyCgqQ+A3I6SrveQJNgiHIeqq/h5cxCNMrhlYo31ouel0+7SPKrUyIZPuC gQtbwBbujiVKGkRE/T8xkXolz+5SEYFqHKqo4a5VeZOPJTNms4QHLRhAbek6cN2v pSd8v2eCB+/rG6TTDCKBpzH8gukyVRwf -----END CERTIFICATE-----Generated at Mon May 6 17:35:40 2024 by rpki-client on console-fra.rpki-client.org