$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: kES+XxtyR9LvSQVjXC02nmV/dPTRQV+PJwQLxTwPJLs= Subject key identifier: 02:D7:50:4A:5E:A6:6E:48:42:9E:46:10:AE:83:EC:F9:1C:7F:5D:DD Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 31 Signing time: Fri 17 May 2024 08:30:32 +0000 Manifest this update: Fri 17 May 2024 08:30:32 +0000 Manifest next update: Fri 24 May 2024 08:30:32 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: K4c5snCiqetwEA6Xe7lt8h37wUsWkddYPvAIbEaVS84=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: OJ4fpN3cmDk3uuK8aUmty/8y+YQxN8L4Ij0QimxgngE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: May 17 08:30:32 2024 GMT Not After : May 24 08:30:32 2024 GMT Subject: CN=664715a8-929e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:b6:1e:08:a7:7a:6c:b0:d0:80:7d:96:26: 12:2e:cd:9c:ed:84:76:d6:5a:a8:eb:43:53:d8:4c: db:6b:83:78:84:82:10:e1:08:3c:d3:2f:ab:b0:fa: 8a:54:cb:bc:60:b8:6b:79:df:90:07:86:89:bf:7b: 20:79:24:60:67:68:3e:20:f1:e7:96:cc:b5:5c:41: f8:dc:25:ab:36:70:9f:44:9a:81:12:d1:04:29:34: 3d:38:18:cb:e6:19:ee:eb:22:2f:8b:4d:04:44:7d: 93:59:31:55:c3:4f:3f:1b:dd:1a:7e:1c:f3:5c:23: 87:93:f2:4e:c9:fa:37:b7:4a:8d:1f:41:49:4b:1e: 25:cc:82:10:27:c3:1f:61:c3:90:79:18:70:73:22: 30:96:03:3a:95:e0:0b:58:f6:fd:5f:d8:ea:60:bd: 2c:23:f4:07:53:6b:c9:2e:81:42:01:93:8e:66:f5: 15:2c:17:0f:1c:5c:97:b8:35:70:8c:e1:d9:cd:33: 05:d0:66:1c:60:57:f4:6d:04:e9:03:01:fd:22:cb: 85:84:f0:73:98:0b:de:fe:cf:ae:46:55:cd:0d:90: 7a:9c:ed:6a:19:39:dc:3e:90:79:36:60:d7:6e:1e: 2e:fe:56:f2:92:e1:ae:bd:38:4f:af:f4:08:31:47: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D7:50:4A:5E:A6:6E:48:42:9E:46:10:AE:83:EC:F9:1C:7F:5D:DD X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:63:8a:73:32:5b:98:3a:3b:11:a2:04:3a:5f:57:d3:c8:62: 9f:e5:f4:5a:c8:16:4c:b6:3b:8e:71:48:26:13:17:60:42:81: f8:64:98:1c:48:0c:e7:76:5a:38:15:33:df:80:88:b5:47:b1: 6b:8b:ab:85:ed:45:b4:ec:81:a4:3f:b3:37:93:26:60:5c:76: ea:b4:65:f4:78:5d:05:6c:9f:92:d0:a4:62:08:c6:0d:2f:7e: 2e:8e:c6:aa:ef:2d:b5:07:21:b9:2b:4a:d5:d1:7e:d6:1e:d3: 8e:07:e7:77:0d:9a:bd:40:ca:8a:54:a7:e2:ef:ca:d6:19:65: ad:78:89:40:ae:be:4d:2f:8e:bf:1f:85:13:54:b7:ef:2c:93: 86:55:07:98:7b:8c:ac:5f:1a:b7:fb:d0:8b:cb:98:eb:57:b0: 3d:cf:19:56:e9:fb:12:85:52:35:17:15:6d:80:b1:c4:e2:d4: 9c:7c:c1:85:91:bd:99:95:9a:18:2c:6f:2d:5c:99:94:b9:dc: 02:29:f3:29:36:d8:0f:fb:16:54:5b:e9:da:22:6d:3b:69:39: 76:30:48:88:3d:0a:02:f2:28:69:53:a5:49:92:01:02:6a:0f: 31:bf:06:c5:34:59:95:b6:a5:d6:9a:ee:b0:44:d5:a4:34:d3: 43:e9:b0:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTNBRjExMC8GA1UEBRMoQTgyNEI2NjNGM0Y1QTM0RjgyRUUyMjcyQThBRUZERTQz Qjc5QkQ5MzAeFw0yNDA1MTcwODMwMzJaFw0yNDA1MjQwODMwMzJaMBgxFjAUBgNV BAMTDTY2NDcxNWE4LTkyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPFbYeCKd6bLDQgH2WJhIuzZzthHbWWqjrQ1PYTNtrg3iEghDhCDzTL6uw+opU y7xguGt535AHhom/eyB5JGBnaD4g8eeWzLVcQfjcJas2cJ9EmoES0QQpND04GMvm Ge7rIi+LTQREfZNZMVXDTz8b3Rp+HPNcI4eT8k7J+je3So0fQUlLHiXMghAnwx9h w5B5GHBzIjCWAzqV4AtY9v1f2OpgvSwj9AdTa8kugUIBk45m9RUsFw8cXJe4NXCM 4dnNMwXQZhxgV/RtBOkDAf0iy4WE8HOYC97+z65GVc0NkHqc7WoZOdw+kHk2YNdu Hi7+VvKS4a69OE+v9AgxR7iLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAtdQSl6m bkhCnkYQroPs+Rx/Xd0wHwYDVR0jBBgwFoAUqCS2Y/P1o0+C7iJyqK795Dt5vZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1M0FGLzA0MzE2MEIwQ0Ew NDExRUVCQ0QwMTc3MEM0RjlBRTAyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZa TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUNTMllfUDFvMC1DN2lKeXFLNzk1RHQ1dlpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 M0FGLzA0MzE2MEIwQ0EwNDExRUVCQ0QwMTc3MEM0RjlBRTAyL3FDUzJZX1AxbzAt QzdpSnlxSzc5NUR0NXZaTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxjinMyW5g6OxGiBDpfV9PIYp/l9FrIFky2O45xSCYTF2BCgfhkmBxI DOd2WjgVM9+AiLVHsWuLq4XtRbTsgaQ/szeTJmBcduq0ZfR4XQVsn5LQpGIIxg0v fi6OxqrvLbUHIbkrStXRftYe044H53cNmr1AyopUp+LvytYZZa14iUCuvk0vjr8f hRNUt+8sk4ZVB5h7jKxfGrf70IvLmOtXsD3PGVbp+xKFUjUXFW2AscTi1Jx8wYWR vZmVmhgsby1cmZS53AIp8yk22A/7FlRb6doibTtpOXYwSIg9CgLyKGlTpUmSAQJq DzG/BsU0WZW2pdaa7rBE1aQ000PpsJg= -----END CERTIFICATE-----Generated at Fri May 17 10:59:12 2024 by rpki-client on console-ams.rpki-client.org