$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft File: QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft (raw, json) Hash identifier: jxDmGtQ9rAQIO9bxtgZ0nUA9R+jjk/vppWKD+jo9XGo= Subject key identifier: 9F:BC:FC:80:F5:FE:2E:03:34:CB:FE:52:8B:A9:FE:30:04:F6:A9:F8 Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft Manifest number: 06AC Signing time: Thu 02 May 2024 23:20:43 +0000 Manifest this update: Thu 02 May 2024 23:20:42 +0000 Manifest next update: Thu 09 May 2024 23:20:42 +0000 Files and hashes: 1: QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl (hash: BF6HwvKPKrhZ8hkLzDueVQ3ldGTZE9/XKk7O7ie99Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Validity Not Before: May 2 23:20:42 2024 GMT Not After : May 9 23:20:42 2024 GMT Subject: CN=66341fca-76bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:7c:f2:68:8a:3d:24:49:4a:f3:5d:5d:ba: 60:b3:f6:a6:43:1b:e5:0c:4c:8f:96:30:88:94:4b: 62:8c:cf:2c:d5:6e:46:fa:c2:f0:65:8e:30:1e:0e: 42:a8:53:cb:94:66:f9:73:53:39:53:04:5d:3f:f1: 8c:40:da:b5:42:79:ec:df:81:2e:41:63:f7:0d:86: 22:90:24:5f:37:ef:75:5b:cc:5a:15:a3:04:34:01: 03:52:c5:1d:63:f9:b0:11:6d:d5:b2:ef:34:a3:fe: 29:df:e8:42:39:0f:a0:3b:28:9c:4c:f6:f4:f9:a7: e8:52:e4:2b:ae:ff:05:52:51:b4:8d:9c:e7:72:5f: a9:10:14:e3:f4:04:0d:3e:af:82:29:7c:75:15:f1: 66:4c:9f:63:83:26:bb:45:ec:22:c2:e9:2a:c5:d3: 9e:34:22:10:61:07:77:67:fb:d3:d1:5a:81:4e:8c: 56:24:5e:29:66:94:63:cc:1a:4c:81:18:ef:b5:92: d8:31:e9:0a:63:8e:01:91:06:eb:2b:4d:2f:af:99: 3b:61:e7:75:81:2f:81:c7:23:15:77:4a:15:cd:bb: 91:ee:8b:66:21:39:07:33:47:51:b5:31:2a:db:31: 74:19:96:33:c3:67:bb:bb:07:50:64:76:fa:2c:3b: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BC:FC:80:F5:FE:2E:03:34:CB:FE:52:8B:A9:FE:30:04:F6:A9:F8 X509v3 Authority Key Identifier: keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:92:ea:93:8e:9e:3e:a1:91:68:3a:dd:32:23:d3:a8:fb:36: 0e:f0:a6:98:ae:23:cb:74:67:23:d5:50:23:c4:eb:5c:42:df: 21:97:b9:0d:c9:08:fd:75:a1:69:58:12:9e:dc:24:f8:1d:3a: e8:b0:ca:ee:d8:00:ee:a0:c1:5a:a4:4d:01:1a:29:e7:c4:4a: 35:e0:0a:59:07:e0:b6:13:23:09:9b:50:4a:3c:dd:e7:10:af: c0:1d:84:27:7e:1d:0c:13:1d:5e:17:62:1a:47:e3:08:52:59: b4:6c:98:cb:f4:0b:ee:99:e4:10:87:0c:fe:a9:d0:07:aa:e0: ed:be:32:f2:30:8a:59:0b:bd:03:d8:5c:87:fd:50:ad:86:ff: 36:95:b8:41:71:e7:8a:80:23:60:59:a3:b4:53:8a:ec:f3:d0: 32:26:43:7e:b3:9a:3d:7e:3d:be:be:45:6d:6b:95:da:48:1c: 8f:6d:64:39:f9:59:eb:7f:54:ce:74:f7:ed:aa:e9:77:6d:51: d1:a6:64:98:ca:bd:21:05:76:74:4f:1c:fe:f4:16:12:2a:50: dc:64:15:5e:53:65:21:5c:bb:e7:cf:1d:93:b6:88:27:8e:55: 61:1e:25:92:96:b0:89:42:f6:32:34:2e:31:56:68:77:8b:ff: 60:b6:85:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5NDYxMTAvBgNVBAUTKDQzMzhDRTNDMDYzMTBBN0E5NEYwOUJCMTM2RkFDQkMy ODM1NUFGQ0IwHhcNMjQwNTAyMjMyMDQyWhcNMjQwNTA5MjMyMDQyWjAYMRYwFAYD VQQDEw02NjM0MWZjYS03NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8l88miKPSRJSvNdXbpgs/amQxvlDEyPljCIlEtijM8s1W5G+sLwZY4wHg5C qFPLlGb5c1M5UwRdP/GMQNq1Qnns34EuQWP3DYYikCRfN+91W8xaFaMENAEDUsUd Y/mwEW3Vsu80o/4p3+hCOQ+gOyicTPb0+afoUuQrrv8FUlG0jZzncl+pEBTj9AQN Pq+CKXx1FfFmTJ9jgya7RewiwukqxdOeNCIQYQd3Z/vT0VqBToxWJF4pZpRjzBpM gRjvtZLYMekKY44BkQbrK00vr5k7Yed1gS+BxyMVd0oVzbuR7otmITkHM0dRtTEq 2zF0GZYzw2e7uwdQZHb6LDsrdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+8/ID1 /i4DNMv+Uoup/jAE9qn4MB8GA1UdIwQYMBaAFEM4zjwGMQp6lPCbsTb6y8KDVa/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTk0Ni9DNjdFRDFGRTE3 RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENucVU4SnV4TnZyTHdvTlZy OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F6ak9QQVl4Q25xVThKdXhOdnJMd29OVnI4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTk0Ni9DNjdFRDFGRTE3RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENu cVU4SnV4TnZyTHdvTlZyOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVkuqTjp4+oZFoOt0yI9Oo+zYO8KaYriPLdGcj1VAjxOtcQt8hl7kN yQj9daFpWBKe3CT4HTrosMru2ADuoMFapE0BGinnxEo14ApZB+C2EyMJm1BKPN3n EK/AHYQnfh0MEx1eF2IaR+MIUlm0bJjL9AvumeQQhwz+qdAHquDtvjLyMIpZC70D 2FyH/VCthv82lbhBceeKgCNgWaO0U4rs89AyJkN+s5o9fj2+vkVta5XaSByPbWQ5 +Vnrf1TOdPftqul3bVHRpmSYyr0hBXZ0Txz+9BYSKlDcZBVeU2UhXLvnzx2Ttogn jlVhHiWSlrCJQvYyNC4xVmh3i/9gtoWD -----END CERTIFICATE-----Generated at Thu May 2 23:48:44 2024 by rpki-client on console-fra.rpki-client.org