$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: CaeUK/qPxvgzfXkVvnvP0DLU7goeDwxZqPf2wANHcHk= Subject key identifier: 67:FF:AD:F0:E6:4F:0F:7F:70:70:70:34:D2:2E:B2:06:B9:0E:5D:E7 Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 70 Signing time: Fri 17 May 2024 07:32:36 +0000 Manifest this update: Fri 17 May 2024 07:32:35 +0000 Manifest next update: Fri 24 May 2024 07:32:35 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: ncUTJmvbfU80ALwVENeuTtIv9HZzZxhAK9ruGzMhO+I=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: V9haeggPzUIY6sFu0B8QRKjXMw3aLSoBwqJcKUV/6sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: May 17 07:32:35 2024 GMT Not After : May 24 07:32:35 2024 GMT Subject: CN=66470814-f443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:24:f7:9d:38:78:77:9c:4e:96:3c:25:06: 4a:c5:06:92:9e:89:9d:be:95:ca:21:57:70:32:6a: e6:4b:be:cc:76:f3:fc:b0:7a:0e:01:ca:97:d7:fb: 48:00:b6:08:2e:93:63:8b:51:97:3a:c3:4f:fd:ed: 06:d8:31:52:18:82:c3:1b:e9:83:62:a8:57:a8:3a: e5:40:f5:1a:8e:db:73:c0:22:c9:db:57:bf:ea:3a: ea:88:a0:32:5b:4c:a9:d8:60:c5:48:7a:d6:19:3e: 61:37:13:0b:01:46:fb:c2:c4:e0:13:5b:fb:d6:37: 9c:16:02:5d:2d:77:28:27:eb:d4:ec:02:7c:94:5c: 94:d2:67:b6:4c:58:7e:7a:7d:41:e3:e0:a8:39:77: db:91:88:3e:9c:cd:5a:b8:45:35:85:fd:09:3d:0b: 42:ec:0b:a3:34:93:d9:0f:b6:a3:b6:d9:b3:47:8a: a9:22:db:78:6e:74:59:e5:35:99:53:51:57:5f:05: ea:ce:d5:30:47:c4:b5:e3:b4:2e:be:7f:f6:ec:d4: 75:05:df:ca:f2:8b:d9:6f:40:31:f6:63:a9:af:a5: 16:a0:43:ee:69:22:0f:3f:88:56:c5:de:b5:49:ba: 4b:fb:78:64:fb:05:6f:0b:81:37:a2:33:2a:f4:8d: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:AD:F0:E6:4F:0F:7F:70:70:70:34:D2:2E:B2:06:B9:0E:5D:E7 X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:67:c3:27:c4:b8:ed:3d:32:0c:75:3f:51:70:1d:8d:29:04: 9b:7c:11:9f:70:1f:5c:37:e5:3a:98:9a:9a:7e:2a:26:9e:dc: 35:53:95:30:66:c5:c4:df:31:ba:91:e9:ff:76:b6:12:c6:b7: 28:55:02:35:b2:27:fe:74:65:0c:45:93:09:17:20:e1:b8:06: 94:94:7a:d4:23:0b:79:0f:98:77:a4:57:64:19:80:94:33:ca: 6f:81:00:57:3a:ba:6f:cf:55:46:7c:07:55:8a:55:af:09:3f: b8:36:08:70:47:a9:90:11:03:a8:2b:95:81:5b:fa:89:d2:1f: ea:8a:c4:15:ca:60:0a:a6:7e:8f:48:be:06:65:eb:48:3d:7a: 51:80:d8:08:8f:4c:e2:4a:2f:3e:0e:68:ba:8b:6c:e2:71:af: 21:0c:f1:cc:8d:13:73:e1:5c:7c:03:f4:19:f2:e5:cf:cc:fe: da:17:ec:b6:48:85:c6:87:4e:49:66:f0:6f:f5:e1:bb:2c:ac: 82:c5:bd:da:42:49:44:0d:82:e8:16:0b:0f:84:41:5b:ab:94: 51:ab:a5:17:4f:35:e2:3a:d6:50:f1:54:1b:02:bc:93:6a:db: 17:03:05:2b:10:88:c6:02:f1:5a:7b:82:eb:7f:f2:3b:51:02: 45:d0:d2:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzVBNDExMC8GA1UEBRMoNDFBMEMyNDQzNTlGMDIzNUM5QTYwQjFGNzE5QTVGRDU2 Nzk2NjA1MzAeFw0yNDA1MTcwNzMyMzVaFw0yNDA1MjQwNzMyMzVaMBgxFjAUBgNV BAMTDTY2NDcwODE0LWY0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1jCT3nTh4d5xOljwlBkrFBpKeiZ2+lcohV3AyauZLvsx28/yweg4BypfX+0gA tgguk2OLUZc6w0/97QbYMVIYgsMb6YNiqFeoOuVA9RqO23PAIsnbV7/qOuqIoDJb TKnYYMVIetYZPmE3EwsBRvvCxOATW/vWN5wWAl0tdygn69TsAnyUXJTSZ7ZMWH56 fUHj4Kg5d9uRiD6czVq4RTWF/Qk9C0LsC6M0k9kPtqO22bNHiqki23hudFnlNZlT UVdfBerO1TBHxLXjtC6+f/bs1HUF38ryi9lvQDH2Y6mvpRagQ+5pIg8/iFbF3rVJ ukv7eGT7BW8LgTeiMyr0jXfJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ/+t8OZP D39wcHA00i6yBrkOXecwHwYDVR0jBBgwFoAUQaDCRDWfAjXJpgsfcZpf1WeWYFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNUE0L0RCQzFGRDEwNjk5 NjExRUVCNEU3N0IzQ0M0RjlBRTAyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFEQ1JEV2ZBalhKcGdzZmNacGYxV2VXWUZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NUE0L0RCQzFGRDEwNjk5NjExRUVCNEU3N0IzQ0M0RjlBRTAyL1FhRENSRFdmQWpY SnBnc2ZjWnBmMVdlV1lGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZnwyfEuO09Mgx1P1FwHY0pBJt8EZ9wH1w35TqYmpp+Kiae3DVTlTBm xcTfMbqR6f92thLGtyhVAjWyJ/50ZQxFkwkXIOG4BpSUetQjC3kPmHekV2QZgJQz ym+BAFc6um/PVUZ8B1WKVa8JP7g2CHBHqZARA6grlYFb+onSH+qKxBXKYAqmfo9I vgZl60g9elGA2AiPTOJKLz4OaLqLbOJxryEM8cyNE3PhXHwD9Bny5c/M/toX7LZI hcaHTklm8G/14bssrILFvdpCSUQNgugWCw+EQVurlFGrpRdPNeI61lDxVBsCvJNq 2xcDBSsQiMYC8Vp7gut/8jtRAkXQ0rk= -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org