$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft File: QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json) Hash identifier: ptZAG+tABFORSH1zSfoi+7qepDiLiJNhndYk3I2Mfag= Subject key identifier: 51:A1:1B:90:39:68:4D:34:0F:80:1E:43:10:B8:72:00:EB:6B:AA:82 Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 5EFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft Manifest number: 33BF Signing time: Tue 30 Apr 2024 21:53:00 +0000 Manifest this update: Tue 30 Apr 2024 21:53:00 +0000 Manifest next update: Tue 07 May 2024 21:53:00 +0000 Files and hashes: 1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: 52C3j6EeY5nOE3ocoAENF4CBPGJxFEowBcyvKZdpAE0=) 2: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: ZH3Mq/JSGWA6DuI0NcZDqTsE9u1Wv10V6AeYETNaO6o=) 3: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: Giv4rcaEM71vd0FJYtYnZ1NZEvI1/oUilndLpAEn83g=) 4: 4E9D3CC61F5511EBAA049D14C4F9AE02.roa (hash: ps/h6G9ZK3Tx0wcyJa3VEs1GoZ3nLFBshAaXDJE7sno=) 5: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: tnJ3XOL1qQV4G/mV0ORt0qAipnI6yxGGobtXPhZDv0c=) 6: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: 9GuUG9mVckkRQctgNCdCmkXtRR7SNi7u2JK2feaLBfM=) 7: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: KrCTzS2XbgtLsY6GZt/EHaNU/HloOc9wNHxytXA1aYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24319 (0x5eff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: Apr 30 21:53:00 2024 GMT Not After : May 7 21:53:00 2024 GMT Subject: CN=6631683c-f67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:39:85:b7:e7:cc:70:26:99:44:9a:dd:66: 9e:bb:8d:64:6a:c2:7e:35:23:59:46:cc:40:12:c7: 5b:2d:66:f4:2c:77:f0:7a:76:3d:80:87:99:7d:b0: fa:08:4b:d8:67:8b:ea:12:b3:63:e0:1a:47:47:9a: f3:8c:70:45:f0:f3:d9:04:8c:bf:20:01:0b:38:85: 9b:ea:83:31:d4:e9:8c:9e:91:33:88:2e:82:41:d2: 1d:ca:cf:ee:f1:11:3a:fb:d0:0d:d6:1f:9b:b0:89: ed:96:96:e9:05:2c:2b:37:40:af:08:eb:bb:43:d4: 99:84:55:a1:43:ef:37:8c:60:3b:17:1d:a7:dd:2a: 1e:3c:7c:b3:3c:19:e5:0c:d4:6e:66:f8:a8:61:5b: 0b:da:2f:30:e7:5a:fa:2c:66:29:12:71:1b:6d:4a: c7:c9:d7:7c:be:ea:d9:17:5d:c2:3e:29:3d:57:e0: 68:74:8c:cb:57:02:7c:fc:5e:21:d5:ee:52:e8:1e: be:98:43:2c:c5:45:88:eb:51:95:52:6a:58:fe:36: 48:4e:35:20:ff:fa:67:51:bd:fd:d1:1e:fb:f6:28: 66:cf:5e:1f:76:88:55:03:00:a3:40:7d:90:53:bd: e3:56:b8:23:ef:bb:91:93:13:0a:66:a0:ef:de:e3: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A1:1B:90:39:68:4D:34:0F:80:1E:43:10:B8:72:00:EB:6B:AA:82 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c1:60:32:70:41:6e:85:6c:66:cb:cf:46:45:08:5f:8b:09: 2c:00:78:51:3f:cd:f2:75:63:84:62:58:d2:0a:ad:23:52:92: 90:6c:48:57:62:a8:e1:bf:86:98:f4:c5:9d:88:90:7a:68:3c: bc:44:3d:e7:af:78:bc:36:9d:4c:e1:60:d4:d1:37:51:94:32: 2f:ea:db:b0:66:6f:9b:ef:74:bf:1a:1f:d5:92:9f:5a:52:ea: c5:d8:aa:3f:5d:fe:c7:9a:0f:3b:87:f8:7b:8f:d9:0e:5b:2f: 47:c4:87:a1:32:60:20:fe:f0:50:33:53:a4:2d:05:7b:92:28: 99:7b:ea:04:02:3e:c3:1a:ec:e9:32:19:f9:e0:ca:c7:ae:c8: 6a:b5:00:07:ac:ed:bd:5c:0d:7c:22:a5:29:e0:29:3c:bc:28: d8:fe:4a:f6:4a:41:31:1b:64:68:20:4b:10:50:d1:e5:6d:ca: 7d:05:f2:f0:d8:be:15:6a:7a:ec:26:c8:f4:7e:13:fa:6e:27: 5b:9f:0f:e7:08:92:ec:d1:48:67:94:a7:2e:93:4f:59:f4:98: 80:b5:f1:13:26:e4:95:55:1c:64:d1:cc:80:e1:55:9d:95:8c: e6:fb:b3:83:13:95:35:56:5d:31:8b:03:63:67:f5:45:d3:4c: 72:37:6a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICXv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjQwNDMwMjE1MzAwWhcNMjQwNTA3MjE1MzAwWjAYMRYwFAYD VQQDEw02NjMxNjgzYy1mNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyok5hbfnzHAmmUSa3Waeu41kasJ+NSNZRsxAEsdbLWb0LHfwenY9gIeZfbD6 CEvYZ4vqErNj4BpHR5rzjHBF8PPZBIy/IAELOIWb6oMx1OmMnpEziC6CQdIdys/u 8RE6+9AN1h+bsIntlpbpBSwrN0CvCOu7Q9SZhFWhQ+83jGA7Fx2n3SoePHyzPBnl DNRuZvioYVsL2i8w51r6LGYpEnEbbUrHydd8vurZF13CPik9V+BodIzLVwJ8/F4h 1e5S6B6+mEMsxUWI61GVUmpY/jZITjUg//pnUb390R779ihmz14fdohVAwCjQH2Q U73jVrgj77uRkxMKZqDv3uNUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGhG5A5 aE00D4AeQxC4cgDra6qCMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTMyMy8wODREODhENDk1QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHot eTFXUXlXeU1OaDR2N1VTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBwWAycEFuhWxmy89GRQhfiwksAHhRP83ydWOEYljSCq0jUpKQbEhX Yqjhv4aY9MWdiJB6aDy8RD3nr3i8Np1M4WDU0TdRlDIv6tuwZm+b73S/Gh/Vkp9a UurF2Ko/Xf7Hmg87h/h7j9kOWy9HxIehMmAg/vBQM1OkLQV7kiiZe+oEAj7DGuzp Mhn54MrHrshqtQAHrO29XA18IqUp4Ck8vCjY/kr2SkExG2RoIEsQUNHlbcp9BfLw 2L4VanrsJsj0fhP6bidbnw/nCJLs0UhnlKcuk09Z9JiAtfETJuSVVRxk0cyA4VWd lYzm+7ODE5U1Vl0xiwNjZ/VF00xyN2rm -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:09 2024 by rpki-client on console-ams.rpki-client.org