$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json) Hash identifier: 5O/3Dt7EqfBk4pNCoktI1ghXt8dbvbJxHh4DDQNJs/Q= Subject key identifier: A5:22:20:BC:33:8B:F6:BC:C2:E5:02:73:F3:9A:CA:31:DF:1C:A3:07 Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft Manifest number: AF Signing time: Wed 15 May 2024 06:43:46 +0000 Manifest this update: Wed 15 May 2024 06:43:45 +0000 Manifest next update: Wed 22 May 2024 06:43:45 +0000 Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: 6gi7s8ifsTtIoIwoqjC1H9TY3Z6C8IYjuV6ISqp/R1I=) 2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: zBhQH2QPBJjbtff0NqJ2sRxz4Z/5Qhlp3SplF8PFlbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Validity Not Before: May 15 06:43:45 2024 GMT Not After : May 22 06:43:45 2024 GMT Subject: CN=664459a2-794b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:a6:40:62:78:f4:57:c8:7e:70:bc:54:ed: f9:eb:51:3d:30:a5:e9:2f:59:d5:d1:1d:b0:84:ef: 8c:7a:54:e4:80:fa:bc:3a:4a:55:68:63:37:61:5d: 3b:5e:8f:cd:e4:1e:0e:37:2c:db:87:a7:2f:13:36: ec:c4:06:6f:9a:96:49:f8:b9:ed:3e:eb:01:01:53: 51:d7:c6:ce:08:08:a3:d3:3b:e5:2b:60:c8:4b:84: 1c:5f:75:7d:b4:ff:7a:50:dd:25:87:a2:75:bb:42: cf:62:de:db:2f:02:ec:95:0c:38:c3:31:66:a0:cf: ea:02:ea:d3:6c:3c:64:dd:1b:54:52:36:07:ac:44: e5:3d:e3:50:56:5a:46:11:c0:f3:53:2c:dc:ff:b4: 02:96:e8:8d:6f:6f:df:fc:16:d5:5d:8e:db:47:1d: 5a:8b:71:57:41:27:89:32:c3:57:0b:01:fa:e1:3c: df:d9:af:82:8a:e5:51:0f:82:e1:3d:97:60:64:79: 47:7e:38:5f:e8:59:47:1d:ab:e5:e7:55:78:38:a9: a3:65:a6:e6:d7:79:ac:89:63:04:ee:eb:ba:a7:51: 60:e4:ac:6a:12:62:fd:31:ed:92:e3:a4:b4:bd:6e: 35:d6:7d:e4:c9:6e:49:eb:20:81:f1:09:f0:f6:a3: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:20:BC:33:8B:F6:BC:C2:E5:02:73:F3:9A:CA:31:DF:1C:A3:07 X509v3 Authority Key Identifier: keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:19:7b:f6:9f:eb:32:3c:99:8f:bd:bf:43:7e:fb:78:42:97: 76:25:49:86:b5:e3:7c:bc:39:cb:49:1e:6b:e4:c9:41:9e:33: b6:6e:f4:c3:fa:7f:f2:7e:81:df:f4:3c:39:f7:8c:96:76:0a: 79:df:00:eb:25:0b:94:09:2a:7e:da:b1:c7:79:3f:60:06:20: 04:1d:8d:e2:b1:f6:67:16:96:85:5d:b3:ec:ea:8c:00:4f:5a: e9:95:3c:7a:ba:bd:04:9a:ba:e3:7d:cf:4e:ae:b0:cf:17:5d: 3f:23:4b:1c:df:0b:f0:cc:69:6c:f7:c4:a5:bd:3e:e1:37:3b: c7:5a:c2:3b:52:a6:24:05:59:b1:11:0d:92:af:53:9c:b8:8a: 88:37:6b:f9:5f:2f:51:25:40:b8:e5:db:46:2e:ed:05:67:da: 61:45:6a:fa:b4:0f:1a:3f:a2:89:ab:3d:bf:6b:7d:ef:66:3b: 23:4e:ff:07:57:98:bb:fc:10:12:84:a6:12:14:1d:1a:9a:60: c4:e1:74:06:0f:ac:97:09:5e:67:b1:a5:74:8b:c4:40:77:77: b3:89:1f:32:87:37:e3:2f:76:c4:17:2e:88:1e:be:de:bf:95: f1:bc:f9:7e:ff:d7:32:c7:73:9d:62:95:56:ae:7f:82:5c:cc: c2:de:b8:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1 ODMzMjBEMTgwHhcNMjQwNTE1MDY0MzQ1WhcNMjQwNTIyMDY0MzQ1WjAYMRYwFAYD VQQDEw02NjQ0NTlhMi03OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TWmQGJ49FfIfnC8VO3561E9MKXpL1nV0R2whO+MelTkgPq8OkpVaGM3YV07 Xo/N5B4ONyzbh6cvEzbsxAZvmpZJ+LntPusBAVNR18bOCAij0zvlK2DIS4QcX3V9 tP96UN0lh6J1u0LPYt7bLwLslQw4wzFmoM/qAurTbDxk3RtUUjYHrETlPeNQVlpG EcDzUyzc/7QCluiNb2/f/BbVXY7bRx1ai3FXQSeJMsNXCwH64Tzf2a+CiuVRD4Lh PZdgZHlHfjhf6FlHHavl51V4OKmjZabm13msiWME7uu6p1Fg5KxqEmL9Me2S46S0 vW411n3kyW5J6yCB8Qnw9qMqcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUiILwz i/a8wuUCc/OayjHfHKMHMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH STRYQjZEM1RlR05ZTXlEUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChGXv2n+syPJmPvb9Dfvt4Qpd2JUmGteN8vDnLSR5r5MlBnjO2bvTD +n/yfoHf9Dw594yWdgp53wDrJQuUCSp+2rHHeT9gBiAEHY3isfZnFpaFXbPs6owA T1rplTx6ur0Emrrjfc9OrrDPF10/I0sc3wvwzGls98SlvT7hNzvHWsI7UqYkBVmx EQ2Sr1OcuIqIN2v5Xy9RJUC45dtGLu0FZ9phRWr6tA8aP6KJqz2/a33vZjsjTv8H V5i7/BAShKYSFB0ammDE4XQGD6yXCV5nsaV0i8RAd3eziR8yhzfjL3bEFy6IHr7e v5XxvPl+/9cyx3OdYpVWrn+CXMzC3riE -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org