$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: UVVK51AmZyo8vvOQZWd89S5P7zWx22KpE4QVrlyVEl8= Subject key identifier: F2:A9:20:31:0A:61:43:64:0D:61:AB:84:E0:06:0B:02:31:C2:0B:17 Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 05E1 Signing time: Wed 01 May 2024 00:23:07 +0000 Manifest this update: Wed 01 May 2024 00:23:06 +0000 Manifest next update: Wed 08 May 2024 00:23:06 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: 2chBDEUgVdwjP4G0CFBMJWZwLO7ktKuTkQSaylOzaIk=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: EO9TW61oX5tn54S0K2Lsn1in2OKfp6cspW8QUVHScGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Validity Not Before: May 1 00:23:06 2024 GMT Not After : May 8 00:23:06 2024 GMT Subject: CN=66318b6b-a8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:c8:0c:0b:1a:4a:16:d4:a5:e6:ae:1a:92: ca:e3:92:80:9b:e5:1a:ed:7c:64:d8:13:a2:53:9a: 42:a5:ae:d4:b0:71:48:24:bc:f0:5b:21:c4:dc:56: cd:70:09:5b:0f:32:7d:29:46:3e:fb:2e:27:b6:49: 11:b4:5c:92:ca:1b:fa:94:c7:45:7c:50:44:16:48: c0:81:5b:bc:1e:f1:a1:8e:64:85:b9:44:a1:c8:8f: 1d:76:8c:07:17:f9:2a:d4:8f:c0:40:03:6f:45:f5: 94:88:4f:20:1d:95:9c:33:58:16:e1:03:0c:94:00: 44:32:c4:40:93:e0:59:9b:42:a5:03:5a:71:1b:ef: 3a:ad:0b:8c:3c:5a:b0:12:0f:32:9f:d6:f0:47:e2: ca:46:e4:d9:c1:15:ff:a1:d8:9d:8c:2c:2c:ba:c0: 47:37:ce:64:46:6c:31:2f:3b:c6:bb:9d:d9:d7:17: 5d:25:e6:3c:2a:ae:a2:92:da:d6:9e:31:aa:88:eb: 4c:a9:2c:e4:4e:78:33:c2:7f:13:ce:8a:eb:c7:bf: 2e:b9:54:73:eb:99:b8:9d:20:24:4d:4b:8c:a5:4b: 0d:5a:f9:90:bf:3e:9e:0d:03:69:87:e8:bd:fa:72: b2:61:c7:0b:61:77:25:be:7f:f8:3a:ee:12:87:53: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:20:31:0A:61:43:64:0D:61:AB:84:E0:06:0B:02:31:C2:0B:17 X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4b:cb:2b:71:71:e1:60:6b:45:e3:ae:d3:14:53:0f:ce:48: 8d:43:d1:f1:b9:15:6f:3a:62:95:29:ec:3f:91:bd:61:2c:d8: e0:01:3a:f5:55:ac:60:59:a8:66:16:71:6a:31:b6:8c:d8:3f: a5:d3:b3:63:73:92:0a:8a:d6:d4:83:c2:cd:28:ff:4f:e2:ee: b7:ab:10:ff:ca:20:7d:82:7b:ef:c2:c3:1b:3f:46:b2:b8:a9: 6f:9c:50:95:b6:84:d1:8b:56:41:1d:54:3a:d8:b3:5a:54:ef: b1:2b:38:74:a4:2c:83:f1:bd:06:74:96:43:85:9e:7f:49:35: 39:c3:0a:d9:97:fd:51:50:04:2b:4b:bc:7d:63:a9:b6:ae:08: a2:36:2f:9b:d0:10:7d:9b:4b:99:67:26:db:46:6d:4c:0d:b9: 63:26:3a:7c:0c:4c:df:6c:19:29:57:7f:dc:c7:3f:5a:39:53: 0e:9e:33:88:9b:11:e7:b4:df:d0:d8:73:aa:65:87:15:19:44: 82:85:84:d9:47:88:13:e0:ad:e6:2e:1b:eb:78:f8:6a:47:5d: 20:fa:bc:be:83:84:a3:f8:12:fb:06:ce:da:69:ca:89:5f:89: ea:4d:0e:5d:0f:ff:ee:92:66:ae:b1:c1:1f:eb:f2:88:05:c7: 28:ff:b1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjQwNTAxMDAyMzA2WhcNMjQwNTA4MDAyMzA2WjAYMRYwFAYD VQQDEw02NjMxOGI2Yi1hOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQPIDAsaShbUpeauGpLK45KAm+Ua7Xxk2BOiU5pCpa7UsHFIJLzwWyHE3FbN cAlbDzJ9KUY++y4ntkkRtFySyhv6lMdFfFBEFkjAgVu8HvGhjmSFuUShyI8ddowH F/kq1I/AQANvRfWUiE8gHZWcM1gW4QMMlABEMsRAk+BZm0KlA1pxG+86rQuMPFqw Eg8yn9bwR+LKRuTZwRX/odidjCwsusBHN85kRmwxLzvGu53Z1xddJeY8Kq6iktrW njGqiOtMqSzkTngzwn8Tzorrx78uuVRz65m4nSAkTUuMpUsNWvmQvz6eDQNph+i9 +nKyYccLYXclvn/4Ou4Sh1NU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKpIDEK YUNkDWGrhOAGCwIxwgsXMB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvS8srcXHhYGtF467TFFMPzkiNQ9HxuRVvOmKVKew/kb1hLNjgATr1 VaxgWahmFnFqMbaM2D+l07Njc5IKitbUg8LNKP9P4u63qxD/yiB9gnvvwsMbP0ay uKlvnFCVtoTRi1ZBHVQ62LNaVO+xKzh0pCyD8b0GdJZDhZ5/STU5wwrZl/1RUAQr S7x9Y6m2rgiiNi+b0BB9m0uZZybbRm1MDbljJjp8DEzfbBkpV3/cxz9aOVMOnjOI mxHntN/Q2HOqZYcVGUSChYTZR4gT4K3mLhvrePhqR10g+ry+g4Sj+BL7Bs7aacqJ X4nqTQ5dD//ukmauscEf6/KIBcco/7Fm -----END CERTIFICATE-----Generated at Wed May 1 01:04:07 2024 by rpki-client on console-fra.rpki-client.org