$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: j5QnxdtPMNUe8oDdBrlhZvT4JqnOrQAOp9BZ1de6+s8= Subject key identifier: 28:01:A3:FA:8C:AB:4C:C9:5D:DC:79:A0:B5:63:2A:C7:46:F1:7B:49 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 058A Signing time: Fri 22 Nov 2024 22:47:41 +0000 Manifest this update: Fri 22 Nov 2024 22:47:40 +0000 Manifest next update: Fri 29 Nov 2024 22:47:40 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: n9u1Klfn3BZxilWxOsdVAAEte7ny04j5MSNsIIeyJ5c=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: QK+G6fNVeQvRNDArbOTnNoOHNeXa2RP5xEy26aJHwS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Nov 22 22:47:40 2024 GMT Not After : Nov 29 22:47:40 2024 GMT Subject: CN=67410a0c-f4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:85:44:db:52:7b:59:bd:5e:52:1b:d7:50: 02:10:34:6e:81:99:34:20:a2:6d:a5:f3:35:52:00: 2e:82:d1:4e:7b:ad:1d:28:f1:28:a8:14:85:4b:b0: ea:41:37:e0:eb:7f:d4:ca:52:10:93:e5:43:17:bb: cc:e4:64:ff:f8:b9:ed:60:b4:75:72:96:e2:85:f0: 7d:83:bf:b4:62:a4:19:d7:f2:e9:06:42:e1:34:1d: 10:15:c9:dd:10:45:d9:ca:f9:2e:39:60:57:87:21: ca:fe:3a:76:92:0b:36:0f:83:f8:47:5a:86:eb:f4: ed:76:24:ed:0d:fe:46:1a:d0:91:ba:4d:d5:ee:15: 9e:14:1c:8f:72:36:23:f2:7d:f2:2c:02:7a:aa:c7: 63:e4:56:59:1a:df:ed:ee:46:b0:b2:a6:cc:5c:a1: 9a:fd:98:c4:18:03:b4:9e:39:7b:5d:c1:bd:80:d3: 0a:bb:c0:4c:aa:2a:fc:ff:22:a8:df:58:ff:52:ea: 7f:3e:66:d6:84:4a:04:83:31:e1:9e:da:84:f6:ed: 69:27:61:27:7d:e8:e9:98:dc:69:45:75:69:e8:b9: b1:21:fd:ba:e0:a1:31:ef:9b:03:fa:40:2b:2c:a8: 6a:cd:98:3d:68:67:f6:70:47:31:a9:72:5b:a6:1c: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:A3:FA:8C:AB:4C:C9:5D:DC:79:A0:B5:63:2A:C7:46:F1:7B:49 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:bc:63:98:5c:9f:4b:35:ce:8a:d5:5f:4a:bd:2f:6a:c0: d6:d2:84:01:81:60:d8:da:0d:39:85:91:65:69:6c:be:28:ac: 95:83:c5:fc:81:d3:37:df:54:3b:53:aa:be:89:8d:92:3c:7b: 96:f4:8c:b1:e5:df:32:ce:e8:83:57:7a:81:0d:02:33:ce:ad: 9d:87:25:f1:d0:92:5a:76:c1:5a:ea:6c:9c:f4:6b:34:86:f1: 2f:88:60:7f:6f:98:af:d5:16:e9:e8:69:55:6d:fa:88:0c:2d: 80:b6:5f:d3:2d:d8:02:8e:c6:21:db:80:54:c5:fa:ab:b2:6c: 3c:97:b6:31:01:f0:e1:77:61:ab:77:cf:bc:11:03:2f:7b:37: 57:6d:f5:dc:32:04:ba:1b:20:e7:c9:20:78:c9:40:ff:3b:1f: a7:f9:d5:79:f5:48:48:b9:74:33:49:07:d2:ab:3a:40:e4:29: b0:73:27:27:6c:63:a9:1c:db:80:ad:8a:91:ea:00:b7:f2:03: cb:9d:7f:16:c3:66:12:af:ad:40:fb:80:57:07:42:30:75:b1: 18:c0:f8:1c:29:e7:6b:3a:64:b1:cf:36:36:2b:91:6b:41:cf: 8d:84:14:48:6c:8a:37:fa:04:c2:da:58:36:4f:c2:85:38:75: d5:bf:3d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjQxMTIyMjI0NzQwWhcNMjQxMTI5MjI0NzQwWjAYMRYwFAYD VQQDEw02NzQxMGEwYy1mNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSqFRNtSe1m9XlIb11ACEDRugZk0IKJtpfM1UgAugtFOe60dKPEoqBSFS7Dq QTfg63/UylIQk+VDF7vM5GT/+LntYLR1cpbihfB9g7+0YqQZ1/LpBkLhNB0QFcnd EEXZyvkuOWBXhyHK/jp2kgs2D4P4R1qG6/TtdiTtDf5GGtCRuk3V7hWeFByPcjYj 8n3yLAJ6qsdj5FZZGt/t7kawsqbMXKGa/ZjEGAO0njl7XcG9gNMKu8BMqir8/yKo 31j/Uup/PmbWhEoEgzHhntqE9u1pJ2EnfejpmNxpRXVp6LmxIf264KEx75sD+kAr LKhqzZg9aGf2cEcxqXJbphx1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgBo/qM q0zJXdx5oLVjKsdG8XtJMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXd7xjmFyfSzXOitVfSr0vasDW0oQBgWDY2g05hZFlaWy+KKyVg8X8 gdM331Q7U6q+iY2SPHuW9Iyx5d8yzuiDV3qBDQIzzq2dhyXx0JJadsFa6myc9Gs0 hvEviGB/b5iv1Rbp6GlVbfqIDC2Atl/TLdgCjsYh24BUxfqrsmw8l7YxAfDhd2Gr d8+8EQMvezdXbfXcMgS6GyDnySB4yUD/Ox+n+dV59UhIuXQzSQfSqzpA5Cmwcycn bGOpHNuArYqR6gC38gPLnX8Ww2YSr61A+4BXB0IwdbEYwPgcKedrOmSxzzY2K5Fr Qc+NhBRIbIo3+gTC2lg2T8KFOHXVvz08 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org