$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: QqJ412yjJKMTctxA++uqcibMwcWpeoeskRJknAgFZAs= Subject key identifier: C5:DE:5C:73:B1:33:9B:06:CC:DE:7E:EA:25:C2:7A:BC:A5:03:6D:A9 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 81 Signing time: Sat 23 Nov 2024 04:38:11 +0000 Manifest this update: Sat 23 Nov 2024 04:38:10 +0000 Manifest next update: Sat 30 Nov 2024 04:38:10 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: ZpWHJT1rVHU9pAQtObtOKBfE6TLL/9VppogJmPsXJyI=) 2: 57810624E12B11EEA7895018C4F9AE02.roa (hash: 4Mi5qLB24cuitrWVdl8VvHohaQSxomWOQc8JXZdPjdE=) 3: 57F1B45AE12B11EEA7895018C4F9AE02.roa (hash: wLrFru85QTYkMRJ3lt5lokeRkglQfQ0Ot5fTaQUe/xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Nov 23 04:38:10 2024 GMT Not After : Nov 30 04:38:10 2024 GMT Subject: CN=67415c33-2d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:f3:3a:83:37:b9:8f:14:2f:11:a7:40:2f: 42:72:59:b2:fb:7f:a6:d2:dd:81:75:10:95:d3:ec: a1:ae:a7:31:4e:ab:c8:99:c2:7c:75:d3:20:90:04: 4c:15:96:25:3d:da:a0:79:fd:1b:8d:e9:0a:35:b0: d0:3e:9d:d1:a8:2e:e6:bc:42:26:84:67:10:ad:d6: dd:35:1f:36:90:3b:ff:fc:1b:d3:5c:6d:27:42:db: 42:ca:36:63:cf:62:a9:76:35:db:ee:c6:38:f0:2b: 91:cc:b0:22:27:ce:96:27:38:87:29:67:29:77:b1: 01:99:ef:8e:12:7d:c4:74:01:ca:76:49:db:b9:3d: f6:64:de:79:0d:5e:82:f9:fd:f4:50:c0:f5:7d:92: c5:91:9c:da:e7:f0:45:03:a1:9f:85:80:f7:c3:00: d7:0b:8c:11:f7:49:65:1a:0f:6a:32:0f:fd:dc:aa: 8a:4c:f2:72:68:6d:54:5c:20:52:c0:06:49:76:92: 3b:72:b7:d8:08:95:8c:2d:fe:4e:20:a0:8d:a1:5d: 1f:5b:3c:a3:1f:78:31:9e:cf:36:a9:1d:a8:db:79: 06:b3:aa:fe:26:44:ad:9c:b0:1a:ce:95:f1:cb:1b: 4b:af:80:7c:68:c9:9b:69:0d:cf:5c:7e:89:54:41: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:5C:73:B1:33:9B:06:CC:DE:7E:EA:25:C2:7A:BC:A5:03:6D:A9 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4c:8f:38:81:09:a2:0c:80:4f:98:5b:d8:9c:e0:fa:2f:95: cc:43:a9:98:18:47:ed:c1:51:12:0d:e6:1d:ca:9d:a8:cd:d0: 7a:07:70:04:71:47:66:4e:91:67:ce:30:30:6b:72:c3:bf:d0: 6c:ef:1b:4a:1f:b0:62:c3:bf:2f:e9:4a:34:80:b8:6a:d8:51: 10:35:13:69:60:f9:5f:83:d7:4a:c8:0c:db:7b:c7:73:fe:cd: ab:89:e1:b7:d0:2c:47:fe:a9:6b:d5:d2:44:85:e8:ed:c9:fd: d1:3a:31:a9:d5:22:b8:a0:5c:13:c8:a3:36:3d:2c:07:9b:c2: 7e:86:19:68:64:73:91:b3:8b:4e:db:59:ad:e8:ba:9d:dc:d0: 51:28:38:f1:e4:cf:59:cc:14:54:a3:b1:a7:d7:7f:f9:42:3e: 9c:e9:78:f1:1f:49:d0:92:47:30:39:90:53:f6:d0:49:94:9a: cc:d6:b5:04:42:15:2b:40:81:8a:a5:76:ff:fe:16:2a:17:c0: 28:71:bb:53:66:6d:2e:8a:5b:74:15:90:fb:c6:72:d6:48:97: 05:9a:6d:cd:5f:03:62:47:04:d6:82:9a:28:df:89:54:a6:71: 1c:ae:bf:a3:17:99:d3:40:29:01:fb:91:c9:a1:9b:c8:9b:3d: 09:23:12:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjQxMTIzMDQzODEwWhcNMjQxMTMwMDQzODEwWjAYMRYwFAYD VQQDEw02NzQxNWMzMy0yZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RnzOoM3uY8ULxGnQC9Cclmy+3+m0t2BdRCV0+yhrqcxTqvImcJ8ddMgkARM FZYlPdqgef0bjekKNbDQPp3RqC7mvEImhGcQrdbdNR82kDv//BvTXG0nQttCyjZj z2KpdjXb7sY48CuRzLAiJ86WJziHKWcpd7EBme+OEn3EdAHKdknbuT32ZN55DV6C +f30UMD1fZLFkZza5/BFA6GfhYD3wwDXC4wR90llGg9qMg/93KqKTPJyaG1UXCBS wAZJdpI7crfYCJWMLf5OIKCNoV0fWzyjH3gxns82qR2o23kGs6r+JkStnLAazpXx yxtLr4B8aMmbaQ3PXH6JVEEMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXeXHOx M5sGzN5+6iXCerylA22pMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwTI84gQmiDIBPmFvYnOD6L5XMQ6mYGEftwVESDeYdyp2ozdB6B3AE cUdmTpFnzjAwa3LDv9Bs7xtKH7Biw78v6Uo0gLhq2FEQNRNpYPlfg9dKyAzbe8dz /s2rieG30CxH/qlr1dJEhejtyf3ROjGp1SK4oFwTyKM2PSwHm8J+hhloZHORs4tO 21mt6Lqd3NBRKDjx5M9ZzBRUo7Gn13/5Qj6c6XjxH0nQkkcwOZBT9tBJlJrM1rUE QhUrQIGKpXb//hYqF8AocbtTZm0uilt0FZD7xnLWSJcFmm3NXwNiRwTWgpoo34lU pnEcrr+jF5nTQCkB+5HJoZvImz0JIxLV -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org