$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: JQttB+P6Otf70Zd6Z3pTlKDVfOPG+1cjJekNWLU6dfc= Subject key identifier: 9A:E8:2E:56:8F:4F:EE:05:6E:04:25:B9:0C:4E:E8:06:A7:08:75:FD Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 113E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 1137 Signing time: Fri 22 Nov 2024 17:14:56 +0000 Manifest this update: Fri 22 Nov 2024 17:14:55 +0000 Manifest next update: Fri 29 Nov 2024 17:14:55 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: VinIxmGUKRVOcLUJzZOxD64XSXoN16bu4nAoPq42/UY=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4414 (0x113e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Nov 22 17:14:55 2024 GMT Not After : Nov 29 17:14:55 2024 GMT Subject: CN=6740bc10-1097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:47:c6:ae:e1:da:bb:f9:4b:13:13:36:f1: 94:46:52:a9:d3:33:07:4b:b4:74:38:be:9a:25:cc: 99:18:5b:ae:ff:8b:82:32:e2:8f:a7:2b:bf:48:87: 6d:6d:8e:cf:a9:4f:bf:98:55:ec:d2:a0:d5:fc:34: 1e:fe:39:82:da:ca:57:46:c0:b3:a6:9f:75:c2:15: 84:d7:9d:a8:e9:9d:6d:ad:79:41:10:58:c6:ac:b3: 35:cd:54:0d:01:81:97:7e:7d:fa:d3:e5:e2:02:92: a5:3c:96:e2:8f:fb:6d:ea:1b:7e:e6:a0:32:7a:65: 9e:15:39:2e:24:79:d4:47:5e:2c:d0:f2:15:52:0a: 76:8d:a6:f7:b1:5c:5d:7d:4f:57:69:23:4b:c7:f9: 0a:27:f6:50:54:87:7b:a4:2d:b7:9e:fc:f4:1c:f9: 37:29:b9:8d:eb:df:78:14:02:b3:8c:91:79:a9:4d: 87:de:fb:69:88:6b:a0:3f:05:74:dc:f4:89:62:5a: 47:11:84:39:22:f9:df:74:37:19:d4:ef:25:5c:43: 17:bf:1f:de:2f:50:72:88:78:71:d8:a9:23:08:8d: c3:3e:d1:80:82:2d:99:69:69:9c:ad:ec:29:c7:ba: 0b:cf:9b:24:ba:ac:83:87:24:bc:cc:a1:4e:77:b1: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E8:2E:56:8F:4F:EE:05:6E:04:25:B9:0C:4E:E8:06:A7:08:75:FD X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:24:c5:a1:ea:f1:c4:68:52:a9:3b:f7:a2:8a:56:ca:95:44: 77:5a:21:14:9f:58:61:a0:09:44:af:d9:66:f8:9e:91:fd:07: ad:74:4e:f9:b7:cf:8e:fb:42:58:4b:4d:43:91:1c:de:ee:18: af:88:84:0a:15:a0:3e:63:31:73:5d:f4:76:93:6d:91:d9:5b: 8e:b8:62:44:88:d9:e8:d8:e1:4e:32:f2:eb:7d:f1:e9:67:bd: b2:ce:09:8b:fa:5c:42:d5:d7:08:d1:f0:df:c0:9f:d2:6b:5f: f1:ad:46:a8:7a:28:b7:cb:85:73:58:6a:1a:79:37:04:72:ad: 81:e0:75:d0:f6:ec:95:98:08:31:8c:fd:09:d4:76:0b:7d:23: 07:49:ba:8d:ae:ab:74:c1:da:3e:5e:bc:bf:07:21:1b:da:9f: 52:9d:e4:7d:87:ec:0f:18:6b:59:3c:aa:7f:ee:a0:0e:3b:6b: d1:70:46:b7:ca:1a:a3:e2:5f:ae:dc:77:a8:d5:c2:a1:25:b6: 85:45:cf:41:36:4d:15:03:c9:20:40:d0:33:05:31:64:7d:e5: 68:92:66:48:ac:a2:09:c3:5e:cf:1a:83:7a:4a:23:6d:a1:ac: 71:cd:0c:fe:4b:6c:11:39:15:9a:15:17:81:42:03:0b:7f:43: 16:65:21:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICET4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjQxMTIyMTcxNDU1WhcNMjQxMTI5MTcxNDU1WjAYMRYwFAYD VQQDEw02NzQwYmMxMC0xMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrJHxq7h2rv5SxMTNvGURlKp0zMHS7R0OL6aJcyZGFuu/4uCMuKPpyu/SIdt bY7PqU+/mFXs0qDV/DQe/jmC2spXRsCzpp91whWE152o6Z1trXlBEFjGrLM1zVQN AYGXfn360+XiApKlPJbij/tt6ht+5qAyemWeFTkuJHnUR14s0PIVUgp2jab3sVxd fU9XaSNLx/kKJ/ZQVId7pC23nvz0HPk3KbmN6994FAKzjJF5qU2H3vtpiGugPwV0 3PSJYlpHEYQ5IvnfdDcZ1O8lXEMXvx/eL1ByiHhx2KkjCI3DPtGAgi2ZaWmcrewp x7oLz5skuqyDhyS8zKFOd7EuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJroLlaP T+4FbgQluQxO6AanCHX9MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJMWh6vHEaFKpO/eiilbKlUR3WiEUn1hhoAlEr9lm+J6R/QetdE75 t8+O+0JYS01DkRze7hiviIQKFaA+YzFzXfR2k22R2VuOuGJEiNno2OFOMvLrffHp Z72yzgmL+lxC1dcI0fDfwJ/Sa1/xrUaoeii3y4VzWGoaeTcEcq2B4HXQ9uyVmAgx jP0J1HYLfSMHSbqNrqt0wdo+Xry/ByEb2p9SneR9h+wPGGtZPKp/7qAOO2vRcEa3 yhqj4l+u3Heo1cKhJbaFRc9BNk0VA8kgQNAzBTFkfeVokmZIrKIJw17PGoN6SiNt oaxxzQz+S2wRORWaFReBQgMLf0MWZSF/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org