$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: xIEvwLC2aITJZc/vDEbSp6IOKc7q4WwQh8s3eKo2poE= Subject key identifier: A7:74:35:52:50:56:2D:26:7A:38:12:D5:AB:CB:1C:FE:70:AA:23:54 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: E5 Signing time: Sat 23 Nov 2024 03:34:14 +0000 Manifest this update: Sat 23 Nov 2024 03:34:14 +0000 Manifest next update: Sat 30 Nov 2024 03:34:14 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: fT2GMCWYT7EBfuen+r8iR1lH6SE1+Y3WPdqPVg/gcew=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Nov 23 03:34:14 2024 GMT Not After : Nov 30 03:34:14 2024 GMT Subject: CN=67414d36-f123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:26:b7:6e:ad:24:54:59:2d:93:a9:53:b1: b6:a9:dc:42:20:cd:33:8c:f5:03:27:f5:e0:59:d6: f5:99:50:2f:36:49:b7:4e:71:ef:11:eb:9f:20:15: f2:0b:d8:41:11:93:92:e0:a8:1a:54:46:0f:7a:a3: 2f:12:2d:2e:66:59:d6:66:8a:a9:71:51:79:3e:06: 64:d5:47:be:b3:b2:58:51:c6:c7:4d:44:53:9c:dc: b4:30:61:d6:f5:ee:29:a5:f9:d1:69:5a:79:0b:e6: ad:75:d5:58:ad:70:27:4a:e6:b9:94:2e:9b:74:58: b5:71:c5:dc:b8:e3:69:8f:ab:6a:88:e8:a3:45:59: 3b:ae:a8:d1:1c:24:71:88:77:4f:fb:4b:e7:02:08: 1c:47:1b:27:31:78:79:1e:6c:40:1a:52:43:c1:19: 87:e6:0d:9e:75:25:21:36:1a:86:fc:3b:36:c2:0a: dc:02:f6:c4:45:70:cc:5e:2f:9f:93:c2:ef:69:03: b1:fa:ad:f9:9a:51:6c:ce:a6:cb:3b:f4:2d:94:8e: 6d:f2:3c:c7:98:70:64:95:67:f4:9b:18:ae:18:65: 7a:0e:10:7c:66:b7:ef:a9:ea:bd:19:26:c0:af:94: fb:8a:c6:2d:51:b4:c9:60:7f:ab:71:c0:a8:9b:e9: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:35:52:50:56:2D:26:7A:38:12:D5:AB:CB:1C:FE:70:AA:23:54 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:2f:22:c8:4b:44:e4:f5:27:05:04:c5:53:86:a9:4e:c0: c5:ee:00:f3:3f:c3:af:1d:c0:45:64:1d:80:ae:49:59:ec:db: 39:0e:ab:af:12:d3:87:c1:18:2f:9c:00:1f:f9:b2:45:4f:f8: b1:0d:6a:ee:99:fb:7f:62:dd:fd:00:50:e2:01:7c:d7:51:f1: 89:62:17:ff:73:49:c2:59:c7:cf:56:0a:00:84:75:4a:8b:df: c7:85:f5:93:d5:ff:b1:ff:66:ed:9d:ab:e0:68:14:88:d5:06: a0:3a:5f:b2:28:cd:8f:17:da:31:14:b9:0d:fd:3b:28:61:7b: 31:87:98:30:a8:ee:ba:44:1b:ce:bf:08:f4:0d:70:ce:39:de: 90:30:8e:04:96:b3:8e:16:3d:b6:21:7c:6c:16:a5:a3:be:b9: 32:7d:80:ac:91:d2:b8:e7:98:66:26:e4:b4:7d:20:d1:91:fd: 44:d6:25:ab:9f:52:f7:91:ad:f4:9d:59:98:28:26:c7:48:38: c8:2d:db:b2:8e:8f:ab:bf:21:fd:e4:5c:3a:4f:74:15:8a:c8: f2:5e:6e:c4:96:73:29:84:70:c7:76:bb:99:72:d9:92:a1:11: 26:6b:22:89:b7:f2:7f:02:05:7a:82:97:60:ab:ed:38:db:a4: dc:31:42:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjQxMTIzMDMzNDE0WhcNMjQxMTMwMDMzNDE0WjAYMRYwFAYD VQQDEw02NzQxNGQzNi1mMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHgmt26tJFRZLZOpU7G2qdxCIM0zjPUDJ/XgWdb1mVAvNkm3TnHvEeufIBXy C9hBEZOS4KgaVEYPeqMvEi0uZlnWZoqpcVF5PgZk1Ue+s7JYUcbHTURTnNy0MGHW 9e4ppfnRaVp5C+atddVYrXAnSua5lC6bdFi1ccXcuONpj6tqiOijRVk7rqjRHCRx iHdP+0vnAggcRxsnMXh5HmxAGlJDwRmH5g2edSUhNhqG/Ds2wgrcAvbERXDMXi+f k8LvaQOx+q35mlFszqbLO/QtlI5t8jzHmHBklWf0mxiuGGV6DhB8Zrfvqeq9GSbA r5T7isYtUbTJYH+rccCom+mDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd0NVJQ Vi0mejgS1avLHP5wqiNUMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKrC8iyEtE5PUnBQTFU4apTsDF7gDzP8OvHcBFZB2ArklZ7Ns5Dquv EtOHwRgvnAAf+bJFT/ixDWrumft/Yt39AFDiAXzXUfGJYhf/c0nCWcfPVgoAhHVK i9/HhfWT1f+x/2btnavgaBSI1QagOl+yKM2PF9oxFLkN/TsoYXsxh5gwqO66RBvO vwj0DXDOOd6QMI4ElrOOFj22IXxsFqWjvrkyfYCskdK455hmJuS0fSDRkf1E1iWr n1L3ka30nVmYKCbHSDjILduyjo+rvyH95Fw6T3QVisjyXm7ElnMphHDHdruZctmS oREmayKJt/J/AgV6gpdgq+0426TcMUKr -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org