$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: VPAqPj2eJMAD9dycnmukm38vDjGVpWmYJmZnHv5wPCo= Subject key identifier: BD:48:86:68:B7:86:8A:D5:37:CE:33:C4:B3:4A:9F:68:BC:2C:5C:B8 Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 0857 Signing time: Fri 22 Nov 2024 20:25:47 +0000 Manifest this update: Fri 22 Nov 2024 20:25:46 +0000 Manifest next update: Fri 29 Nov 2024 20:25:46 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: 1/nJvFACpwz7FyKPx082A5DufcFujYSgjBlvgHRZGDE=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: tTT8521eqCETDqz4+sHnOdxTbgNFFlJoAdsqLu2m7HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Nov 22 20:25:46 2024 GMT Not After : Nov 29 20:25:46 2024 GMT Subject: CN=6740e8ca-e7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:70:97:e9:b7:9a:aa:29:57:62:33:d9:c8: f6:b3:79:24:c3:4a:a8:ea:73:db:d3:d9:5a:99:51: 0e:1d:2a:e9:07:c8:c1:e9:7c:fc:38:4d:81:f6:aa: 1a:2f:53:41:ad:40:26:72:23:1f:97:ad:b5:5b:48: 3d:a9:cb:f5:2b:d7:c1:55:2a:a3:7c:35:ff:20:2b: ac:64:b2:4f:49:b5:3f:21:04:e8:36:c2:7f:fb:2c: 67:be:79:07:62:f7:c2:b7:dc:ab:4d:c5:75:95:9e: ba:68:df:f0:dc:56:0b:59:f2:99:1e:d0:b3:2c:33: d5:63:e5:3c:06:9c:3b:42:32:57:8f:bc:3b:00:44: 98:36:28:91:d9:5d:41:7e:a2:d0:f9:94:38:2e:53: c8:a3:1e:11:13:0e:f5:93:82:8d:58:c4:e3:2c:f6: 11:43:14:a6:b6:8a:e2:16:7b:a7:7c:bb:59:3a:2c: 1d:76:1e:e0:8d:7a:7d:77:00:12:e2:bc:fa:c7:f3: 23:00:36:28:9a:3d:c1:40:fe:f5:89:a8:50:e7:52: 83:cd:24:52:19:9b:7a:78:6c:f3:13:56:3b:bc:78: 3e:24:16:61:bb:58:0c:8d:63:5e:20:c9:8f:8a:3d: d0:b2:f5:9b:04:f1:a1:06:96:94:dc:83:1c:89:d1: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:86:68:B7:86:8A:D5:37:CE:33:C4:B3:4A:9F:68:BC:2C:5C:B8 X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:77:40:4a:4c:5e:b4:a5:31:8d:9a:b9:9d:63:e4:96:73: c0:d2:a7:4c:df:2e:66:08:9a:5e:80:21:64:39:7e:93:35:ef: c7:08:1a:b9:8a:f2:f0:e1:db:ec:ed:ba:84:84:c9:ce:34:14: 5c:be:29:88:c0:77:70:4d:37:c6:cd:cd:5b:45:2f:d2:8e:2f: bf:55:ed:08:bf:6c:ac:4a:80:dc:66:8e:74:77:db:6c:5e:b3: 6f:a4:d0:72:62:1a:b9:cd:3a:1b:32:76:93:71:c6:de:e5:55: da:33:a7:aa:89:03:1a:f4:d8:f0:98:7f:18:70:43:64:ed:f1: d0:aa:7a:d4:4e:9a:8f:3e:be:36:aa:d5:11:f4:53:12:ae:b1: 7f:5f:03:f3:10:ef:6e:06:43:e4:af:9d:2f:08:3b:81:3a:ab: 9e:50:60:9c:89:d8:95:da:8f:e5:46:fc:62:42:5a:fd:be:de: 63:b6:e9:3f:60:83:52:6b:a6:5c:7a:27:88:94:6e:6c:c9:f0: c3:cf:33:95:1d:52:e7:e0:50:52:b5:f4:e5:db:77:cf:3f:84: 81:79:6a:78:04:30:ca:1f:23:d1:90:ab:58:ee:0d:5b:59:35: c8:78:ed:c5:ff:e5:20:90:8f:48:79:c4:4b:30:5f:3c:96:0d: 42:f9:d8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjQxMTIyMjAyNTQ2WhcNMjQxMTI5MjAyNTQ2WjAYMRYwFAYD VQQDEw02NzQwZThjYS1lN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvhwl+m3mqopV2Iz2cj2s3kkw0qo6nPb09lamVEOHSrpB8jB6Xz8OE2B9qoa L1NBrUAmciMfl621W0g9qcv1K9fBVSqjfDX/ICusZLJPSbU/IQToNsJ/+yxnvnkH YvfCt9yrTcV1lZ66aN/w3FYLWfKZHtCzLDPVY+U8Bpw7QjJXj7w7AESYNiiR2V1B fqLQ+ZQ4LlPIox4REw71k4KNWMTjLPYRQxSmtoriFnunfLtZOiwddh7gjXp9dwAS 4rz6x/MjADYomj3BQP71iahQ51KDzSRSGZt6eGzzE1Y7vHg+JBZhu1gMjWNeIMmP ij3QsvWbBPGhBpaU3IMcidFmjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1Ihmi3 horVN84zxLNKn2i8LFy4MB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjP3dASkxetKUxjZq5nWPklnPA0qdM3y5mCJpegCFkOX6TNe/HCBq5 ivLw4dvs7bqEhMnONBRcvimIwHdwTTfGzc1bRS/Sji+/Ve0Iv2ysSoDcZo50d9ts XrNvpNByYhq5zTobMnaTccbe5VXaM6eqiQMa9NjwmH8YcENk7fHQqnrUTpqPPr42 qtUR9FMSrrF/XwPzEO9uBkPkr50vCDuBOqueUGCcidiV2o/lRvxiQlr9vt5jtuk/ YINSa6ZceieIlG5syfDDzzOVHVLn4FBStfTl23fPP4SBeWp4BDDKHyPRkKtY7g1b WTXIeO3F/+UgkI9IecRLMF88lg1C+dh5 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org