$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: I7kb8xFXkM/vEhMmTDH7fqWG/B0FlVRVApAv044S2wE= Subject key identifier: 77:82:C8:F9:4E:07:AA:4A:67:92:A8:5E:89:45:6E:D5:46:22:2F:BF Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 0161 Signing time: Sat 23 Nov 2024 02:21:59 +0000 Manifest this update: Sat 23 Nov 2024 02:21:58 +0000 Manifest next update: Sat 30 Nov 2024 02:21:58 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: fCiTtL/G3r/D02ihuu2jxn9AzT6jZAmYXA6BqAMk79M=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: TuztR+4A2tCfisSsRlz0u1OQNiM6W4ozoKvZceRXg+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Nov 23 02:21:58 2024 GMT Not After : Nov 30 02:21:58 2024 GMT Subject: CN=67413c47-c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:03:82:3c:11:bc:2d:eb:4d:56:c7:7e:5d: ea:97:4a:02:77:85:6b:56:e0:4b:42:9f:0e:db:13: 31:aa:9d:28:f6:6d:db:44:08:75:f6:5a:45:61:bd: d8:19:31:7d:39:63:e5:08:e5:5e:ac:f5:8a:66:10: d5:47:43:ca:98:51:1a:c7:d6:69:37:32:54:1e:c5: 7d:ff:da:a8:e4:08:6b:01:9e:59:9d:68:35:c1:87: 3d:99:8b:6b:a2:9f:53:39:ee:27:d5:88:de:3a:dc: cd:6c:86:16:21:67:1d:ee:24:89:8e:d8:e3:56:c5: eb:eb:1e:a1:01:9a:dc:5c:cf:16:78:17:19:04:44: ae:8a:fe:b3:c1:b6:7a:e7:bc:b1:1a:84:47:8b:c2: 9d:33:89:c7:b7:ff:df:7b:4e:ea:c5:0c:93:52:d1: 36:75:ed:5a:a4:3e:c9:36:14:34:44:fa:0a:18:4a: 03:e1:c0:23:67:13:57:31:6b:d1:e5:5e:f6:15:b3: 82:41:7d:76:fc:13:b0:11:d1:05:53:60:b5:30:67: 71:82:f0:f2:c8:57:e9:b1:35:cd:e6:04:2c:39:bf: 86:c0:a1:ad:3f:09:52:bb:1a:e4:fa:2b:ae:b9:6e: cb:43:39:27:f6:4d:ea:c3:53:63:6d:14:06:e6:46: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:C8:F9:4E:07:AA:4A:67:92:A8:5E:89:45:6E:D5:46:22:2F:BF X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:23:75:7f:da:23:f1:9a:89:76:7a:73:43:b0:65:8e:6c:aa: ac:57:c6:73:d6:a9:2a:43:ff:29:18:1e:ad:70:4d:44:23:a4: b6:3c:34:23:a0:af:12:c6:02:3c:49:c1:9f:c4:b5:9c:d4:47: 11:00:bb:43:fd:f3:a0:b3:51:57:38:04:4d:bc:4b:da:fa:8f: 25:c5:36:a2:4b:5d:1c:d3:4c:56:ce:46:2f:af:2e:f4:7e:e8: 6b:02:39:11:c6:a4:8f:0d:1b:0b:70:b8:b3:9c:84:f3:dd:6e: 2c:52:67:01:9a:a6:a9:87:5c:02:4d:2f:36:1a:12:31:b7:9e: ba:3f:6a:aa:ba:96:c2:37:6c:c8:8b:d1:47:ec:b1:62:90:97: 97:47:c6:21:96:aa:21:ec:22:b8:97:a3:b9:a8:57:d5:f1:31: fa:22:97:1b:81:46:d5:f8:13:7c:d8:30:ce:85:e2:4c:0a:76: 43:43:be:aa:81:b5:55:54:7a:2b:1b:87:d3:c8:5e:8e:a2:39: 55:cf:9c:ad:da:07:4a:18:7f:04:18:17:9d:ff:6f:2f:d7:ac: 7e:c2:60:54:9b:ce:3e:8f:bf:68:aa:c3:cb:ef:a6:97:e7:fa: 8d:04:89:85:3e:41:0c:19:3d:58:4d:07:9e:5e:3c:51:f1:97: 59:66:77:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjQxMTIzMDIyMTU4WhcNMjQxMTMwMDIyMTU4WjAYMRYwFAYD VQQDEw02NzQxM2M0Ny1jNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocEDgjwRvC3rTVbHfl3ql0oCd4VrVuBLQp8O2xMxqp0o9m3bRAh19lpFYb3Y GTF9OWPlCOVerPWKZhDVR0PKmFEax9ZpNzJUHsV9/9qo5AhrAZ5ZnWg1wYc9mYtr op9TOe4n1YjeOtzNbIYWIWcd7iSJjtjjVsXr6x6hAZrcXM8WeBcZBESuiv6zwbZ6 57yxGoRHi8KdM4nHt//fe07qxQyTUtE2de1apD7JNhQ0RPoKGEoD4cAjZxNXMWvR 5V72FbOCQX12/BOwEdEFU2C1MGdxgvDyyFfpsTXN5gQsOb+GwKGtPwlSuxrk+iuu uW7LQzkn9k3qw1NjbRQG5kb/+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeCyPlO B6pKZ5KoXolFbtVGIi+/MB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2I3V/2iPxmol2enNDsGWObKqsV8Zz1qkqQ/8pGB6tcE1EI6S2PDQj oK8SxgI8ScGfxLWc1EcRALtD/fOgs1FXOARNvEva+o8lxTaiS10c00xWzkYvry70 fuhrAjkRxqSPDRsLcLiznITz3W4sUmcBmqaph1wCTS82GhIxt566P2qqupbCN2zI i9FH7LFikJeXR8Yhlqoh7CK4l6O5qFfV8TH6IpcbgUbV+BN82DDOheJMCnZDQ76q gbVVVHorG4fTyF6OojlVz5yt2gdKGH8EGBed/28v16x+wmBUm84+j79oqsPL76aX 5/qNBImFPkEMGT1YTQeeXjxR8ZdZZnd5 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org