$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft File: QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json) Hash identifier: LBUm0R9tPz+7hzeatSLqFnr7zjhJeSJtTuBV6J2gQPw= Subject key identifier: 62:99:AB:52:78:4C:2F:F8:DD:96:13:99:D1:D0:FC:0F:F8:08:1D:14 Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA Certificate issuer: /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft Manifest number: 38 Signing time: Sat 23 Nov 2024 05:27:16 +0000 Manifest this update: Sat 23 Nov 2024 05:27:16 +0000 Manifest next update: Sat 30 Nov 2024 05:27:16 +0000 Files and hashes: 1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: 2GoVKzV8vTuzcBzQTiP9tmuGnv/ej/pOQvdqz8AJPyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Validity Not Before: Nov 23 05:27:16 2024 GMT Not After : Nov 30 05:27:16 2024 GMT Subject: CN=674167b4-f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:eb:cc:c4:9d:45:09:cd:7a:7a:f0:f3:32: e0:41:4b:ea:c8:17:e3:6a:f0:bb:b5:33:a9:ed:72: ec:41:0b:56:5b:67:a5:85:f1:2f:f9:ba:75:95:89: 0c:12:69:21:37:95:31:1d:a6:5f:09:92:ae:d1:8e: da:2c:50:48:98:f9:93:bb:05:61:63:71:00:a9:70: 20:a4:d8:86:15:01:ba:b2:14:bb:b6:57:46:55:b2: ef:0c:29:e3:4e:e5:a5:19:08:56:ff:70:c7:17:17: 7b:cc:a1:f7:3b:6a:ed:74:fd:7f:b4:c6:de:e3:54: cd:8c:33:2e:b0:26:6d:d9:e7:09:7e:61:ea:d9:d8: 17:54:3b:72:92:54:df:3d:59:60:49:37:14:74:46: 21:74:de:dc:54:ec:20:85:4b:69:5f:69:ad:8b:b2: e0:bd:8e:1b:a7:ca:63:60:52:73:0e:11:52:24:40: 4f:ce:4b:1b:56:73:17:ed:0d:ee:27:7c:f6:12:5c: 7c:f0:e7:7c:b8:d1:3f:d9:de:96:1a:b5:51:51:4f: 6e:5a:1c:c1:5f:9c:18:d4:68:e7:b6:6f:04:11:63: 2f:01:bf:01:ba:41:6c:b5:af:4d:97:c3:cb:75:3c: e6:b4:18:a7:14:31:fe:fc:0e:05:0a:89:cb:ad:e7: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:99:AB:52:78:4C:2F:F8:DD:96:13:99:D1:D0:FC:0F:F8:08:1D:14 X509v3 Authority Key Identifier: keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:1c:f4:fa:0b:a1:4e:0c:c2:fa:5d:0d:f6:d3:7d:e1:e6: 59:87:35:9f:8b:85:d3:c8:c7:2c:d8:e0:a5:c3:0d:70:41:c3: 3b:1f:7a:34:81:b8:c9:29:e0:62:19:88:8f:7e:cf:6d:ae:be: 42:18:78:ec:b7:7f:d3:de:55:88:2d:6e:5b:cc:37:3e:ab:6e: a3:85:d2:cb:b7:ca:ef:18:53:9a:43:d1:b9:05:47:fc:6d:90: 96:90:68:ee:46:83:0f:42:51:72:6a:98:d8:03:e9:57:55:f5: 06:c9:e8:5f:2d:37:e6:73:85:5d:8c:05:f2:05:0e:1a:16:42: 15:76:0d:cd:bd:0b:2b:c9:87:fd:97:45:bf:a2:16:ef:b5:96: 45:fa:e8:f1:21:b2:53:87:78:cb:4a:a7:95:11:07:33:00:f1: 6a:91:ed:e5:7a:a2:11:d4:1b:ec:98:20:a8:57:d6:86:4a:95: e6:e1:3c:d6:1d:2a:62:4f:ec:99:d6:de:ff:9b:27:a5:ce:f8: f1:a8:2e:c9:f5:51:c1:05:85:42:33:dc:ee:98:bf:9d:9e:85: 69:e5:84:22:60:72:a3:bc:16:3f:f6:ce:7a:c1:9c:d0:b5:be: f2:a9:99:fd:96:41:0d:73:57:6a:aa:80:d9:eb:cf:31:7f:1d: db:24:cf:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE1NzExMC8GA1UEBRMoNDAxQzFBMzYzNEY5ODdDRTlGOUU1Q0VGNTQwOURDMUJE MEZGMkJBQTAeFw0yNDExMjMwNTI3MTZaFw0yNDExMzAwNTI3MTZaMBgxFjAUBgNV BAMTDTY3NDE2N2I0LWYzYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWkuvMxJ1FCc16evDzMuBBS+rIF+Nq8Lu1M6ntcuxBC1ZbZ6WF8S/5unWViQwS aSE3lTEdpl8Jkq7RjtosUEiY+ZO7BWFjcQCpcCCk2IYVAbqyFLu2V0ZVsu8MKeNO 5aUZCFb/cMcXF3vMofc7au10/X+0xt7jVM2MMy6wJm3Z5wl+YerZ2BdUO3KSVN89 WWBJNxR0RiF03txU7CCFS2lfaa2LsuC9jhunymNgUnMOEVIkQE/OSxtWcxftDe4n fPYSXHzw53y40T/Z3pYatVFRT25aHMFfnBjUaOe2bwQRYy8BvwG6QWy1r02Xw8t1 POa0GKcUMf78DgUKicut56TDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYpmrUnhM L/jdlhOZ0dD8D/gIHRQwHwYDVR0jBBgwFoAUQBwaNjT5h86fnlzvVAncG9D/K6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTU3Lzc2RjI2N0ZBNTZF QzExRUY4QTBDQjI0RkM0RjlBRTAyL1FCd2FOalQ1aDg2Zm5senZWQW5jRzlEX0s2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUJ3YU5qVDVoODZmbmx6dlZBbmNHOURfSzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 QTU3Lzc2RjI2N0ZBNTZFQzExRUY4QTBDQjI0RkM0RjlBRTAyL1FCd2FOalQ1aDg2 Zm5senZWQW5jRzlEX0s2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVwHPT6C6FODML6XQ32033h5lmHNZ+LhdPIxyzY4KXDDXBBwzsfejSB uMkp4GIZiI9+z22uvkIYeOy3f9PeVYgtblvMNz6rbqOF0su3yu8YU5pD0bkFR/xt kJaQaO5Ggw9CUXJqmNgD6VdV9QbJ6F8tN+ZzhV2MBfIFDhoWQhV2Dc29CyvJh/2X Rb+iFu+1lkX66PEhslOHeMtKp5URBzMA8WqR7eV6ohHUG+yYIKhX1oZKlebhPNYd KmJP7JnW3v+bJ6XO+PGoLsn1UcEFhUIz3O6Yv52ehWnlhCJgcqO8Fj/2znrBnNC1 vvKpmf2WQQ1zV2qqgNnrzzF/Hdskz0U= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org