$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: DWK+EjJVrSwOn9Yj517YKAkZ5NioFYgCD5MvmIIJH1o= Subject key identifier: 95:47:78:03:00:78:20:DB:1D:39:A5:53:30:0D:B3:D0:49:6F:1E:26 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 0154 Signing time: Sat 23 Nov 2024 02:26:39 +0000 Manifest this update: Sat 23 Nov 2024 02:26:39 +0000 Manifest next update: Sat 30 Nov 2024 02:26:38 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: K2epJs4GDKxV1qAY+JVuwqxoSkqqpuBzI1AYuc/o73E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Nov 23 02:26:39 2024 GMT Not After : Nov 30 02:26:38 2024 GMT Subject: CN=67413d5f-8205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:fc:e7:36:02:ac:55:1e:ca:fb:d2:0d:fd: bf:d8:a8:2a:5d:eb:8c:45:6f:3d:6f:a0:fb:b4:90: 15:ff:3e:6c:04:06:51:6b:d8:c1:b6:8d:a4:e4:6b: 65:34:75:38:ff:cf:0e:7d:7a:36:ec:08:56:13:cf: 4d:15:a8:f3:43:c5:8a:5d:df:6e:af:c7:60:85:c5: 4b:7e:4d:33:cc:b7:6e:65:26:5a:1d:78:a1:fd:6d: b7:0c:43:d2:0d:91:01:f8:b5:95:a5:bc:2a:6e:a7: 14:81:8d:8b:27:5c:14:bf:15:0b:c7:40:cf:ed:81: 01:e9:46:d7:c2:b1:df:3e:6e:5b:09:de:24:7d:0f: 15:0b:fb:e2:31:06:89:75:ae:0e:1f:f9:44:73:11: c0:2d:01:44:b5:58:d1:df:ad:e8:a8:4c:b7:39:ae: 89:d8:05:5e:d4:f0:33:e7:03:53:56:a0:b6:06:1a: 78:57:34:b9:80:df:25:76:67:42:e1:99:fd:c9:03: 3c:3e:71:02:5e:73:2c:71:61:20:74:1b:56:4b:60: 81:fd:9a:94:94:5a:5f:36:18:8c:ec:ca:52:ff:2c: 70:e7:5a:ea:65:bb:04:ac:be:08:b3:cf:fb:5c:59: 43:eb:dc:ee:b8:be:49:8b:67:d6:d9:fc:12:4b:19: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:78:03:00:78:20:DB:1D:39:A5:53:30:0D:B3:D0:49:6F:1E:26 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7b:8a:1e:fb:48:9f:d2:6e:1c:ac:5a:fe:d8:6d:aa:d3:64: f5:4e:be:95:cb:21:a9:39:cc:58:45:28:a3:b9:15:ec:51:b9: 47:54:9d:fb:b4:2f:40:16:16:0b:83:9a:2d:75:cf:e5:22:07: 63:6a:12:77:a8:11:35:e8:05:03:08:28:27:00:95:99:c5:8b: 4b:de:27:d2:4d:e7:79:92:b5:38:dc:56:fd:a8:0a:c3:bc:a2: 3e:d0:a8:5d:a9:ad:ee:e5:d4:e7:8d:35:0c:f6:72:03:e4:87: 16:81:fb:b0:44:9c:45:4f:08:7d:66:d3:56:33:3e:e5:56:2c: 78:ce:77:06:18:dc:3d:75:73:8b:68:df:3c:c2:8f:97:4e:aa: 24:5f:77:a1:e6:07:88:d6:d0:a8:2a:04:5b:62:18:18:b4:c0: c0:8e:fe:16:3b:6e:8e:95:9b:16:3e:2d:96:6e:85:34:14:2a: ef:41:6e:68:1b:89:ab:a0:12:c8:c7:ec:ae:2a:d4:ab:30:05: ff:23:21:b7:48:2e:a6:63:a2:b7:ab:04:3b:a1:ad:03:fd:b9: 28:63:4b:05:4d:05:19:d3:f0:5a:73:29:6e:fc:5e:6a:5f:b9: ef:af:d5:d7:02:d4:09:dd:74:6d:13:3a:e2:d8:d5:c5:c8:05: 55:0e:5d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjQxMTIzMDIyNjM5WhcNMjQxMTMwMDIyNjM4WjAYMRYwFAYD VQQDEw02NzQxM2Q1Zi04MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXv85zYCrFUeyvvSDf2/2KgqXeuMRW89b6D7tJAV/z5sBAZRa9jBto2k5Gtl NHU4/88OfXo27AhWE89NFajzQ8WKXd9ur8dghcVLfk0zzLduZSZaHXih/W23DEPS DZEB+LWVpbwqbqcUgY2LJ1wUvxULx0DP7YEB6UbXwrHfPm5bCd4kfQ8VC/viMQaJ da4OH/lEcxHALQFEtVjR363oqEy3Oa6J2AVe1PAz5wNTVqC2Bhp4VzS5gN8ldmdC 4Zn9yQM8PnECXnMscWEgdBtWS2CB/ZqUlFpfNhiM7MpS/yxw51rqZbsErL4Is8/7 XFlD69zuuL5Ji2fW2fwSSxmd8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVHeAMA eCDbHTmlUzANs9BJbx4mMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCne4oe+0if0m4crFr+2G2q02T1Tr6VyyGpOcxYRSijuRXsUblHVJ37 tC9AFhYLg5otdc/lIgdjahJ3qBE16AUDCCgnAJWZxYtL3ifSTed5krU43Fb9qArD vKI+0Khdqa3u5dTnjTUM9nID5IcWgfuwRJxFTwh9ZtNWMz7lVix4zncGGNw9dXOL aN88wo+XTqokX3eh5geI1tCoKgRbYhgYtMDAjv4WO26OlZsWPi2WboU0FCrvQW5o G4mroBLIx+yuKtSrMAX/IyG3SC6mY6K3qwQ7oa0D/bkoY0sFTQUZ0/Bacylu/F5q X7nvr9XXAtQJ3XRtEzri2NXFyAVVDl1a -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org