$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: Zpm27U7QOQMzaRjALVzrrgq95jxnVk8BofuV0BV1B/k= Subject key identifier: E4:08:3C:04:2C:55:99:6F:D5:A3:6E:BD:A9:EA:78:45:C2:DC:EE:5E Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 02 Signing time: Sat 23 Nov 2024 11:17:47 +0000 Manifest this update: Sat 23 Nov 2024 11:17:47 +0000 Manifest next update: Sat 30 Nov 2024 11:17:47 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: g7+h+CL/fkHuKP3ywWv87BUhwZJbsMR/Q/le3PZjvcI=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 11:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Nov 23 11:17:47 2024 GMT Not After : Nov 30 11:17:47 2024 GMT Subject: CN=6741b9db-5e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:f3:f5:41:5b:6b:ca:7d:ac:1a:90:b8:77: 13:85:f5:99:7c:14:36:2a:35:b4:b0:aa:dd:c6:5a: fc:a3:a8:63:55:d7:74:74:20:b1:f0:0e:be:29:9d: f8:dc:cf:1c:35:9f:dc:d2:4f:3e:07:2e:ea:89:32: 4e:f9:0a:ca:15:2b:6c:56:ac:5b:56:49:17:2f:74: 88:1e:2b:0b:9a:d4:7d:cb:bd:a6:13:36:a0:66:d2: db:b1:0f:71:be:34:91:76:f0:4f:41:a3:ba:e7:63: 8f:cb:74:41:c1:de:c5:ae:b9:92:76:1e:e3:4f:49: 1f:e6:e9:5d:21:9b:ca:59:a1:cc:6e:6f:f2:ff:a0: fb:dd:e9:b9:b0:39:c7:c9:63:39:88:24:dc:d2:cf: f4:8b:39:d1:05:c2:cd:72:c0:e8:7a:33:f6:63:da: 2c:d7:e5:5a:95:ac:1d:2c:82:b5:74:74:54:aa:18: f7:f0:44:0a:bd:a3:e8:73:b5:26:ca:79:19:6e:27: 80:67:4c:84:89:b5:59:af:93:2b:ee:73:00:1c:3e: 3c:43:54:29:76:33:4e:87:eb:e0:29:b4:25:34:d1: b8:82:5d:4c:82:78:1b:af:01:c3:1f:43:b0:67:72: a8:34:c8:4e:49:42:6d:27:f7:7a:72:b3:74:70:e5: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:3C:04:2C:55:99:6F:D5:A3:6E:BD:A9:EA:78:45:C2:DC:EE:5E X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c6:73:53:30:0d:f6:01:5b:46:87:a0:93:5c:3e:08:39:21: 57:8f:57:3d:39:68:ff:e1:d8:68:ef:ee:c2:d9:16:2a:94:94: 8b:84:b5:de:1a:ee:21:14:97:52:1f:c7:d5:87:5e:1d:6f:61: 21:4b:ab:93:71:36:f4:4b:da:c5:cb:77:88:5a:e7:b6:89:50: ce:fb:fe:3b:fd:4d:90:4e:fb:bc:5a:bb:7d:78:5f:28:23:4a: 76:98:4e:42:70:bb:cd:5d:4d:3f:24:31:95:84:25:45:76:1e: 32:55:5c:fa:ef:db:6a:1c:89:e8:85:9c:cf:00:64:51:d8:7d: b0:e3:23:d1:e0:51:14:8d:e7:b2:02:84:bd:88:45:ee:62:6c: c7:25:d7:a8:e2:d8:7c:0e:eb:05:d0:28:c2:5f:50:3c:b1:53: e0:9a:94:79:2e:9f:f0:f8:51:6b:47:2c:14:36:2e:bd:d5:8b: 39:98:fd:9d:5f:b0:4e:95:d5:06:8d:fc:da:d3:3d:f0:c0:00: ee:ca:29:ba:70:76:61:56:95:2d:10:2e:a1:44:b7:3a:58:a4: 70:24:ca:33:90:89:b6:5d:fb:2b:85:ef:be:b8:a9:8e:a3:99: eb:53:ef:f0:d0:b8:3f:b1:7f:ce:ee:b1:36:95:67:e8:76:d1: bd:f4:ba:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNDExMjMxMTE3NDdaFw0yNDExMzAxMTE3NDdaMBgxFjAUBgNV BAMTDTY3NDFiOWRiLTVlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqRfP1QVtryn2sGpC4dxOF9Zl8FDYqNbSwqt3GWvyjqGNV13R0ILHwDr4pnfjc zxw1n9zSTz4HLuqJMk75CsoVK2xWrFtWSRcvdIgeKwua1H3LvaYTNqBm0tuxD3G+ NJF28E9Bo7rnY4/LdEHB3sWuuZJ2HuNPSR/m6V0hm8pZocxub/L/oPvd6bmwOcfJ YzmIJNzSz/SLOdEFws1ywOh6M/Zj2izX5VqVrB0sgrV0dFSqGPfwRAq9o+hztSbK eRluJ4BnTISJtVmvkyvucwAcPjxDVCl2M06H6+AptCU00biCXUyCeBuvAcMfQ7Bn cqg0yE5JQm0n93pys3Rw5YRnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Ag8BCxV mW/Vo269qep4RcLc7l4wHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzGc1MwDfYBW0aHoJNcPgg5IVePVz05aP/h2Gjv7sLZFiqUlIuEtd4a 7iEUl1Ifx9WHXh1vYSFLq5NxNvRL2sXLd4ha57aJUM77/jv9TZBO+7xau314Xygj SnaYTkJwu81dTT8kMZWEJUV2HjJVXPrv22ocieiFnM8AZFHYfbDjI9HgURSN57IC hL2IRe5ibMcl16ji2HwO6wXQKMJfUDyxU+CalHkun/D4UWtHLBQ2Lr3VizmY/Z1f sE6V1QaN/NrTPfDAAO7KKbpwdmFWlS0QLqFEtzpYpHAkyjOQibZd+yuF7764qY6j metT7/DQuD+xf87usTaVZ+h20b30ugg= -----END CERTIFICATE-----Generated at Sat Nov 23 13:12:52 2024 by rpki-client on console-fra.rpki-client.org