$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: 87WElP8fac0fQi/oiUhxr7C+FHiCFAlY6Sryhoivct8= Subject key identifier: 7E:55:3B:9C:3B:26:FC:66:B9:04:74:DF:B0:5A:51:4E:C1:6B:2F:3F Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 061E Signing time: Fri 22 Nov 2024 22:08:13 +0000 Manifest this update: Fri 22 Nov 2024 22:08:13 +0000 Manifest next update: Fri 29 Nov 2024 22:08:13 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: 3yYjuvQXxnFPCtoO/XdEl2gN837d3MOCb31FP/Kox9Y=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: n4lT+gWmvtn9anqCH3BPKg8IGWZd3CwkT2CnrdkmB4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Nov 22 22:08:13 2024 GMT Not After : Nov 29 22:08:13 2024 GMT Subject: CN=674100cd-898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:41:1a:ef:2e:94:a7:91:34:d0:a6:fa:7c: 25:45:c3:cb:48:d5:4a:a5:d8:7d:7c:aa:92:7e:50: aa:75:91:1c:61:e8:43:b2:10:d2:bc:a1:d9:c9:7d: f5:7d:73:24:04:29:fe:3f:05:90:55:33:3d:60:10: 4e:ca:96:e6:0b:2b:3f:00:91:d9:6d:72:4a:3a:62: 68:f8:8d:e2:01:59:ce:bf:59:b0:79:be:aa:be:1e: 64:9b:17:9e:d5:5c:04:78:cd:cb:eb:8b:b8:a0:08: c7:e9:22:25:6b:e1:37:5a:46:43:80:d8:cf:00:04: 06:2f:aa:0a:f5:28:ae:66:9f:9b:41:0a:d6:f4:dd: 8f:94:71:63:f0:7f:28:64:34:13:69:2a:75:b0:0e: 35:76:51:a5:2b:88:d4:97:8a:84:fe:ee:9f:73:e4: b3:b6:93:31:f7:2e:3e:f1:20:71:03:e1:9f:67:27: 55:87:7a:89:e0:9d:05:d3:3d:47:67:cd:51:2d:b3: 65:72:1f:2d:84:60:1b:90:d3:d3:5e:2e:c0:0f:4f: e5:b2:bb:bb:40:aa:3e:81:04:8b:60:00:3a:2e:eb: 0b:27:83:c0:e7:b4:1a:d0:7c:43:17:ed:6b:ac:18: 6e:c9:50:26:b2:4c:b4:c3:29:2b:a4:53:7e:22:4b: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:3B:9C:3B:26:FC:66:B9:04:74:DF:B0:5A:51:4E:C1:6B:2F:3F X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8e:1e:53:a9:8b:f8:5d:8b:c0:cc:d1:67:01:c3:57:ef:66: 23:68:06:2c:32:c9:f1:48:31:b3:02:1d:ba:e9:04:5e:74:ff: 6d:b2:f3:f8:3f:f0:d4:39:0f:a8:97:3d:9c:08:af:fe:91:b4: 2b:a0:98:24:30:9a:a9:8c:56:73:72:51:cd:08:65:53:5a:3d: 6b:f5:1a:6b:05:cb:71:f7:ad:be:86:1c:cb:65:a8:8e:13:46: 20:f5:0b:c1:07:52:7a:b1:0d:b8:90:1b:d0:5d:3b:f5:2c:a7: 32:a1:22:46:42:8c:6d:52:3a:5f:f8:bf:c6:2a:73:3a:05:f5: aa:e2:60:98:ae:cf:4f:a3:ca:af:e5:3d:92:46:28:3d:b4:b9: c1:38:03:40:6b:9a:6e:3e:f2:31:aa:73:4c:85:43:3a:f0:12: a7:8a:b0:15:3e:44:76:30:53:db:36:e9:b6:32:0e:ba:73:92: 1c:4e:07:7f:6f:24:72:07:ec:bf:22:28:a9:17:8c:0d:fd:bf: 20:4b:5f:97:4e:dd:1d:c5:c1:83:86:e0:71:f4:21:96:ca:6e: 66:22:fb:88:9b:1f:74:42:67:da:ba:73:c6:ca:24:78:a3:78: 8e:55:96:1c:d1:b2:f6:25:2b:d3:ab:f5:07:d2:14:e4:1c:b9: 2d:25:7b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjQxMTIyMjIwODEzWhcNMjQxMTI5MjIwODEzWjAYMRYwFAYD VQQDEw02NzQxMDBjZC04OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiVBGu8ulKeRNNCm+nwlRcPLSNVKpdh9fKqSflCqdZEcYehDshDSvKHZyX31 fXMkBCn+PwWQVTM9YBBOypbmCys/AJHZbXJKOmJo+I3iAVnOv1mweb6qvh5kmxee 1VwEeM3L64u4oAjH6SIla+E3WkZDgNjPAAQGL6oK9SiuZp+bQQrW9N2PlHFj8H8o ZDQTaSp1sA41dlGlK4jUl4qE/u6fc+SztpMx9y4+8SBxA+GfZydVh3qJ4J0F0z1H Z81RLbNlch8thGAbkNPTXi7AD0/lsru7QKo+gQSLYAA6LusLJ4PA57Qa0HxDF+1r rBhuyVAmsky0wykrpFN+Ikt0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5VO5w7 JvxmuQR037BaUU7Bay8/MB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtjh5TqYv4XYvAzNFnAcNX72YjaAYsMsnxSDGzAh266QRedP9tsvP4 P/DUOQ+olz2cCK/+kbQroJgkMJqpjFZzclHNCGVTWj1r9RprBctx962+hhzLZaiO E0Yg9QvBB1J6sQ24kBvQXTv1LKcyoSJGQoxtUjpf+L/GKnM6BfWq4mCYrs9Po8qv 5T2SRig9tLnBOANAa5puPvIxqnNMhUM68BKnirAVPkR2MFPbNum2Mg66c5IcTgd/ byRyB+y/IiipF4wN/b8gS1+XTt0dxcGDhuBx9CGWym5mIvuImx90QmfaunPGyiR4 o3iOVZYc0bL2JSvTq/UH0hTkHLktJXsx -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org