$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: OET3/vv1FErJU03Kg2Kd5Tr819f6ywkffTaMIhIlzd8= Subject key identifier: 1E:0D:5D:D0:28:36:70:2B:6A:49:6C:1F:48:AE:07:56:A3:13:5D:BD Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 04BF Signing time: Fri 22 Nov 2024 23:26:19 +0000 Manifest this update: Fri 22 Nov 2024 23:26:19 +0000 Manifest next update: Fri 29 Nov 2024 23:26:19 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: Gu56xwyDc35H2Bi73Hz7q5Vwn8eO4w5nu1Ucq1D4Yr0=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: lQ+1jqh0wfjJhsVaKK8sy3efDGbMHWeel7kX3lnMMu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Nov 22 23:26:19 2024 GMT Not After : Nov 29 23:26:19 2024 GMT Subject: CN=6741131b-3257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:4a:96:60:a1:4c:03:bb:91:3e:ad:8a:dc: cc:12:f8:23:b2:4a:3b:98:66:1f:bd:25:06:22:a5: ea:83:a6:b9:77:1c:76:e2:b5:66:97:71:1b:0a:92: 46:f4:b7:f4:ff:08:dc:0e:6a:ed:4b:04:74:0e:b6: 71:f9:69:4e:ac:df:de:0f:dc:61:fa:73:dd:df:65: b6:05:a8:43:c0:a7:0d:23:47:9c:83:3a:22:ca:76: 3d:df:a9:77:9b:13:b2:99:0f:70:46:00:63:18:7a: f1:87:8a:7e:a0:13:7a:33:33:0f:55:0e:79:47:f4: 85:7e:76:72:f2:c2:aa:8c:d4:bd:82:eb:fc:8b:47: b9:69:de:6c:34:9c:c8:f1:36:27:7a:1d:27:8a:cb: 0f:18:ca:40:9a:a9:ca:ee:77:f7:f1:e7:d9:84:98: 03:ef:b2:cd:d6:b3:52:18:3f:5e:44:5c:12:4d:bb: 0a:b9:30:e7:59:13:87:bd:d3:fb:6b:70:86:71:15: d4:a0:4d:7b:fe:1b:fc:63:9e:15:6f:58:34:58:b1: 43:1d:63:cc:a7:d0:69:7f:34:e2:96:1c:79:59:ef: 90:8e:12:07:e3:0a:96:90:0d:ff:30:b6:3d:d4:7e: ec:e9:81:90:b0:8f:bc:38:3e:a1:33:15:c4:a8:10: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:5D:D0:28:36:70:2B:6A:49:6C:1F:48:AE:07:56:A3:13:5D:BD X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c8:1c:e1:4e:44:a8:a4:5d:79:76:51:f8:23:af:f9:3c:df: 56:86:30:39:57:d7:3c:ef:1f:42:5c:fe:6e:62:d9:a3:fa:8d: a6:54:c9:85:57:b7:45:c5:bc:b9:4e:f9:57:23:8b:fa:fd:59: 52:2a:e5:e5:36:03:c6:79:b4:48:7c:af:26:7a:0b:80:eb:80: 64:53:b9:9d:c6:5f:a4:ce:0d:60:62:ae:5d:a0:d7:d0:4b:77: bb:4f:6b:b3:6a:cb:eb:97:f4:e0:64:6b:be:74:8e:30:72:66: 64:0b:1f:94:03:21:c7:2f:51:5e:5a:ab:45:61:5e:b9:03:68: 9e:25:e9:c3:ff:e4:3a:fa:3c:95:cf:f0:08:66:61:e0:38:0f: d9:df:ee:db:4b:79:28:d3:57:1d:ba:64:32:21:a5:94:72:c3: ec:27:7a:9c:a3:71:fc:a4:bd:2f:7e:16:16:4b:3f:3e:c7:9b: b9:a9:a2:ce:af:df:f7:95:6e:2e:08:e0:86:92:40:87:d0:96: b5:fc:d4:3c:5c:04:ff:d5:42:be:c6:23:86:0c:b6:47:da:f3: 3b:35:17:51:27:84:47:64:a3:56:f4:44:14:0a:31:91:37:1d: cd:ff:4d:93:f0:5d:cf:39:3c:f5:22:05:09:99:b1:6e:01:c0: a6:09:92:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjQxMTIyMjMyNjE5WhcNMjQxMTI5MjMyNjE5WjAYMRYwFAYD VQQDEw02NzQxMTMxYi0zMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqRKlmChTAO7kT6titzMEvgjsko7mGYfvSUGIqXqg6a5dxx24rVml3EbCpJG 9Lf0/wjcDmrtSwR0DrZx+WlOrN/eD9xh+nPd32W2BahDwKcNI0ecgzoiynY936l3 mxOymQ9wRgBjGHrxh4p+oBN6MzMPVQ55R/SFfnZy8sKqjNS9guv8i0e5ad5sNJzI 8TYneh0nissPGMpAmqnK7nf38efZhJgD77LN1rNSGD9eRFwSTbsKuTDnWROHvdP7 a3CGcRXUoE17/hv8Y54Vb1g0WLFDHWPMp9BpfzTilhx5We+QjhIH4wqWkA3/MLY9 1H7s6YGQsI+8OD6hMxXEqBCVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4NXdAo NnAraklsH0iuB1ajE129MB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWyBzhTkSopF15dlH4I6/5PN9WhjA5V9c87x9CXP5uYtmj+o2mVMmF V7dFxby5TvlXI4v6/VlSKuXlNgPGebRIfK8meguA64BkU7mdxl+kzg1gYq5doNfQ S3e7T2uzasvrl/TgZGu+dI4wcmZkCx+UAyHHL1FeWqtFYV65A2ieJenD/+Q6+jyV z/AIZmHgOA/Z3+7bS3ko01cdumQyIaWUcsPsJ3qco3H8pL0vfhYWSz8+x5u5qaLO r9/3lW4uCOCGkkCH0Ja1/NQ8XAT/1UK+xiOGDLZH2vM7NRdRJ4RHZKNW9EQUCjGR Nx3N/02T8F3POTz1IgUJmbFuAcCmCZL4 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org