$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: mrNS0d51+0J7D8sizy7+TXcge9KVGEvwl+uyQNDw75g= Subject key identifier: C5:CF:A7:2D:19:D7:22:83:FE:25:56:13:69:08:4D:F8:46:9F:6C:15 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 3427 Signing time: Fri 22 Nov 2024 15:02:58 +0000 Manifest this update: Fri 22 Nov 2024 15:02:57 +0000 Manifest next update: Fri 29 Nov 2024 15:02:57 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: TIiWhRwKa1skjygm+B30EOpD5LbA4IgqYFOf9h0oUSg=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: wrgTGY4Zg1HcHZCDO+hkBCrj/kSRgwBrHyd97B10p9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Nov 22 15:02:57 2024 GMT Not After : Nov 29 15:02:57 2024 GMT Subject: CN=67409d22-fa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:21:7f:50:11:81:77:ed:c8:03:ec:b0:0f: cb:79:22:93:53:92:5a:a3:ef:14:a9:18:ac:33:eb: 26:7b:02:6d:de:8d:8b:41:ba:ae:61:89:84:ec:1e: 87:9f:9f:c3:b7:2e:39:aa:97:34:27:e5:7d:2b:4f: 35:b9:a6:b2:1f:99:55:3d:9a:76:ba:7c:e1:d3:38: a8:cb:c4:f2:85:c6:b8:2f:69:b6:d7:20:f2:10:53: 82:6c:48:f3:52:19:ec:d9:ac:1d:c7:26:31:87:8a: 5b:9a:2a:10:36:47:2e:2d:ee:00:9a:3c:88:8f:75: d8:20:83:12:0b:e1:dd:40:c4:24:8d:27:4a:c1:ad: 22:0e:ff:8e:c3:7a:f3:98:5f:9d:73:2a:30:73:bf: e7:15:53:10:20:f5:97:37:5b:66:90:81:4c:f8:d6: b5:bf:6a:38:71:c8:26:97:07:5c:69:eb:3c:9c:1f: 1d:88:08:99:4b:8e:b7:ed:71:5c:27:16:6e:76:76: f8:d1:fd:32:fc:df:8f:0d:29:4e:5d:d6:fb:67:75: 1f:0e:f1:67:5a:c7:1b:66:15:23:c8:a0:3e:13:5c: c3:e5:bb:dc:4e:34:e2:6a:27:8b:0f:30:be:f8:60: f1:c0:5f:d4:3e:6a:fa:08:81:4a:e9:14:56:f8:b9: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:A7:2D:19:D7:22:83:FE:25:56:13:69:08:4D:F8:46:9F:6C:15 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:64:a5:dc:a1:bd:88:6b:ca:e1:1f:60:02:02:79:82:d7:03: 83:53:af:21:09:82:66:3e:e8:bb:8a:5f:4e:6d:36:39:d4:5d: dd:47:86:c7:cc:bb:74:ce:f3:ca:2c:1e:74:e2:d8:67:1c:8e: 63:0f:36:31:b3:34:b1:cf:60:05:78:68:2a:2a:dc:b3:d0:3b: 18:6a:73:4d:f1:e5:bf:3e:bc:fa:43:0f:6d:77:64:fa:4d:a5: 8f:4f:fd:ab:73:de:79:26:54:fd:97:a2:d7:9c:3d:20:82:71: f4:50:be:c7:f8:cc:d0:d8:4c:ee:96:1c:d4:6a:5d:a1:5f:64: 27:0e:a3:b4:8e:bb:ce:37:37:1e:a7:4d:05:5d:77:2a:b8:a7: 5a:fc:14:2c:90:91:79:1b:3e:e4:9a:73:db:3d:9f:f9:b1:95: 0c:19:a4:10:54:d1:c6:6d:2d:be:33:77:d5:62:64:d1:2e:b7: ef:5f:df:b9:1d:cd:c3:db:28:fa:69:b7:d1:66:8d:0b:89:7d: cb:f2:b5:df:0c:e7:11:eb:39:53:c6:17:55:85:d8:d6:e8:24: 35:65:a4:14:9b:a4:d6:b2:38:31:bd:f5:42:0c:42:9f:77:51: ae:4a:fd:52:ca:5f:c1:88:d9:84:7a:e9:65:38:8f:20:33:90: 73:f1:f2:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjQxMTIyMTUwMjU3WhcNMjQxMTI5MTUwMjU3WjAYMRYwFAYD VQQDEw02NzQwOWQyMi1mYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgkhf1ARgXftyAPssA/LeSKTU5Jao+8UqRisM+smewJt3o2LQbquYYmE7B6H n5/Dty45qpc0J+V9K081uaayH5lVPZp2unzh0zioy8Tyhca4L2m21yDyEFOCbEjz Uhns2awdxyYxh4pbmioQNkcuLe4AmjyIj3XYIIMSC+HdQMQkjSdKwa0iDv+Ow3rz mF+dcyowc7/nFVMQIPWXN1tmkIFM+Na1v2o4ccgmlwdcaes8nB8diAiZS4637XFc JxZudnb40f0y/N+PDSlOXdb7Z3UfDvFnWscbZhUjyKA+E1zD5bvcTjTiaieLDzC+ +GDxwF/UPmr6CIFK6RRW+LkUvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXPpy0Z 1yKD/iVWE2kITfhGn2wVMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiZKXcob2Ia8rhH2ACAnmC1wODU68hCYJmPui7il9ObTY51F3dR4bH zLt0zvPKLB504thnHI5jDzYxszSxz2AFeGgqKtyz0DsYanNN8eW/Prz6Qw9td2T6 TaWPT/2rc955JlT9l6LXnD0ggnH0UL7H+MzQ2EzulhzUal2hX2QnDqO0jrvONzce p00FXXcquKda/BQskJF5Gz7kmnPbPZ/5sZUMGaQQVNHGbS2+M3fVYmTRLrfvX9+5 Hc3D2yj6abfRZo0LiX3L8rXfDOcR6zlTxhdVhdjW6CQ1ZaQUm6TWsjgxvfVCDEKf d1GuSv1Syl/BiNmEeullOI8gM5Bz8fKg -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org