$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: 0LDUJLz6j4Z0V8fkkzKEz7LlwH/BexHNQ7xh9inxbX0= Subject key identifier: 4D:D4:F6:F6:40:86:AD:40:0D:D9:20:86:6B:44:6D:E7:A4:C0:4F:48 Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 8D Signing time: Sat 23 Nov 2024 04:34:58 +0000 Manifest this update: Sat 23 Nov 2024 04:34:58 +0000 Manifest next update: Sat 30 Nov 2024 04:34:58 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: Wt5dqEkCEM0SjzPQn93mBF4dOiOOR03gg7MCy7YByCs=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: CD5JHrOld6EH8gDDi5gO0sRUppO6UZeQlXazyHZlOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: Nov 23 04:34:58 2024 GMT Not After : Nov 30 04:34:58 2024 GMT Subject: CN=67415b72-7122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:15:9e:12:c0:84:95:8a:28:0d:36:40:7b: 48:ec:5c:e0:9c:05:d2:ab:9b:de:00:93:90:60:66: 01:57:51:46:54:87:47:73:6a:e8:fd:4d:1c:97:8e: df:c9:a9:a3:05:bb:3a:c7:59:ef:49:9c:4b:a2:7f: 91:e9:8d:2b:c5:c9:56:55:34:e8:61:f0:be:1d:c3: 01:70:31:45:91:77:70:e7:52:e0:25:13:ca:51:b4: 16:96:8c:b3:18:4b:8a:07:9f:35:18:ca:15:25:f4: bf:94:76:00:80:2f:70:10:ce:aa:21:d3:a4:e3:e9: bc:f1:fd:42:60:00:3e:42:1f:ae:00:07:37:3f:80: b8:ea:f7:25:f2:5c:c7:10:76:7a:e9:ea:9e:37:66: bc:f1:0f:59:bc:69:75:2f:cf:c6:eb:1e:32:73:c5: 2e:c1:9f:be:bc:d5:6e:53:ff:68:ef:65:f2:76:57: 73:2a:7c:2d:a3:1c:db:e0:fe:08:94:bf:d5:f3:67: 67:bd:8e:8d:24:6c:83:05:f3:92:0c:b3:45:31:35: 5a:35:ea:96:78:a3:f8:91:96:d2:21:f7:23:c5:a2: 18:5d:3e:ed:aa:36:bf:16:4a:36:2e:47:d4:0a:d6: c4:59:a3:96:e6:17:1f:0d:f1:77:fc:9a:f5:44:f3: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D4:F6:F6:40:86:AD:40:0D:D9:20:86:6B:44:6D:E7:A4:C0:4F:48 X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:2b:4c:89:fc:a5:e3:2e:cb:cb:6f:04:92:ba:a4:3e:93: fc:c3:64:d0:50:16:3b:1c:8f:d1:49:b1:79:95:a9:3a:5e:bf: d4:86:47:3a:5e:51:7d:c7:5e:4e:8c:38:91:04:2d:5a:0b:34: 9e:16:1e:59:6e:2b:52:5e:31:d7:4b:95:a2:f7:3a:a8:99:b2: 76:40:d2:e3:96:8c:b3:15:d3:39:1f:09:7a:26:2f:c2:2d:54: 44:5e:13:ff:45:50:6a:16:d0:7b:fd:27:07:d3:0f:5a:77:f5: 91:1b:6f:94:1f:bf:15:67:21:cb:f1:cb:02:c0:e3:94:01:c4: 25:c8:93:e0:54:f1:e5:f7:7e:01:4e:fc:48:85:46:c6:5c:22: 98:c9:72:e4:1a:2e:f8:43:71:d5:d1:10:83:54:dd:af:82:5a: 55:1e:81:04:75:50:53:b5:55:71:84:f1:5e:4a:87:ee:11:71: 60:42:5b:97:2d:19:9a:e0:93:1e:6c:39:21:3c:5d:6b:db:c3: ba:8f:77:86:dc:30:27:7b:33:26:42:93:78:08:03:25:ae:ef: 59:5f:15:5b:0f:65:18:9c:c5:fb:bc:9a:22:b9:8b:c6:df:32: db:b7:2d:df:29:b8:c7:7b:89:21:06:3c:8f:3e:32:b3:43:6e: 66:f6:ba:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjQxMTIzMDQzNDU4WhcNMjQxMTMwMDQzNDU4WjAYMRYwFAYD VQQDEw02NzQxNWI3Mi03MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb4VnhLAhJWKKA02QHtI7FzgnAXSq5veAJOQYGYBV1FGVIdHc2ro/U0cl47f yamjBbs6x1nvSZxLon+R6Y0rxclWVTToYfC+HcMBcDFFkXdw51LgJRPKUbQWloyz GEuKB581GMoVJfS/lHYAgC9wEM6qIdOk4+m88f1CYAA+Qh+uAAc3P4C46vcl8lzH EHZ66eqeN2a88Q9ZvGl1L8/G6x4yc8UuwZ++vNVuU/9o72XydldzKnwtoxzb4P4I lL/V82dnvY6NJGyDBfOSDLNFMTVaNeqWeKP4kZbSIfcjxaIYXT7tqja/Fko2LkfU CtbEWaOW5hcfDfF3/Jr1RPNWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3U9vZA hq1ADdkghmtEbeekwE9IMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm1ytMifyl4y7Ly28EkrqkPpP8w2TQUBY7HI/RSbF5lak6Xr/Uhkc6 XlF9x15OjDiRBC1aCzSeFh5ZbitSXjHXS5Wi9zqombJ2QNLjloyzFdM5Hwl6Ji/C LVREXhP/RVBqFtB7/ScH0w9ad/WRG2+UH78VZyHL8csCwOOUAcQlyJPgVPHl934B TvxIhUbGXCKYyXLkGi74Q3HV0RCDVN2vglpVHoEEdVBTtVVxhPFeSofuEXFgQluX LRma4JMebDkhPF1r28O6j3eG3DAnezMmQpN4CAMlru9ZXxVbD2UYnMX7vJoiuYvG 3zLbty3fKbjHe4khBjyPPjKzQ25m9rq8 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org