$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: F0QqZXvGLCwOFl5r7HWcRBKDVLAT2XrjvvpJXkuYvuk= Subject key identifier: C1:8D:28:D6:27:7E:90:8F:2E:BD:49:A0:3F:A6:03:7A:AE:4A:A9:DD Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 1882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 185A Signing time: Fri 22 Nov 2024 16:31:31 +0000 Manifest this update: Fri 22 Nov 2024 16:31:31 +0000 Manifest next update: Fri 29 Nov 2024 16:31:31 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: KJYSdH9ydyjOMBK9PJtR+qcobQ2awEi7RJrV4U54f2E=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: SdAiulr3si8tYO7W0fyJa1BzzDsMRJIQU+pa3P9bs5E=) 3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: UsFCc7KU3kErqZq90qGqrLGSNxNKCreDKydxFYPECGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6274 (0x1882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Nov 22 16:31:31 2024 GMT Not After : Nov 29 16:31:31 2024 GMT Subject: CN=6740b1e3-e408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:e8:ff:64:18:cc:c0:dc:3e:6e:fd:cb:72: a4:f3:09:eb:fe:c4:5a:d7:1e:33:b7:ed:28:f0:1a: 0c:2b:db:1f:de:ae:23:94:73:01:83:6e:d4:cf:12: 97:e1:8f:f3:72:17:dc:02:0e:ad:d6:c6:c6:20:07: 21:5c:b2:d8:d7:b9:db:2d:e3:e7:22:67:de:d0:82: 35:8d:0c:db:e0:94:3b:4b:bf:0e:88:87:4a:fd:a0: 26:fc:f5:7a:b8:b6:c8:25:e9:3a:02:84:5d:33:5b: 41:8c:d7:b2:04:4b:b4:99:53:d1:a2:67:c9:1e:16: d5:0d:9d:7b:4e:e5:5b:d5:81:3a:24:f8:92:b0:29: b5:81:65:5f:39:c4:f6:eb:8e:7f:07:f0:74:9d:0a: 7d:cb:59:b3:bc:6b:b3:31:1c:76:6e:30:d3:1c:3e: fb:00:8b:48:59:68:22:eb:dc:2b:ed:89:16:50:28: d0:fb:a1:b1:36:a7:25:93:a6:34:8a:0e:2d:99:30: 69:1e:fa:1f:5b:86:a3:3c:be:46:d3:a5:3c:ac:05: 60:90:36:30:3c:70:ad:3d:b6:2e:c3:2c:6d:c2:90: 92:fa:cf:79:fd:a5:a1:f6:42:2d:5c:ff:19:47:cd: 11:18:10:15:5e:fb:aa:2f:26:91:b7:a7:89:f8:86: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:28:D6:27:7E:90:8F:2E:BD:49:A0:3F:A6:03:7A:AE:4A:A9:DD X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:19:70:f1:51:6d:ee:6b:d4:a7:78:c7:e5:01:e3:21:9d:b6: 63:24:f9:df:1a:7a:2e:72:7e:73:e7:48:a7:53:ca:58:d6:11: 25:33:30:9b:ef:48:87:34:5a:08:cf:17:57:38:31:5d:23:5b: 88:c3:f2:e4:10:eb:f4:e6:05:39:61:1f:14:8a:0f:c7:ac:c1: 69:f8:97:d7:9a:b1:50:ba:de:f1:80:89:88:c7:ce:3b:d6:01: 4d:fe:0b:30:84:27:e7:47:5a:18:dc:39:97:c0:cd:a7:e3:92: 65:e0:d0:ea:a4:43:80:1a:4d:85:14:6b:ce:52:cb:ae:34:5b: d6:75:2c:69:e8:27:fe:66:78:54:46:02:ae:7b:7a:ad:dd:be: 9f:6b:eb:d9:00:75:de:32:75:33:61:4c:c3:2e:f7:06:91:3a: d3:6c:ce:82:44:03:a1:e9:f8:a7:c9:e0:6c:75:79:6a:95:82: 93:0a:ba:98:25:8d:af:0e:de:f3:50:52:cf:3a:1a:92:30:47: a1:6e:59:44:7c:8d:19:7b:92:85:53:cc:d8:e2:a4:f4:da:e6: 9b:ee:15:b1:89:14:32:b1:f6:fd:52:6b:1d:a1:1c:d2:6c:03: 06:e0:db:bf:f4:a7:17:96:e0:eb:e9:f8:16:98:4e:63:94:89: 04:59:58:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjQxMTIyMTYzMTMxWhcNMjQxMTI5MTYzMTMxWjAYMRYwFAYD VQQDEw02NzQwYjFlMy1lNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbvo/2QYzMDcPm79y3Kk8wnr/sRa1x4zt+0o8BoMK9sf3q4jlHMBg27UzxKX 4Y/zchfcAg6t1sbGIAchXLLY17nbLePnImfe0II1jQzb4JQ7S78OiIdK/aAm/PV6 uLbIJek6AoRdM1tBjNeyBEu0mVPRomfJHhbVDZ17TuVb1YE6JPiSsCm1gWVfOcT2 645/B/B0nQp9y1mzvGuzMRx2bjDTHD77AItIWWgi69wr7YkWUCjQ+6GxNqclk6Y0 ig4tmTBpHvofW4ajPL5G06U8rAVgkDYwPHCtPbYuwyxtwpCS+s95/aWh9kItXP8Z R80RGBAVXvuqLyaRt6eJ+IY9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGNKNYn fpCPLr1JoD+mA3quSqndMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9GXDxUW3ua9SneMflAeMhnbZjJPnfGnoucn5z50inU8pY1hElMzCb 70iHNFoIzxdXODFdI1uIw/LkEOv05gU5YR8Uig/HrMFp+JfXmrFQut7xgImIx847 1gFN/gswhCfnR1oY3DmXwM2n45Jl4NDqpEOAGk2FFGvOUsuuNFvWdSxp6Cf+ZnhU RgKue3qt3b6fa+vZAHXeMnUzYUzDLvcGkTrTbM6CRAOh6finyeBsdXlqlYKTCrqY JY2vDt7zUFLPOhqSMEehbllEfI0Ze5KFU8zY4qT02uab7hWxiRQysfb9UmsdoRzS bAMG4Nu/9KcXluDr6fgWmE5jlIkEWVjp -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org