$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json) Hash identifier: IayOL+f3SarlLaj5OLTTFGrXgG9V7/zMBbWe4ePduOo= Subject key identifier: AC:65:5B:76:F3:7B:DD:C6:03:0C:16:C1:B8:60:67:89:21:89:AD:9A Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft Manifest number: 075F Signing time: Fri 22 Nov 2024 21:01:35 +0000 Manifest this update: Fri 22 Nov 2024 21:01:35 +0000 Manifest next update: Fri 29 Nov 2024 21:01:35 +0000 Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: DGqNZXMNRlTkIA3Fn4WRxKRsP10RdMjbVqoKEx1Ln+U=) 2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Validity Not Before: Nov 22 21:01:35 2024 GMT Not After : Nov 29 21:01:35 2024 GMT Subject: CN=6740f12f-168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:66:2c:54:92:9f:69:27:88:90:08:b5:39: 7c:41:21:84:e5:6d:8b:9c:3a:45:ee:89:60:81:10: 32:fb:16:ae:88:36:aa:3b:67:cd:fc:48:06:ee:8e: 74:e8:b7:f9:c1:1b:6e:c4:6c:60:e5:25:00:39:e9: 92:7e:2e:00:b7:af:d2:11:3a:b1:b6:4e:8a:0d:f6: 3a:d7:32:72:b4:d5:38:da:2e:c2:46:60:8f:2e:b3: 21:c4:6f:07:4d:5f:db:69:96:ae:d6:b7:22:bd:0e: b1:f2:b8:f9:2d:bf:09:91:1c:37:a5:ab:a6:79:e0: b7:dc:fa:31:b3:bf:d0:94:39:0f:45:d8:f8:b5:27: 81:01:09:6b:80:25:96:25:b6:8e:79:26:64:2f:e3: 1c:c9:74:78:7c:14:ff:0d:c1:15:06:a4:65:ed:dc: ae:41:f2:36:94:8d:cf:69:7d:66:7f:c1:9e:8f:f6: 27:3d:7e:82:8f:fb:15:75:9b:e1:13:25:45:d9:2f: 43:ed:e4:20:46:86:d5:9a:59:44:7f:b1:58:bf:a4: 4e:45:d2:fe:46:f0:b6:18:50:b4:d6:3d:b9:06:87: 4c:7c:9e:50:a6:1d:12:47:fd:5e:d7:7e:06:3a:71: 2e:13:81:3a:fa:00:ab:43:90:65:d8:6c:fb:c5:de: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:5B:76:F3:7B:DD:C6:03:0C:16:C1:B8:60:67:89:21:89:AD:9A X509v3 Authority Key Identifier: keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:3b:0a:08:8f:5d:34:cd:7c:1e:00:17:6c:26:de:a3:48: 1a:5e:82:35:43:94:0c:ef:d5:f9:ec:07:a0:6c:21:07:ec:53: 1a:23:a7:fd:4d:ad:42:60:d3:40:37:3a:d0:dd:d4:27:c1:e5: 2b:d2:66:e6:3c:db:dd:92:7d:91:09:6c:93:ed:69:20:71:87: a4:04:ae:5d:f9:e9:cc:d3:b8:ad:1c:0d:86:01:b1:ae:93:95: 6f:55:43:6e:7a:a3:dc:e8:44:41:a2:1d:fa:86:67:72:67:43: d8:ee:f7:91:8f:fd:d5:0d:29:30:f0:d1:22:e8:59:d8:d1:ec: f3:ae:71:a3:c8:e1:d5:86:5a:77:f5:09:37:27:29:b7:25:0f: 8c:b2:49:89:01:62:ab:20:9f:a8:fb:f5:18:ad:81:98:2c:8f: f7:80:57:03:12:63:66:09:66:fd:01:d7:79:62:4e:17:66:da: f6:00:a2:83:35:96:b1:ac:9b:42:3c:72:81:ce:d6:d0:4a:da: ca:6c:b8:1b:1a:ff:8e:63:a5:12:cf:c6:04:fa:80:57:3f:54: c4:6d:92:81:cf:4f:f9:05:72:6a:58:f8:1a:fb:6c:63:e1:6f: 87:dc:c6:14:cc:e7:de:cf:7b:ea:3e:0c:29:5d:81:b5:66:50: 2c:22:f5:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3 ODc4RDM1M0IwHhcNMjQxMTIyMjEwMTM1WhcNMjQxMTI5MjEwMTM1WjAYMRYwFAYD VQQDEw02NzQwZjEyZi0xNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIxmLFSSn2kniJAItTl8QSGE5W2LnDpF7olggRAy+xauiDaqO2fN/EgG7o50 6Lf5wRtuxGxg5SUAOemSfi4At6/SETqxtk6KDfY61zJytNU42i7CRmCPLrMhxG8H TV/baZau1rcivQ6x8rj5Lb8JkRw3paumeeC33Poxs7/QlDkPRdj4tSeBAQlrgCWW JbaOeSZkL+McyXR4fBT/DcEVBqRl7dyuQfI2lI3PaX1mf8Gej/YnPX6Cj/sVdZvh EyVF2S9D7eQgRobVmllEf7FYv6RORdL+RvC2GFC01j25BodMfJ5Qph0SR/1e134G OnEuE4E6+gCrQ5Bl2Gz7xd4mlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxlW3bz e93GAwwWwbhgZ4khia2aMB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5 NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5qDsKCI9dNM18HgAXbCbeo0gaXoI1Q5QM79X57AegbCEH7FMaI6f9 Ta1CYNNANzrQ3dQnweUr0mbmPNvdkn2RCWyT7WkgcYekBK5d+enM07itHA2GAbGu k5VvVUNueqPc6ERBoh36hmdyZ0PY7veRj/3VDSkw8NEi6FnY0ezzrnGjyOHVhlp3 9Qk3Jym3JQ+MskmJAWKrIJ+o+/UYrYGYLI/3gFcDEmNmCWb9Add5Yk4XZtr2AKKD NZaxrJtCPHKBztbQStrKbLgbGv+OY6USz8YE+oBXP1TEbZKBz0/5BXJqWPga+2xj 4W+H3MYUzOfez3vqPgwpXYG1ZlAsIvUY -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org