$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: RuUNQJlr3PYxaXWX87YjWUkGZQspBk46ODG6vlaGoGs= Subject key identifier: FA:77:2B:AD:66:9D:9D:11:AC:D1:C8:F4:B6:EE:D0:B0:7F:6A:37:FC Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 03DC Signing time: Sat 23 Nov 2024 00:09:06 +0000 Manifest this update: Sat 23 Nov 2024 00:09:05 +0000 Manifest next update: Sat 30 Nov 2024 00:09:05 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 40pbAZcUAzX3gsbfiXZwwcceaBJW4QF9CfkPPRNN1os=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Nov 23 00:09:05 2024 GMT Not After : Nov 30 00:09:05 2024 GMT Subject: CN=67411d22-1837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:c2:ab:02:e4:77:11:50:98:35:d3:a8:19: 45:d0:97:ed:06:3f:aa:ba:2c:c5:ed:a6:78:46:b6: 32:79:b0:f0:0b:a1:a5:5d:aa:48:7d:12:7b:b9:9e: 98:1c:4c:8d:b7:40:fd:05:c6:fd:6b:bf:e2:02:0b: 34:a8:16:68:5a:76:05:e7:ef:3c:8e:76:12:55:3a: 45:fb:18:d0:9d:5a:46:5b:61:9f:63:62:35:26:32: f5:69:90:8d:f1:a1:ad:08:d9:c1:f9:1f:d7:c9:da: d1:22:ca:5b:1b:f4:bf:9e:c0:91:a7:5b:d4:37:00: 54:ec:ad:6e:b5:2b:50:34:60:e8:cb:cb:64:67:3d: c5:53:f3:2e:a2:9d:76:5a:45:c1:2f:bb:b1:49:65: 11:3d:0f:cb:df:fa:15:12:e4:c6:d0:ab:13:42:11: 19:bb:0b:26:49:40:19:86:e9:e1:3c:cb:48:c4:56: b7:eb:65:fa:bd:ad:9c:39:28:8d:d9:66:9b:d1:27: 12:5c:3c:3c:30:48:7e:05:a3:d7:70:2c:b2:38:81: 0e:62:d8:e1:de:1f:73:b6:17:b1:69:af:1f:2d:13: 70:24:2d:95:da:14:93:31:b0:10:85:86:42:e2:35: e3:93:8b:08:c1:24:fe:a0:14:6a:c5:43:70:39:7b: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:2B:AD:66:9D:9D:11:AC:D1:C8:F4:B6:EE:D0:B0:7F:6A:37:FC X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:3e:e1:4a:08:cb:ec:2b:2d:b5:38:d1:5b:b2:45:c0:99:9c: 96:f9:2a:5c:45:c8:d0:c8:cd:1a:76:19:57:2d:68:9b:ca:86: cb:1e:4d:29:3e:5a:c5:e0:5a:f6:57:97:81:f2:96:41:e8:14: 11:a6:b6:e7:d6:11:b6:0e:5e:d9:74:0c:8a:b8:aa:af:79:6c: f6:85:12:1d:ce:e9:66:2e:7a:46:2c:17:2d:d1:ca:1c:1a:66: c0:07:81:52:17:89:23:ad:fb:40:30:f3:9d:98:45:6b:40:69: b2:c0:b5:a2:d2:6b:6e:c6:fc:a0:88:49:f0:b0:56:13:0d:7b: 04:c0:8d:a8:2a:a9:33:fc:60:63:9c:cf:8a:91:35:34:c6:51: ea:16:9e:f7:af:ad:5b:fe:08:2a:00:52:fb:38:e6:a0:02:f6: 7b:e0:2f:8b:60:3d:6a:0d:11:d3:a1:7b:aa:1c:ba:01:b7:b2: 48:df:5d:13:6d:3c:6a:65:5f:33:3b:77:98:90:04:d3:b3:8d: 27:2b:c5:5b:f4:e4:ee:fe:14:c4:41:cc:82:76:03:57:ae:c3: 6d:83:da:79:c5:29:c9:65:94:86:2b:86:b4:4f:98:72:29:8e: 30:2c:60:98:83:c4:62:77:3b:47:00:27:44:c5:09:82:94:ff: 5c:87:d6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjQxMTIzMDAwOTA1WhcNMjQxMTMwMDAwOTA1WjAYMRYwFAYD VQQDEw02NzQxMWQyMi0xODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSzCqwLkdxFQmDXTqBlF0JftBj+quizF7aZ4RrYyebDwC6GlXapIfRJ7uZ6Y HEyNt0D9Bcb9a7/iAgs0qBZoWnYF5+88jnYSVTpF+xjQnVpGW2GfY2I1JjL1aZCN 8aGtCNnB+R/XydrRIspbG/S/nsCRp1vUNwBU7K1utStQNGDoy8tkZz3FU/Muop12 WkXBL7uxSWURPQ/L3/oVEuTG0KsTQhEZuwsmSUAZhunhPMtIxFa362X6va2cOSiN 2Wab0ScSXDw8MEh+BaPXcCyyOIEOYtjh3h9zthexaa8fLRNwJC2V2hSTMbAQhYZC 4jXjk4sIwST+oBRqxUNwOXvnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPp3K61m nZ0RrNHI9Lbu0LB/ajf8MB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcPuFKCMvsKy21ONFbskXAmZyW+SpcRcjQyM0adhlXLWibyobLHk0p PlrF4Fr2V5eB8pZB6BQRprbn1hG2Dl7ZdAyKuKqveWz2hRIdzulmLnpGLBct0coc GmbAB4FSF4kjrftAMPOdmEVrQGmywLWi0mtuxvygiEnwsFYTDXsEwI2oKqkz/GBj nM+KkTU0xlHqFp73r61b/ggqAFL7OOagAvZ74C+LYD1qDRHToXuqHLoBt7JI310T bTxqZV8zO3eYkATTs40nK8Vb9OTu/hTEQcyCdgNXrsNtg9p5xSnJZZSGK4a0T5hy KY4wLGCYg8RidztHACdExQmClP9ch9aa -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org