$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft File: qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json) Hash identifier: CS7aVYNLS1PQmTpUSaL4TwiMrE0vz4DIyvc06C+KesE= Subject key identifier: B0:76:46:58:D5:33:30:3C:ED:C3:CA:63:CF:20:41:34:30:15:F0:60 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft Manifest number: 3492 Signing time: Wed 20 Nov 2024 14:18:41 +0000 Manifest this update: Wed 20 Nov 2024 14:18:40 +0000 Manifest next update: Wed 27 Nov 2024 14:18:40 +0000 Files and hashes: 1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: IXiRVNxUgmnHnZVehC5xiaSnVRM5qmUPlKH0atNBLVk=) 2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: e6iWa8MdPky5dcW6w9CmZsq4S/fRJU/ey9ksd6cHuVs=) 3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: xy5pIu3l7wUyCPURN2HfFbuAu50c84hxdwVmXjiyNbk=) 4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: OHeMzeNowBffY6Ub7C6K6isl69fkp7xN/fws1beqP78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Nov 20 14:18:40 2024 GMT Not After : Nov 27 14:18:40 2024 GMT Subject: CN=673defc0-4283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:a5:9a:82:e0:6c:98:b2:8f:7d:4d:aa:a8: d9:90:d0:e5:15:27:72:b3:24:42:58:4b:d5:c0:24: 0b:ee:d5:1b:13:c5:d5:9e:26:52:5b:57:cb:da:1f: f2:fb:a0:12:e0:60:ca:e8:01:19:7c:bc:5d:a8:2c: 35:9c:13:50:02:b9:63:8e:1c:dc:bf:9e:ed:78:f5: eb:96:26:3a:4e:db:f3:49:e9:67:11:3e:92:cf:9c: 2d:a9:aa:2b:ea:50:c4:cb:24:ae:47:6d:9b:24:b3: 60:d5:dc:1f:2f:13:55:e8:15:80:16:1d:f5:4a:e7: 3b:72:71:df:13:f8:78:dc:70:97:bb:6f:f0:1e:c8: 89:5a:a4:1b:21:a1:b1:25:21:f8:47:96:ba:a5:87: 6d:c0:a8:c1:c6:bb:de:f5:89:9d:b7:3c:9d:7c:99: 10:ee:a9:29:ea:90:89:06:1f:b6:10:44:c7:bf:e3: 2e:aa:1c:e2:4a:35:2a:81:57:e6:ef:16:ff:81:78: 4c:5e:c9:51:f1:a3:cf:ca:0c:96:26:e2:ca:56:ac: 1b:17:2d:d4:c6:98:55:36:65:09:5b:9c:1e:7d:7d: b1:64:7c:05:f8:4b:47:2e:7b:c6:d2:c1:e5:53:40: 4b:f1:67:10:bf:b8:c8:ac:df:d2:2c:d4:2e:f7:b2: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:76:46:58:D5:33:30:3C:ED:C3:CA:63:CF:20:41:34:30:15:F0:60 X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a6:dc:c2:85:ff:59:5b:8d:8a:53:dc:ea:1c:b3:87:35:0a: 89:5c:8a:d0:a3:31:21:66:8e:91:1b:78:d9:24:6b:fa:39:ff: f6:b0:ec:95:b7:68:22:f9:7d:43:62:51:39:cc:04:7b:2b:51: b2:b4:8c:de:b5:51:74:4b:16:d9:c7:51:60:64:35:e4:0a:1f: a9:83:67:4c:eb:46:d2:04:6f:c1:fc:9e:d0:66:f1:a8:06:8b: bc:4f:08:80:8a:1f:8d:44:5c:32:b7:11:f6:66:4a:30:5b:5a: cc:9c:22:7a:6e:14:10:43:1d:86:a1:af:f2:83:39:8f:a8:fe: cc:1a:82:6d:08:2d:5a:6b:4d:ce:8d:9a:61:d1:96:57:70:27: 7d:6c:c5:bb:8d:10:fb:73:d5:d5:4b:ff:9a:5d:45:35:be:9b: 58:03:9c:9d:61:24:ed:32:8e:1b:5a:e5:46:3f:4e:13:02:6d: 1f:1f:f7:d6:fd:31:e9:bd:a2:12:aa:8e:c2:bf:bd:26:58:9c: d6:b6:5b:45:29:1f:c3:9e:1d:65:7d:08:75:9d:4b:b0:ae:bc: 93:93:25:2a:36:67:b4:cf:05:9f:f9:aa:10:89:0c:bc:cb:e7: 49:2f:ef:84:91:cd:ce:43:27:d7:b2:d8:8c:56:9a:37:6f:88: d6:ee:1c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjQxMTIwMTQxODQwWhcNMjQxMTI3MTQxODQwWjAYMRYwFAYD VQQDEw02NzNkZWZjMC00MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkylmoLgbJiyj31NqqjZkNDlFSdysyRCWEvVwCQL7tUbE8XVniZSW1fL2h/y +6AS4GDK6AEZfLxdqCw1nBNQArljjhzcv57tePXrliY6TtvzSelnET6Sz5wtqaor 6lDEyySuR22bJLNg1dwfLxNV6BWAFh31Suc7cnHfE/h43HCXu2/wHsiJWqQbIaGx JSH4R5a6pYdtwKjBxrve9YmdtzydfJkQ7qkp6pCJBh+2EETHv+MuqhziSjUqgVfm 7xb/gXhMXslR8aPPygyWJuLKVqwbFy3UxphVNmUJW5wefX2xZHwF+EtHLnvG0sHl U0BL8WcQv7jIrN/SLNQu97LeZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB2RljV MzA87cPKY88gQTQwFfBgMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1 TTNfVDE2bG1iRmpMakR0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXptzChf9ZW42KU9zqHLOHNQqJXIrQozEhZo6RG3jZJGv6Of/2sOyV t2gi+X1DYlE5zAR7K1GytIzetVF0SxbZx1FgZDXkCh+pg2dM60bSBG/B/J7QZvGo Bou8TwiAih+NRFwytxH2ZkowW1rMnCJ6bhQQQx2Goa/ygzmPqP7MGoJtCC1aa03O jZph0ZZXcCd9bMW7jRD7c9XVS/+aXUU1vptYA5ydYSTtMo4bWuVGP04TAm0fH/fW /THpvaISqo7Cv70mWJzWtltFKR/Dnh1lfQh1nUuwrryTkyUqNme0zwWf+aoQiQy8 y+dJL++Ekc3OQyfXstiMVpo3b4jW7hxs -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:22 2024 by rpki-client on console-fra.rpki-client.org