$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: MdBSmuUspk70ix9cm2gJ07/LnMU7MQWQINfpDEFUALk= Subject key identifier: 88:71:9B:3B:63:D4:8A:46:26:56:86:5C:6B:A0:EB:64:A0:5D:3A:0F Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 19D2 Signing time: Wed 20 Nov 2024 17:37:56 +0000 Manifest this update: Wed 20 Nov 2024 17:37:56 +0000 Manifest next update: Wed 27 Nov 2024 17:37:56 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: qbPcMY35XfsLg7n9V2qhuRLfsECAJalI+BTrdOnezfo=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: ggpRa/9C/T+4eqEz6aVvdgfSZisLvjI9xnhe5rOPwPE=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: 0oeqybcKrBhI/55hvE+Z3GMn8ybvYiHkAmlzvMW/xC0=) 4: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: 63IQlkj6lii3CimlRoGwi2s60Z53L8E/+WqMPHAkTTM=) 5: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: FV/nJlREEQkRocPAG4TmFIzV9fsRBH9Yb/mqjcTQRpg=) 6: B53FD334575411ECAA094876C4F9AE02.roa (hash: oanMttE6009GDQ6qQt6v6MM5T8Qu68NDOKcsPOxNFcQ=) 7: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: VHX0tfX0zCths7eo3IEFSCCmqocPC78TRQvlrR5SqOo=) 8: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: m8h12XB2lIbVgKDkFz+TK2az6NbM66qEOmN6IzpmQ5A=) 9: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: dYu/e56IQckjEEt+emc8iMpZjFQqlQfz3om1m/F+Tms=) 10: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: 5dqrD2W5jYwk09DtySbCQGetw26Enx2hSuRhs2+F8yk=) 11: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: /03hXyLi3Dr2rbUFMkrdUpEPmBNHr3v26Y5pLz5vOMU=) 12: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: lYC0gqBa3fB4gdVesTjVXYXLvZGL3Y11z+GoLwcKEn0=) 13: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: TbeZYZ/ugLpIBEyTrrLOrYQk8RdfGeXzfDNRf4SyAPY=) 14: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: 5P41Xn/FquLEv6T1bH54Y82KxyFGrIgqTqmEVkqc5oA=) 15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: /fCNwnD2ZrRGm4o/av1OcZRzsCqoYf0iB1B5LLd8Xfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9592 (0x2578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Nov 20 17:37:56 2024 GMT Not After : Nov 27 17:37:56 2024 GMT Subject: CN=673e1e74-5676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:16:f9:0b:ee:89:c7:c5:d1:ec:4d:91:89: 83:39:ab:9d:a1:5d:2f:87:03:ec:f0:ec:ea:57:90: 46:85:31:f3:be:aa:8a:6a:73:e2:45:2d:f3:aa:57: 9d:c5:ac:cd:bd:44:bb:3b:e4:ed:e0:1a:56:e2:3c: 93:d6:e5:51:09:57:4a:a9:40:c6:85:23:b6:14:b0: cd:4d:3d:1a:96:d8:e1:07:ce:72:ec:e2:e1:9a:85: 0b:ae:b4:56:4e:91:72:2e:9c:41:09:d9:c9:69:9f: 84:5c:7c:13:9c:9e:f3:6e:6c:5c:9d:08:4e:df:64: b3:0e:5b:ba:58:92:74:8e:fe:18:77:55:7a:77:2e: 37:21:cd:09:98:e4:84:05:88:b2:82:31:c7:be:88: 17:37:a6:07:04:c5:46:00:fa:7c:56:f3:79:e9:fe: 76:0a:e1:00:33:5d:c3:bc:27:54:2b:40:96:2a:b6: ae:b1:6f:17:52:9b:21:b2:b0:e1:b1:66:f7:a0:87: a0:4c:e7:10:59:1d:8b:ef:9e:74:30:95:48:0c:87: 1c:dd:22:7f:a5:58:25:80:bc:7f:01:f8:7e:45:50: 31:83:28:e5:f1:b7:8d:ae:6f:93:10:80:87:d3:48: c7:9a:3f:9b:dc:57:8b:d1:d9:ee:7a:d2:f4:72:00: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:71:9B:3B:63:D4:8A:46:26:56:86:5C:6B:A0:EB:64:A0:5D:3A:0F X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4f:54:61:35:a1:ce:d0:2a:0c:09:19:02:dd:ec:87:96:ee: c7:d5:57:49:03:7b:7f:15:8f:6f:65:0d:a5:b2:c6:57:d7:bd: 4f:d9:ad:81:ad:fd:4f:8b:51:cd:82:70:d5:33:64:73:a7:f4: 7b:11:07:72:0e:eb:c9:68:8e:82:76:fa:cd:e0:ab:2a:24:07: f3:c9:f3:26:35:97:22:22:a9:14:50:a8:09:a9:27:a5:68:63: 3c:43:ef:48:61:ac:ea:7f:1e:30:8c:82:74:08:58:a6:27:69: cc:e7:63:b0:4a:79:b9:08:13:6e:90:c4:f3:9e:8d:91:74:5e: f4:5a:32:ce:86:6f:79:18:21:49:78:73:90:8f:54:e8:ad:eb: 10:fe:30:65:88:66:8f:ed:0d:1b:08:e0:4f:ab:00:cc:16:3b: 4d:8a:94:6f:0f:d1:71:2b:57:89:28:a6:a2:8d:0c:1b:d4:e0: 64:b2:fc:ed:46:87:16:ce:bf:02:15:57:56:0d:cf:ab:a8:94: b7:f2:6b:90:fd:b2:92:2c:c3:8b:91:e9:1e:a7:75:11:3a:e4: 1e:e3:73:d2:2a:a8:61:a8:00:a0:7e:c9:41:a4:6a:bc:e5:cb: 6e:e9:12:5a:88:53:55:33:7a:32:c2:23:62:4f:c5:5a:42:98: 5a:41:53:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQxMTIwMTczNzU2WhcNMjQxMTI3MTczNzU2WjAYMRYwFAYD VQQDEw02NzNlMWU3NC01Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk0W+QvuicfF0exNkYmDOaudoV0vhwPs8OzqV5BGhTHzvqqKanPiRS3zqled xazNvUS7O+Tt4BpW4jyT1uVRCVdKqUDGhSO2FLDNTT0altjhB85y7OLhmoULrrRW TpFyLpxBCdnJaZ+EXHwTnJ7zbmxcnQhO32SzDlu6WJJ0jv4Yd1V6dy43Ic0JmOSE BYiygjHHvogXN6YHBMVGAPp8VvN56f52CuEAM13DvCdUK0CWKrausW8XUpshsrDh sWb3oIegTOcQWR2L7550MJVIDIcc3SJ/pVglgLx/Afh+RVAxgyjl8beNrm+TEICH 00jHmj+b3FeL0dnuetL0cgAq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhxmztj 1IpGJlaGXGug62SgXToPMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRT1RhNaHO0CoMCRkC3eyHlu7H1VdJA3t/FY9vZQ2lssZX171P2a2B rf1Pi1HNgnDVM2Rzp/R7EQdyDuvJaI6CdvrN4KsqJAfzyfMmNZciIqkUUKgJqSel aGM8Q+9IYazqfx4wjIJ0CFimJ2nM52OwSnm5CBNukMTzno2RdF70WjLOhm95GCFJ eHOQj1ToresQ/jBliGaP7Q0bCOBPqwDMFjtNipRvD9FxK1eJKKaijQwb1OBksvzt RocWzr8CFVdWDc+rqJS38muQ/bKSLMOLkekep3UROuQe43PSKqhhqACgfslBpGq8 5ctu6RJaiFNVM3oywiNiT8VaQphaQVM2 -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org