$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: 5qw3pBRkfZ2NQv6XZM5gcEyde5LpDfQNz99mYEYg7Io= Subject key identifier: FC:81:12:7C:22:E6:0B:B5:8E:9C:35:51:0E:52:1D:37:EC:17:08:21 Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 041A Signing time: Wed 20 Nov 2024 23:57:28 +0000 Manifest this update: Wed 20 Nov 2024 23:57:27 +0000 Manifest next update: Wed 27 Nov 2024 23:57:27 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: R4jWV6B1JJuznBlrihvK4vfEThh3b1ZQ7bC9D7+HUzM=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: JrlpqVQiM6sMiitAZj1nZPNS6SGLOAO1mc1OoPH/pp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Nov 20 23:57:27 2024 GMT Not After : Nov 27 23:57:27 2024 GMT Subject: CN=673e7767-4e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f8:2c:09:91:ab:dd:a4:fa:cd:d2:84:19:52: 35:08:d3:70:8a:3e:a9:b5:87:52:8d:7a:95:88:a9: b2:9b:27:f3:2a:48:de:f0:56:02:c3:97:8e:05:d2: 22:85:08:6f:23:f1:5f:d4:2f:4e:7f:b9:4b:d4:22: bd:c9:d4:cc:1f:33:09:28:ee:d5:3e:3a:2f:82:8d: 4d:11:15:01:1d:32:5a:14:e6:8f:4c:fe:5e:de:18: b1:da:d6:34:a8:2d:1a:90:c2:74:a4:4e:e5:bc:81: 55:95:00:f0:aa:bd:26:26:d5:14:6a:c5:e7:91:6f: 58:f6:92:03:c5:ed:79:ec:bc:7b:8c:13:05:d6:fd: c9:52:26:32:f4:4a:88:a3:f8:8b:f3:30:8a:bc:5c: 01:2f:07:72:02:84:a0:1d:27:47:16:8b:9c:d3:20: e4:cd:cf:35:44:f0:ef:d9:f5:9a:b0:05:36:c1:94: 0a:af:96:5d:ed:e1:d2:44:19:22:f3:3a:22:6f:b0: 70:bd:e5:d4:6e:fd:c7:a5:01:e2:7b:67:8f:3d:84: 3f:15:ab:89:97:68:a1:0d:5c:d1:7c:7b:fc:72:27: 44:17:f3:f6:e3:dc:79:9a:a4:07:72:44:8a:13:ed: 6d:2e:c3:19:b2:d2:9f:35:c6:b3:9a:3c:b1:1b:9c: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:12:7C:22:E6:0B:B5:8E:9C:35:51:0E:52:1D:37:EC:17:08:21 X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:9d:b0:7a:6e:da:d3:6e:0f:08:13:80:0f:2e:74:14:da: 27:22:7f:5a:01:09:68:9f:c5:fd:7d:93:3a:e1:c2:01:f4:d3: fd:3b:48:04:a0:80:4c:0f:83:fe:4c:22:f4:d5:5e:dc:e7:30: 78:8f:45:1a:2c:78:1e:f2:b7:ec:7a:75:40:37:39:45:4d:09: c7:d2:ad:d4:8a:04:f0:81:ce:b1:d4:c9:4a:e8:46:2c:7d:2a: 1a:ba:49:b4:c0:b5:2f:8b:4a:b5:eb:63:a1:71:34:f2:ec:9f: 71:77:c2:ea:16:fd:fb:9c:a0:70:75:5b:56:74:f7:9c:2d:b4: 27:86:28:d3:95:09:7e:c3:61:01:68:ea:a5:25:42:23:1a:d4: 01:d6:95:fa:7e:5a:2f:da:57:2f:5f:45:ee:f0:a5:a8:10:84: 68:37:6e:a1:43:c3:7c:9a:d6:f1:f3:26:b2:f0:b0:cc:8b:8d: 38:aa:30:1a:73:c8:d6:46:40:ef:5d:54:bd:ad:d3:c6:91:67: 07:db:43:34:29:09:ab:00:16:1f:57:51:b7:ed:d1:d5:67:1f: b4:4f:8d:b6:d8:81:5a:91:8d:4d:d0:46:c4:21:31:4a:57:a7: f3:2f:c6:c6:37:3f:5d:26:a2:7a:78:8a:43:63:04:8f:e8:1c: ed:42:8b:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjQxMTIwMjM1NzI3WhcNMjQxMTI3MjM1NzI3WjAYMRYwFAYD VQQDEw02NzNlNzc2Ny00ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fgsCZGr3aT6zdKEGVI1CNNwij6ptYdSjXqViKmymyfzKkje8FYCw5eOBdIi hQhvI/Ff1C9Of7lL1CK9ydTMHzMJKO7VPjovgo1NERUBHTJaFOaPTP5e3hix2tY0 qC0akMJ0pE7lvIFVlQDwqr0mJtUUasXnkW9Y9pIDxe157Lx7jBMF1v3JUiYy9EqI o/iL8zCKvFwBLwdyAoSgHSdHFouc0yDkzc81RPDv2fWasAU2wZQKr5Zd7eHSRBki 8zoib7BwveXUbv3HpQHie2ePPYQ/FauJl2ihDVzRfHv8cidEF/P249x5mqQHckSK E+1tLsMZstKfNcazmjyxG5z/8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyBEnwi 5gu1jpw1UQ5SHTfsFwghMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM5Z2wem7a024PCBOADy50FNonIn9aAQlon8X9fZM64cIB9NP9O0gE oIBMD4P+TCL01V7c5zB4j0UaLHge8rfsenVANzlFTQnH0q3UigTwgc6x1MlK6EYs fSoaukm0wLUvi0q162OhcTTy7J9xd8LqFv37nKBwdVtWdPecLbQnhijTlQl+w2EB aOqlJUIjGtQB1pX6flov2lcvX0Xu8KWoEIRoN26hQ8N8mtbx8yay8LDMi404qjAa c8jWRkDvXVS9rdPGkWcH20M0KQmrABYfV1G37dHVZx+0T4222IFakY1N0EbEITFK V6fzL8bGNz9dJqJ6eIpDYwSP6BztQotj -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org