$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: NDb+hkoFZ6To9pMAf2iERwCnRzNcDyWsJLDh3sIkqD8= Subject key identifier: CA:82:B3:04:9A:DA:14:B9:E3:CA:EC:F0:C1:22:14:18:E8:5E:2E:3E Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: 26 Signing time: Thu 21 Nov 2024 05:53:00 +0000 Manifest this update: Thu 21 Nov 2024 05:53:00 +0000 Manifest next update: Thu 28 Nov 2024 05:53:00 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: TGr6WWrJFLG0eKBTyFX5NavAQshCgW2jtZ4gTvbx9Xs=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Nov 21 05:53:00 2024 GMT Not After : Nov 28 05:53:00 2024 GMT Subject: CN=673ecabc-a7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:a4:1b:b7:79:9f:83:a9:f6:e0:47:ef:77: 56:8d:fd:76:44:56:d4:80:ac:8c:ea:4c:73:00:ed: 7f:c3:af:3f:3f:5c:23:47:aa:6d:4d:65:72:63:3c: f5:b9:25:3b:6e:b8:a4:40:bd:b3:6a:7c:34:d3:e9: 7e:c4:11:69:8a:32:c4:dc:42:aa:08:4b:2f:47:8b: cc:66:f9:5a:58:0e:e8:de:f9:cb:4a:18:0b:b6:63: 5e:26:26:ba:95:c9:07:43:99:9b:69:81:b7:8b:f6: cf:61:c6:9b:87:ac:93:b0:d3:eb:41:7b:eb:fd:d3: 58:c3:56:18:6a:73:1a:6b:34:26:f3:03:c1:8c:b3: 52:06:dc:75:c0:74:ba:24:0b:06:f4:5c:a0:a8:69: 07:2b:e8:2c:54:26:f0:ab:7e:e0:cd:cc:20:82:54: b9:f1:3e:6b:43:3f:02:b8:40:dd:10:1a:36:93:61: be:a0:a7:94:c2:d2:d2:55:f7:bf:bc:9e:80:12:52: de:6c:8e:4c:bc:53:2b:b8:f0:23:6c:0c:7c:fb:46: b4:5e:83:2c:a1:ba:e6:ca:b6:f2:73:b7:9b:1b:d3: 6b:26:b6:67:3d:ec:3c:93:38:d6:5f:68:91:fb:fd: 6a:49:b1:e0:51:70:2a:a0:07:00:15:c0:d4:78:28: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:82:B3:04:9A:DA:14:B9:E3:CA:EC:F0:C1:22:14:18:E8:5E:2E:3E X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ba:45:06:8f:b9:81:93:bf:8b:81:f2:5a:bc:15:f0:42:0d: d4:d4:18:3f:b8:dc:fd:ae:2e:f5:cf:ef:e2:07:a4:75:fc:01: 1e:59:20:af:4c:11:dd:aa:22:fe:7d:1d:42:32:f2:f6:94:b3: 51:2d:12:1c:0f:23:ac:e3:85:02:11:aa:a3:e5:13:96:08:f3: 35:9c:fe:f7:a0:79:4c:ef:93:d8:38:b1:e2:c7:fb:21:36:c3: 42:30:ff:84:7e:e1:36:90:d9:e5:7f:c8:cf:3a:97:e8:84:b4: 15:e0:c4:98:51:0f:59:a0:0e:52:f1:84:26:9f:7f:b0:57:8f: 20:63:74:6d:2e:ef:95:ee:bc:5d:23:c0:a1:8a:a8:c0:9e:d3: 92:4b:15:08:9b:f7:14:d1:da:60:8d:fe:52:f7:69:0d:f0:9d: a7:67:d3:f1:25:9d:5a:0b:5a:37:ad:c3:b9:91:82:ff:ac:5a: f0:76:0f:c6:d1:c7:6e:e4:de:c9:90:85:46:6d:98:be:df:67: 81:c2:f5:8b:b6:47:0f:3c:9d:25:8d:2f:f0:6c:36:58:8c:f8: 54:51:ff:5a:71:99:22:3f:e1:29:68:b6:74:10:8d:40:87:c7: 4c:3c:a1:58:05:aa:ed:f6:85:53:5d:73:61:b5:07:20:d1:98: 96:e2:c6:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDQzNjExMC8GA1UEBRMoNDJDMkNCQTQ3RkFEMzg5RkQxOEI2MUNBRTIyNDcyRDYx RTBFQTg5NjAeFw0yNDExMjEwNTUzMDBaFw0yNDExMjgwNTUzMDBaMBgxFjAUBgNV BAMTDTY3M2VjYWJjLWE3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTrKQbt3mfg6n24Efvd1aN/XZEVtSArIzqTHMA7X/Drz8/XCNHqm1NZXJjPPW5 JTtuuKRAvbNqfDTT6X7EEWmKMsTcQqoISy9Hi8xm+VpYDuje+ctKGAu2Y14mJrqV yQdDmZtpgbeL9s9hxpuHrJOw0+tBe+v901jDVhhqcxprNCbzA8GMs1IG3HXAdLok Cwb0XKCoaQcr6CxUJvCrfuDNzCCCVLnxPmtDPwK4QN0QGjaTYb6gp5TC0tJV97+8 noASUt5sjky8Uyu48CNsDHz7RrRegyyhuubKtvJzt5sb02smtmc97DyTONZfaJH7 /WpJseBRcCqgBwAVwNR4KA4FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyoKzBJra FLnjyuzwwSIUGOheLj4wHwYDVR0jBBgwFoAUQsLLpH+tOJ/Ri2HK4iRy1h4OqJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNDM2LzE1NjFCRURFNzY1 NzExRUY4QkZDN0ExMUM0RjlBRTAyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXNMTHBILXRPSl9SaTJISzRpUnkxaDRPcUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NDM2LzE1NjFCRURFNzY1NzExRUY4QkZDN0ExMUM0RjlBRTAyL1FzTExwSC10T0pf UmkySEs0aVJ5MWg0T3FKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHm6RQaPuYGTv4uB8lq8FfBCDdTUGD+43P2uLvXP7+IHpHX8AR5ZIK9M Ed2qIv59HUIy8vaUs1EtEhwPI6zjhQIRqqPlE5YI8zWc/vegeUzvk9g4seLH+yE2 w0Iw/4R+4TaQ2eV/yM86l+iEtBXgxJhRD1mgDlLxhCaff7BXjyBjdG0u75XuvF0j wKGKqMCe05JLFQib9xTR2mCN/lL3aQ3wnadn0/ElnVoLWjetw7mRgv+sWvB2D8bR x27k3smQhUZtmL7fZ4HC9Yu2Rw88nSWNL/BsNliM+FRR/1pxmSI/4SlotnQQjUCH x0w8oVgFqu32hVNdc2G1ByDRmJbixlo= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org