$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: ZtfLeFb1lTIA6LH/2AhBPjI/zSCKVjCPW3Uxgg4xdVM= Subject key identifier: 7B:05:1B:C6:76:A2:A3:0A:DD:61:8D:12:93:5F:67:F6:06:80:22:28 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: 17 Signing time: Wed 23 Oct 2024 06:41:17 +0000 Manifest this update: Wed 23 Oct 2024 06:41:17 +0000 Manifest next update: Wed 30 Oct 2024 06:41:17 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: 2tcO/+ot3lHFhINAu9h0dGVGIr8Ik7dVCzlz+IXHGys=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Oct 23 06:41:17 2024 GMT Not After : Oct 30 06:41:17 2024 GMT Subject: CN=67189a8d-fca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:5f:c5:9e:66:66:26:1a:de:d2:49:7b:16: 28:4b:cf:28:98:d0:4d:e0:b7:5b:be:c2:d5:1e:fc: 7a:1d:5a:f9:57:36:b9:8c:c7:97:bf:e4:4f:91:ff: 52:e9:2b:76:a2:5c:ce:f2:64:33:0f:28:24:6f:bd: 24:d8:51:fb:65:48:c8:9e:f4:9d:0a:89:46:13:e2: b8:02:e1:1d:1d:d9:4c:d6:89:31:f9:03:1e:36:38: d2:9e:9f:01:7c:48:ad:ed:74:10:1a:6b:6a:69:d8: c7:8b:34:8c:49:45:c1:8b:e3:d1:78:03:db:58:2c: 26:f0:17:5d:1a:e3:90:52:97:3d:91:36:ea:f7:70: 03:1b:1f:4a:c6:07:79:05:ce:7f:a7:04:96:74:cb: 48:26:47:32:a1:ea:0a:c9:77:be:b1:a5:a0:21:ae: 4c:fe:0e:e2:d6:c9:f6:08:7a:f9:d1:33:57:6d:34: 5b:56:4f:4b:0e:bb:0a:7a:22:b3:47:e1:ce:4f:dc: 32:c2:cb:b2:ea:0f:b9:d1:5e:2b:6a:fb:d2:fe:d6: f4:ec:ad:8a:29:0c:d0:27:e6:06:4c:9f:9f:02:99: f7:05:72:9a:56:55:82:8e:43:38:52:a8:0d:17:f2: f1:27:8c:63:fd:ae:78:98:74:46:13:52:e8:f9:f1: cf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:05:1B:C6:76:A2:A3:0A:DD:61:8D:12:93:5F:67:F6:06:80:22:28 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:22:2b:27:56:e2:47:cb:01:e2:39:9e:ff:c0:de:c6:d9: 30:9e:69:a9:6e:5e:a8:50:1f:09:65:62:33:d1:ad:f3:2e:97: 59:98:83:b2:a4:c8:ae:c2:28:69:99:cb:15:6d:d5:a2:73:59: 37:9f:23:2c:05:4e:79:cb:17:52:61:f7:c6:6f:e0:43:bc:c9: d7:36:60:9e:2d:7c:20:9b:aa:f1:02:f1:76:7e:28:2d:f2:4b: 32:fc:68:88:fc:57:62:19:d1:1e:a2:c2:b5:1d:ba:9c:51:e5: a3:71:a4:d8:f9:34:08:29:85:26:8b:d7:1c:09:7a:68:cf:30: 67:56:c9:9d:68:ff:cd:c9:6b:87:4b:9e:5c:9a:63:60:db:21: c0:aa:bd:d8:0f:8c:6d:0c:21:e4:81:d2:3a:ca:64:09:6b:c0: 03:57:53:73:b1:de:f9:a6:b8:55:a3:86:13:c8:fc:16:8b:12: 1a:18:89:22:72:44:e2:fb:05:36:8d:a9:c3:3b:0b:70:d3:26: da:cf:b7:f7:4c:5b:4a:90:28:fa:04:3e:0b:b3:8a:15:c6:52: b8:f1:8e:fb:16:e7:e1:2c:8a:d6:7a:01:9d:3f:c4:30:c2:c3: 0c:15:ca:b4:49:b5:04:07:40:c3:05:f6:ac:d5:71:9e:ea:40: a9:e2:24:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDQzNjExMC8GA1UEBRMoNDJDMkNCQTQ3RkFEMzg5RkQxOEI2MUNBRTIyNDcyRDYx RTBFQTg5NjAeFw0yNDEwMjMwNjQxMTdaFw0yNDEwMzAwNjQxMTdaMBgxFjAUBgNV BAMTDTY3MTg5YThkLWZjYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+i1/FnmZmJhre0kl7FihLzyiY0E3gt1u+wtUe/HodWvlXNrmMx5e/5E+R/1Lp K3aiXM7yZDMPKCRvvSTYUftlSMie9J0KiUYT4rgC4R0d2UzWiTH5Ax42ONKenwF8 SK3tdBAaa2pp2MeLNIxJRcGL49F4A9tYLCbwF10a45BSlz2RNur3cAMbH0rGB3kF zn+nBJZ0y0gmRzKh6grJd76xpaAhrkz+DuLWyfYIevnRM1dtNFtWT0sOuwp6IrNH 4c5P3DLCy7LqD7nRXitq+9L+1vTsrYopDNAn5gZMn58CmfcFcppWVYKOQzhSqA0X 8vEnjGP9rniYdEYTUuj58c8rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUewUbxnai owrdYY0Sk19n9gaAIigwHwYDVR0jBBgwFoAUQsLLpH+tOJ/Ri2HK4iRy1h4OqJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNDM2LzE1NjFCRURFNzY1 NzExRUY4QkZDN0ExMUM0RjlBRTAyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXNMTHBILXRPSl9SaTJISzRpUnkxaDRPcUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NDM2LzE1NjFCRURFNzY1NzExRUY4QkZDN0ExMUM0RjlBRTAyL1FzTExwSC10T0pf UmkySEs0aVJ5MWg0T3FKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlOIisnVuJHywHiOZ7/wN7G2TCeaaluXqhQHwllYjPRrfMul1mYg7Kk yK7CKGmZyxVt1aJzWTefIywFTnnLF1Jh98Zv4EO8ydc2YJ4tfCCbqvEC8XZ+KC3y SzL8aIj8V2IZ0R6iwrUdupxR5aNxpNj5NAgphSaL1xwJemjPMGdWyZ1o/83Ja4dL nlyaY2DbIcCqvdgPjG0MIeSB0jrKZAlrwANXU3Ox3vmmuFWjhhPI/BaLEhoYiSJy ROL7BTaNqcM7C3DTJtrPt/dMW0qQKPoEPguzihXGUrjxjvsW5+EsitZ6AZ0/xDDC wwwVyrRJtQQHQMMF9qzVcZ7qQKniJPY= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:19 2024 by rpki-client on console-fra.rpki-client.org