$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: QmYAtMO/XIkB0EYLRCe+Km/0IZzsfu9adsD8WoWq5hA= Subject key identifier: 0E:3C:DC:01:6C:40:83:DB:34:33:25:58:20:AD:D6:34:16:31:3D:A1 Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0A6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0A5E Signing time: Fri 22 Nov 2024 19:29:04 +0000 Manifest this update: Fri 22 Nov 2024 19:29:03 +0000 Manifest next update: Fri 29 Nov 2024 19:29:03 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: xMQK5EBHhcosl0wx9QoFYONxiX/8x6bRdwbXeiWHrEU=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: pxog/yIpMcbu5UbqvnZZnyTuZUYnwnZ5KNWF5EBqQNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Nov 22 19:29:03 2024 GMT Not After : Nov 29 19:29:03 2024 GMT Subject: CN=6740db80-7486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:7d:1a:39:a7:64:85:c2:1d:79:e8:f0:71: c8:fd:61:55:90:58:ed:23:15:49:70:1f:b5:3f:3a: 2e:28:25:54:39:18:ab:ef:d8:15:90:ba:6f:4b:3e: ea:21:2f:dc:4c:fe:f2:98:59:b8:dc:5d:fc:f2:a2: 73:04:57:2c:a3:fa:ae:9f:a4:fe:63:86:3b:f8:48: d5:93:0a:ba:7f:f9:fb:81:9b:fd:93:d0:c3:bb:0f: 8e:e9:0d:5c:51:b5:68:4a:35:15:b4:a7:57:b5:63: c7:58:5d:33:2c:00:d2:64:9b:36:d6:0f:f3:03:60: 6e:e3:c6:62:12:92:9c:76:e0:71:91:b2:91:8e:04: aa:fe:b5:87:12:a7:79:0f:4f:2e:55:d2:11:bc:4c: db:ae:d1:86:5a:8d:f1:9c:32:fb:14:dd:3c:61:0d: e4:e2:38:92:36:df:b9:c5:94:22:b6:07:e9:9c:fa: b3:3b:13:1a:5f:64:4f:d9:69:5f:24:5a:df:2e:97: ae:3a:02:61:22:bb:44:2b:44:8a:98:f5:4b:35:81: c9:cf:75:21:22:a1:dd:5f:5d:8b:c9:08:8d:ba:c8: 70:71:7e:ed:a1:bf:55:89:c0:09:88:d9:8b:e9:c9: 12:8a:74:93:65:72:6a:57:51:0b:9a:f7:06:22:f5: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:DC:01:6C:40:83:DB:34:33:25:58:20:AD:D6:34:16:31:3D:A1 X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d8:b5:f3:b0:8f:e0:49:41:24:6b:91:d5:28:6b:6d:93:5c: 8e:44:cd:fd:88:ce:61:53:c2:98:15:7e:22:0c:60:e3:8a:72: f4:ff:b1:25:fd:25:2a:e3:76:59:94:e9:c5:77:ac:78:f5:ee: a3:cb:8a:c9:ca:ad:40:50:6b:fa:2c:29:00:5b:b0:b3:26:5b: b3:f8:5b:94:b6:d3:ca:c9:47:08:f8:ab:e2:eb:8d:dd:a5:7e: 91:ca:14:cb:e5:ec:f3:a0:a8:91:28:2c:7b:56:ff:6e:45:f2: db:c6:6c:0c:58:d7:04:35:cc:01:12:87:5b:af:a2:89:09:e1: aa:0e:65:df:1f:34:14:9a:41:71:15:28:7e:c8:3e:a8:02:79: c1:de:e8:d7:cb:a5:d9:20:74:73:e5:bc:ae:ce:2c:01:f0:ab: 7b:48:96:79:8d:7e:63:e0:da:41:ec:04:b2:80:54:09:16:a2: 17:99:2f:a5:0f:41:f3:c3:87:2e:a0:5b:5a:ad:ba:7c:2a:d9: 92:ac:47:76:40:24:d7:6d:80:ed:a3:2a:f8:00:47:87:e9:b2: b2:60:00:62:8b:ca:5c:cb:0a:7c:d0:dd:6f:c3:06:c2:01:17: f8:88:ee:85:1c:ef:4e:a6:ca:f2:df:1f:48:23:d8:b8:02:42: 45:d1:29:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjQxMTIyMTkyOTAzWhcNMjQxMTI5MTkyOTAzWjAYMRYwFAYD VQQDEw02NzQwZGI4MC03NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+p9GjmnZIXCHXno8HHI/WFVkFjtIxVJcB+1PzouKCVUORir79gVkLpvSz7q IS/cTP7ymFm43F388qJzBFcso/qun6T+Y4Y7+EjVkwq6f/n7gZv9k9DDuw+O6Q1c UbVoSjUVtKdXtWPHWF0zLADSZJs21g/zA2Bu48ZiEpKcduBxkbKRjgSq/rWHEqd5 D08uVdIRvEzbrtGGWo3xnDL7FN08YQ3k4jiSNt+5xZQitgfpnPqzOxMaX2RP2Wlf JFrfLpeuOgJhIrtEK0SKmPVLNYHJz3UhIqHdX12LyQiNushwcX7tob9VicAJiNmL 6ckSinSTZXJqV1ELmvcGIvU1AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA483AFs QIPbNDMlWCCt1jQWMT2hMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo2LXzsI/gSUEka5HVKGttk1yORM39iM5hU8KYFX4iDGDjinL0/7El /SUq43ZZlOnFd6x49e6jy4rJyq1AUGv6LCkAW7CzJluz+FuUttPKyUcI+Kvi643d pX6RyhTL5ezzoKiRKCx7Vv9uRfLbxmwMWNcENcwBEodbr6KJCeGqDmXfHzQUmkFx FSh+yD6oAnnB3ujXy6XZIHRz5byuziwB8Kt7SJZ5jX5j4NpB7ASygFQJFqIXmS+l D0Hzw4cuoFtarbp8KtmSrEd2QCTXbYDtoyr4AEeH6bKyYABii8pcywp80N1vwwbC ARf4iO6FHO9Opsry3x9II9i4AkJF0Snb -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org