$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: zlLrtP1Dx6fMt94S+RRTiJYsjTYXMgn+wy3SW1+HOdo= Subject key identifier: 05:1F:52:24:95:54:26:55:98:A5:BA:F1:3D:62:8B:50:F9:83:0B:C3 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 11 Signing time: Wed 25 Dec 2024 06:05:49 +0000 Manifest this update: Wed 25 Dec 2024 06:05:48 +0000 Manifest next update: Wed 01 Jan 2025 06:05:48 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: eepNP+lqY/XIyKb29LfsIdkB/DtqbsF7/GbmDp74W9Y=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Dec 25 06:05:48 2024 GMT Not After : Jan 1 06:05:48 2025 GMT Subject: CN=676ba0bc-d9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:67:01:43:a5:91:f2:75:ff:ff:f1:16:ac: 54:91:ab:bb:fe:0e:77:9a:0f:76:ae:0d:69:6d:8c: 79:f4:32:93:96:13:1a:be:8b:a1:1d:22:b5:86:93: 7f:e8:fd:32:8b:15:91:a0:0e:c0:6c:d4:20:f6:bf: c7:15:86:31:af:18:16:76:4d:08:f2:d2:56:c4:e2: 2d:7d:62:45:e2:55:48:f4:1e:91:dc:59:1c:73:08: 34:2a:ff:45:24:c6:d2:f7:5a:db:91:6d:ad:53:fa: 01:2e:b0:4a:7b:b2:80:58:bd:04:07:e3:31:54:05: 4b:54:0b:41:11:04:6a:cb:20:25:1f:3d:32:d1:69: 05:f2:42:4d:44:a4:0d:27:69:a2:c4:2a:b6:4d:15: d6:5a:49:82:83:77:59:a6:19:51:78:bf:3b:17:55: 5f:fa:0f:84:e1:42:3c:1c:7a:62:2b:12:2a:74:75: c1:da:8d:29:c3:4b:a4:7e:3f:ec:1c:3d:3f:52:6c: 14:0d:90:77:79:0d:6e:2b:a2:73:48:85:22:2a:ad: b4:de:71:0b:13:38:75:ad:d8:5e:81:2d:70:02:0c: b0:d6:7d:cc:8e:43:a1:ca:ea:d9:39:a7:6c:68:c6: 8e:da:fe:a4:a1:99:2a:6b:d8:c3:ec:57:6e:bc:cd: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1F:52:24:95:54:26:55:98:A5:BA:F1:3D:62:8B:50:F9:83:0B:C3 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e4:fc:4b:86:0d:89:ff:53:76:61:94:c1:7f:8d:2b:c8:14: d5:61:37:9f:46:f1:18:26:5f:f8:f0:08:1f:f3:82:4b:7e:00: 7b:49:e0:10:49:90:33:cf:a5:50:2b:ef:61:64:ee:cc:b6:bf: 37:f6:3e:c8:32:a1:fa:09:43:ff:af:12:c1:fb:e1:24:fd:be: ec:2f:36:ff:95:c7:57:c1:3c:6c:d6:79:74:ad:21:76:c9:cb: 20:07:94:1d:d7:0d:54:2c:a8:e3:77:04:5e:cb:7d:b7:fd:a4: aa:53:df:a9:dc:63:cf:0a:4e:28:e4:c6:3a:7c:f3:91:ab:ea: 16:87:3c:a1:d8:95:9b:9b:f5:c1:1f:6b:38:b1:cd:e1:89:50: ee:35:14:4d:15:90:1a:b6:59:c6:37:fb:7b:32:2f:ad:ff:db: 77:6c:de:50:11:6a:43:e0:9a:b3:5c:e4:11:0d:19:27:8d:2b: 7a:9d:04:30:27:83:77:10:2a:2d:a6:7d:89:bc:79:d0:52:80: fd:05:dd:12:2a:46:63:16:75:91:9d:1d:a1:51:2a:1b:ce:f0: fb:cc:2a:a2:69:e9:79:3e:64:9e:11:06:74:40:cc:76:27:98: 9e:a2:e9:81:c7:20:5e:e2:83:a6:fe:25:14:15:a7:4a:f9:1a: 7c:0b:fd:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNDEyMjUwNjA1NDhaFw0yNTAxMDEwNjA1NDhaMBgxFjAUBgNV BAMTDTY3NmJhMGJjLWQ5ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+NGcBQ6WR8nX///EWrFSRq7v+DneaD3auDWltjHn0MpOWExq+i6EdIrWGk3/o /TKLFZGgDsBs1CD2v8cVhjGvGBZ2TQjy0lbE4i19YkXiVUj0HpHcWRxzCDQq/0Uk xtL3WtuRba1T+gEusEp7soBYvQQH4zFUBUtUC0ERBGrLICUfPTLRaQXyQk1EpA0n aaLEKrZNFdZaSYKDd1mmGVF4vzsXVV/6D4ThQjwcemIrEip0dcHajSnDS6R+P+wc PT9SbBQNkHd5DW4ronNIhSIqrbTecQsTOHWt2F6BLXACDLDWfcyOQ6HK6tk5p2xo xo7a/qShmSpr2MPsV268zTJzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBR9SJJVU JlWYpbrxPWKLUPmDC8MwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7k/EuGDYn/U3ZhlMF/jSvIFNVhN59G8RgmX/jwCB/zgkt+AHtJ4BBJ kDPPpVAr72Fk7sy2vzf2PsgyofoJQ/+vEsH74ST9vuwvNv+Vx1fBPGzWeXStIXbJ yyAHlB3XDVQsqON3BF7Lfbf9pKpT36ncY88KTijkxjp885Gr6haHPKHYlZub9cEf azixzeGJUO41FE0VkBq2WcY3+3syL63/23ds3lARakPgmrNc5BENGSeNK3qdBDAn g3cQKi2mfYm8edBSgP0F3RIqRmMWdZGdHaFRKhvO8PvMKqJp6Xk+ZJ4RBnRAzHYn mJ6i6YHHIF7ig6b+JRQVp0r5GnwL/Ws= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:12 2024 by rpki-client on console-fra.rpki-client.org