$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: 6hTC9h1Zh8wIQRGLK6wZH67bNQgKRZCLBGg2dwN1TN8= Subject key identifier: 87:7D:4F:D8:39:47:1E:0F:DF:31:B9:B1:D2:29:CB:E6:A2:98:5B:25 Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1C05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1BE1 Signing time: Tue 26 Nov 2024 16:14:05 +0000 Manifest this update: Tue 26 Nov 2024 16:14:05 +0000 Manifest next update: Tue 03 Dec 2024 16:14:05 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: 0dwJbgZFTZPV3EDxxyUoFg4lPMm5gSFF2CqrhLhin7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 16:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7173 (0x1c05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: Nov 26 16:14:05 2024 GMT Not After : Dec 3 16:14:05 2024 GMT Subject: CN=6745f3cd-7fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:67:52:a1:e9:c2:7a:0e:14:0c:47:63:08: 4a:34:f3:18:da:40:17:4d:25:74:05:62:01:c5:85: 5a:16:74:97:ad:f4:64:7e:c1:6f:40:c0:a6:25:d6: 5b:c6:50:41:44:0a:69:19:73:cb:8d:da:a4:46:30: 32:8b:63:b4:7d:09:eb:cc:2b:51:b4:6b:8f:09:67: e4:ea:f5:b7:70:cf:b6:9f:07:4b:8c:b8:0c:3e:83: e8:ad:6f:82:43:ff:f5:52:cd:95:98:47:36:92:ff: 97:c8:0b:84:00:6d:a8:e6:57:77:73:1a:97:97:a0: 3b:c0:72:b3:f4:67:9d:68:c4:59:c0:39:17:ab:46: ad:5b:15:36:b4:03:27:6d:4a:cf:57:7d:18:92:d1: cc:8d:15:d3:19:98:53:dd:f5:65:fd:7c:2e:1f:d8: c2:e7:93:f6:1b:16:65:d7:8b:c2:e3:26:42:e1:9d: 3d:b0:e9:f7:6a:e5:94:c4:ad:9f:ff:67:48:0e:25: 3e:85:7b:cd:79:0f:02:b4:e6:f8:47:93:a6:42:6f: e0:f5:07:21:18:03:51:e8:01:41:dd:5c:dd:3c:d6: ee:18:09:fd:45:47:37:cb:ed:dc:59:35:7b:a4:1b: a5:84:e0:d8:da:1d:46:38:dc:f3:5a:c2:9d:3f:15: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:4F:D8:39:47:1E:0F:DF:31:B9:B1:D2:29:CB:E6:A2:98:5B:25 X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:88:df:2d:09:59:14:cb:d0:5f:54:13:5f:e4:ce:c1:c9:6a: 9b:99:27:7a:31:13:09:1c:28:cd:9f:e0:f2:dd:70:27:16:db: 0a:b3:76:d0:6e:b1:12:14:a8:2f:ab:07:28:ce:28:74:62:ce: 71:36:62:fa:f0:07:d5:a3:e8:e7:9d:ed:a3:13:92:50:be:0d: eb:78:ef:3f:cd:44:25:1f:39:cc:b5:49:1f:3c:00:44:39:61: e7:55:7e:b3:50:23:cb:56:b4:35:f3:2e:8e:ca:0c:37:fa:a1: 4c:9a:fe:46:86:93:60:ff:ed:1a:3a:68:2b:5a:40:19:64:4f: 0a:d3:7d:6a:50:fa:45:9b:e4:b0:9a:a0:c3:75:2d:06:b7:69: 33:f2:6d:7a:5c:77:4f:49:e9:0c:42:af:89:32:39:c3:02:76: ef:c7:9f:1c:56:7b:ad:ae:6b:ed:71:28:d3:0f:a7:b2:07:c2: 13:ab:7c:c5:5c:26:36:0a:05:aa:4d:0f:2e:ea:99:93:ae:3d: 91:7a:f1:6e:4d:f3:fc:1f:36:a7:03:63:b9:8b:57:f1:c2:5c: c1:ae:29:6a:d3:3c:2a:8c:f9:c6:a0:ce:ab:d9:4c:bf:e4:04: 0f:1f:57:bb:11:3d:3f:98:b1:65:50:40:31:67:0c:1e:39:26: 97:7a:12:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjQxMTI2MTYxNDA1WhcNMjQxMjAzMTYxNDA1WjAYMRYwFAYD VQQDEw02NzQ1ZjNjZC03ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCxnUqHpwnoOFAxHYwhKNPMY2kAXTSV0BWIBxYVaFnSXrfRkfsFvQMCmJdZb xlBBRAppGXPLjdqkRjAyi2O0fQnrzCtRtGuPCWfk6vW3cM+2nwdLjLgMPoPorW+C Q//1Us2VmEc2kv+XyAuEAG2o5ld3cxqXl6A7wHKz9GedaMRZwDkXq0atWxU2tAMn bUrPV30YktHMjRXTGZhT3fVl/XwuH9jC55P2GxZl14vC4yZC4Z09sOn3auWUxK2f /2dIDiU+hXvNeQ8CtOb4R5OmQm/g9QchGANR6AFB3VzdPNbuGAn9RUc3y+3cWTV7 pBulhODY2h1GONzzWsKdPxWQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId9T9g5 Rx4P3zG5sdIpy+aimFslMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNiN8tCVkUy9BfVBNf5M7ByWqbmSd6MRMJHCjNn+Dy3XAnFtsKs3bQ brESFKgvqwcozih0Ys5xNmL68AfVo+jnne2jE5JQvg3reO8/zUQlHznMtUkfPABE OWHnVX6zUCPLVrQ18y6Oygw3+qFMmv5GhpNg/+0aOmgrWkAZZE8K031qUPpFm+Sw mqDDdS0Gt2kz8m16XHdPSekMQq+JMjnDAnbvx58cVnutrmvtcSjTD6eyB8ITq3zF XCY2CgWqTQ8u6pmTrj2RevFuTfP8HzanA2O5i1fxwlzBrilq0zwqjPnGoM6r2Uy/ 5AQPH1e7ET0/mLFlUEAxZwweOSaXehLj -----END CERTIFICATE-----Generated at Tue Nov 26 17:19:22 2024 by rpki-client on console-fra.rpki-client.org