$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: tPaQm8yTUsElZQvYzBTFKAMQyifWDKZ8rw8juiDVeaA= Subject key identifier: 47:3C:36:F4:42:66:39:8A:BC:2E:F1:96:1D:37:D4:DC:75:4E:BC:FC Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 03F8 Signing time: Sun 24 Nov 2024 23:54:12 +0000 Manifest this update: Sun 24 Nov 2024 23:54:12 +0000 Manifest next update: Sun 01 Dec 2024 23:54:12 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: Vz4/oCmQ3VLcQJTbDrNbkP+51hm9RFNbXr4nNTn4mAw=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: BBjPZuth9y/c45Bak0At2ZjJGKm9wxuC946aQ8aMlsA=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: O0BcYyJsKcRiYGr2cjq8imow2Ta4XFCZ+PfIgeggNB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Nov 24 23:54:12 2024 GMT Not After : Dec 1 23:54:12 2024 GMT Subject: CN=6743bca4-d17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:b7:c9:ec:e5:be:2b:81:9d:c1:f8:47:9e: 01:92:ec:4c:8f:74:3f:62:67:dc:5f:48:d9:9d:96: 68:9b:57:98:ba:1f:d5:60:e2:a8:26:c5:25:b2:b9: 69:ce:fc:4c:6f:a5:7a:e8:cb:7b:31:49:63:29:20: 25:a1:0e:76:c5:3f:f0:a0:a2:20:31:10:53:a6:51: a1:b3:67:7b:23:45:9a:1d:fd:07:95:8f:c6:0e:02: 03:bf:1e:f9:f9:0a:99:8e:86:9e:8d:3f:12:69:38: e5:ca:ec:73:08:06:98:8f:82:d4:c8:2d:46:42:7b: 8e:bd:ab:e8:78:17:18:5d:59:4d:6f:c0:1c:44:ec: ed:58:43:53:f1:7b:24:cf:aa:7e:0c:31:36:4f:39: 5f:89:42:dc:47:37:c8:90:2c:94:0e:c6:54:3c:f4: f9:60:c3:58:ad:92:0c:80:73:ba:fe:d9:f3:17:af: 68:dc:d7:af:5c:2a:54:11:0a:4e:8a:5d:64:ec:d0: 94:3d:4e:9a:cc:4c:d8:58:12:72:d3:f3:ac:d7:e8: c5:47:84:43:64:98:4c:11:68:c0:14:7e:09:fc:4e: 1a:3a:9f:26:ae:80:1b:e1:4f:4b:0d:31:9b:fc:34: 66:a4:ef:93:15:7d:7a:1c:5a:4a:db:b4:4a:67:93: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3C:36:F4:42:66:39:8A:BC:2E:F1:96:1D:37:D4:DC:75:4E:BC:FC X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d9:4c:9a:aa:ae:3e:19:e9:a9:bf:b9:3e:04:9f:b1:6b:98: 09:3e:ca:20:30:78:bf:54:f3:e6:75:15:c6:93:16:a1:67:10: 95:65:f0:dd:3c:a1:e5:25:cc:06:a4:c1:68:45:77:62:5d:08: 1b:42:96:9a:66:23:07:0c:ec:49:58:5c:35:67:58:99:83:bc: 69:e7:d1:b8:e0:76:ee:1c:2f:4d:f4:44:a6:1b:78:3d:ea:33: a5:3a:8d:78:4b:47:13:42:8c:22:f6:62:58:8c:70:6e:e0:47: ce:0d:b7:74:4c:9c:6a:55:e6:c2:df:c2:e3:df:7e:cd:47:15: 9f:1c:7a:35:84:05:77:f5:44:f5:3c:ed:42:d4:79:e4:d2:41: 21:c5:b8:0b:80:4d:85:4c:bb:07:98:c1:34:26:ab:92:34:32: 81:9f:20:96:71:b4:fd:aa:32:27:04:7f:44:cf:ff:45:8e:2b: 75:89:f3:c4:3f:00:93:ec:d5:6f:a3:fc:5c:ed:36:c2:d1:a9: 88:f9:62:3d:1a:f6:a1:99:34:e2:e8:fd:2b:8a:d1:47:f2:8f: 43:76:d7:78:7b:72:a2:d1:f4:e5:b5:66:7d:d4:03:44:16:af: 1c:9b:ff:e0:a1:fe:84:49:62:46:1e:9f:62:19:44:f4:4a:53: 60:84:5e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjQxMTI0MjM1NDEyWhcNMjQxMjAxMjM1NDEyWjAYMRYwFAYD VQQDEw02NzQzYmNhNC1kMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/S3yezlviuBncH4R54BkuxMj3Q/YmfcX0jZnZZom1eYuh/VYOKoJsUlsrlp zvxMb6V66Mt7MUljKSAloQ52xT/woKIgMRBTplGhs2d7I0WaHf0HlY/GDgIDvx75 +QqZjoaejT8SaTjlyuxzCAaYj4LUyC1GQnuOvavoeBcYXVlNb8AcROztWENT8Xsk z6p+DDE2TzlfiULcRzfIkCyUDsZUPPT5YMNYrZIMgHO6/tnzF69o3NevXCpUEQpO il1k7NCUPU6azEzYWBJy0/Os1+jFR4RDZJhMEWjAFH4J/E4aOp8mroAb4U9LDTGb /DRmpO+TFX16HFpK27RKZ5OizQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc8NvRC ZjmKvC7xlh031Nx1Trz8MB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2Uyaqq4+Gempv7k+BJ+xa5gJPsogMHi/VPPmdRXGkxahZxCVZfDd PKHlJcwGpMFoRXdiXQgbQpaaZiMHDOxJWFw1Z1iZg7xp59G44HbuHC9N9ESmG3g9 6jOlOo14S0cTQowi9mJYjHBu4EfODbd0TJxqVebC38Lj337NRxWfHHo1hAV39UT1 PO1C1Hnk0kEhxbgLgE2FTLsHmME0JquSNDKBnyCWcbT9qjInBH9Ez/9Fjit1ifPE PwCT7NVvo/xc7TbC0amI+WI9GvahmTTi6P0ritFH8o9Ddtd4e3Ki0fTltWZ91ANE Fq8cm//gof6ESWJGHp9iGUT0SlNghF7y -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:27 2024 by rpki-client on console-fra.rpki-client.org