$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: t646nNzb+mTEstxo+0ccjdHXL1OwKoM7gbs31iyfTdU= Subject key identifier: 0D:C4:9B:F2:BD:17:31:92:47:A1:B0:E1:3B:32:37:3B:27:F2:75:0A Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0196 Signing time: Fri 22 Nov 2024 22:17:35 +0000 Manifest this update: Fri 22 Nov 2024 22:17:35 +0000 Manifest next update: Fri 29 Nov 2024 22:17:35 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: c7TnMqmzs6pQ9jyMXJ5ZORalZVMwYfDQ7zGCH/t/mWs=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: Ocok0YaJANXTvMflX7rHaTlDxzxA5eYlN+U42YstUOc=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: NlZGw5kxdJBiCylDN3iP3l9B8OoHi1F1b4+2lDwSRDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Nov 22 22:17:35 2024 GMT Not After : Nov 29 22:17:35 2024 GMT Subject: CN=674102ff-e89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:b3:5c:37:82:7d:f3:b9:3f:8a:2a:4d:e8: 12:dc:e9:d5:86:bb:1f:a2:ee:56:f7:96:36:17:8a: 76:6b:4e:34:d4:08:68:95:42:12:09:f0:bc:d9:88: 6b:06:25:16:19:cb:4b:b3:14:70:ba:3d:72:03:21: 4b:27:cf:a7:ba:1c:43:35:a3:ec:af:97:a0:4a:c0: 73:da:da:e6:32:51:e8:09:a4:b9:f1:ca:c2:11:2c: 45:e3:cc:54:b9:be:45:e0:f9:d1:a7:b9:5c:ec:9c: 69:92:d6:a6:d3:ca:6f:52:6b:1f:0f:b2:68:b0:d1: 3c:d2:e8:1c:7b:f8:b4:5c:4b:cb:8f:f4:b3:7d:c1: ac:e9:cd:61:06:39:d3:d5:da:54:47:aa:ac:c2:92: 1f:60:71:4e:31:1f:a0:b7:69:7f:7f:c4:c5:c3:f8: 61:99:83:60:38:6e:f3:8e:96:af:b3:f4:14:2d:98: fd:3c:ed:19:d3:99:04:02:a8:03:10:ca:d4:c7:cc: f6:9e:78:52:e5:cb:5f:44:4d:f5:d0:a1:b3:9d:82: d4:9f:bb:e1:d4:af:a6:4a:27:1d:55:99:ab:46:18: 82:d9:9f:3e:47:1a:22:2d:19:95:fb:e4:a6:8d:e9: da:d4:20:f0:49:5c:9b:51:55:6a:68:96:99:8a:66: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C4:9B:F2:BD:17:31:92:47:A1:B0:E1:3B:32:37:3B:27:F2:75:0A X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cc:39:f7:14:75:c1:99:e0:1f:fb:17:5e:28:98:97:81:1e: 62:1b:2b:b9:bd:49:d4:5a:d4:f3:22:f2:c8:d4:6f:be:2d:65: 1a:b6:3e:f9:d8:1f:09:4c:37:fa:ed:1f:b6:60:bc:2c:f5:c7: 38:dd:8c:7f:5a:a6:87:4f:59:0a:3a:98:90:44:51:2b:95:16: 8d:50:29:a0:fe:1c:97:51:e9:2e:38:d0:f6:29:ab:98:16:6a: 2e:62:bf:a8:1e:17:1b:6d:a1:92:47:14:f4:e5:a9:ff:71:87: 91:77:9a:76:a0:f1:e7:d1:94:ad:2b:33:ed:50:c9:3e:4d:56: c3:a8:6e:4b:7d:0d:00:c3:54:44:40:69:12:79:a7:71:5d:73: 8a:52:cf:6b:d2:90:fd:63:d2:90:34:27:34:7a:36:6b:6a:c9: af:33:b5:45:ae:ed:ba:fc:5b:86:fe:b3:80:05:1e:00:3e:c4: 23:58:69:1f:8c:93:d6:bb:e4:b0:ee:aa:14:eb:df:d3:33:9b: 64:1f:20:91:45:fd:92:cc:77:f0:d2:70:22:8d:37:45:79:af: 80:70:e4:d7:60:74:65:ab:80:11:f2:38:4a:f8:b0:ac:76:f0: e3:97:4f:43:44:49:ea:71:ce:cb:bc:40:15:ae:c1:5f:5c:08: 86:c8:c3:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjQxMTIyMjIxNzM1WhcNMjQxMTI5MjIxNzM1WjAYMRYwFAYD VQQDEw02NzQxMDJmZi1lODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eKzXDeCffO5P4oqTegS3OnVhrsfou5W95Y2F4p2a0401AholUISCfC82Yhr BiUWGctLsxRwuj1yAyFLJ8+nuhxDNaPsr5egSsBz2trmMlHoCaS58crCESxF48xU ub5F4PnRp7lc7Jxpktam08pvUmsfD7JosNE80ugce/i0XEvLj/SzfcGs6c1hBjnT 1dpUR6qswpIfYHFOMR+gt2l/f8TFw/hhmYNgOG7zjpavs/QULZj9PO0Z05kEAqgD EMrUx8z2nnhS5ctfRE310KGznYLUn7vh1K+mSicdVZmrRhiC2Z8+RxoiLRmV++Sm jena1CDwSVybUVVqaJaZimYFtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3Em/K9 FzGSR6Gw4TsyNzsn8nUKMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJzDn3FHXBmeAf+xdeKJiXgR5iGyu5vUnUWtTzIvLI1G++LWUatj75 2B8JTDf67R+2YLws9cc43Yx/WqaHT1kKOpiQRFErlRaNUCmg/hyXUekuOND2KauY FmouYr+oHhcbbaGSRxT05an/cYeRd5p2oPHn0ZStKzPtUMk+TVbDqG5LfQ0Aw1RE QGkSeadxXXOKUs9r0pD9Y9KQNCc0ejZrasmvM7VFru26/FuG/rOABR4APsQjWGkf jJPWu+Sw7qoU69/TM5tkHyCRRf2SzHfw0nAijTdFea+AcOTXYHRlq4AR8jhK+LCs dvDjl09DREnqcc7LvEAVrsFfXAiGyMPQ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org