$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: wt8WaNMqK5dMdo5f1zHUUBD5Sl3+U40mz+SAH+t1usg= Subject key identifier: EC:FD:61:9E:BC:E2:0C:56:9C:08:D0:9F:1F:A6:FE:96:C5:E3:A1:C5 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 0692 Signing time: Fri 22 Nov 2024 21:48:47 +0000 Manifest this update: Fri 22 Nov 2024 21:48:47 +0000 Manifest next update: Fri 29 Nov 2024 21:48:47 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: quimmSDcekXveIfl+hjL9sak8EpeSxYuZ9zyXRag7m0=) 2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: Nov 22 21:48:47 2024 GMT Not After : Nov 29 21:48:47 2024 GMT Subject: CN=6740fc3f-0c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:a0:01:47:b7:81:a5:74:2a:9c:04:94:20: ad:97:75:75:5c:c0:bf:5b:16:6f:fe:8b:d4:f4:5f: 04:aa:01:a7:3c:32:c5:3e:62:30:de:ad:31:f3:49: fd:50:97:62:16:c9:17:dc:c8:d7:8f:e0:0b:38:e8: 52:35:a0:d6:29:de:3d:c6:45:45:2b:24:76:e3:d3: 83:05:5a:e5:32:25:ff:12:cf:58:cd:1c:a1:32:25: 97:1a:c4:04:7c:2b:44:cf:35:63:46:86:c2:87:bc: d1:f5:c1:7f:6e:8a:e7:b0:ef:e8:2c:7e:3e:f1:82: 5b:7f:4b:b1:29:b1:d8:c4:13:30:6c:74:f0:27:09: e6:d3:f2:e9:18:ee:a1:ba:90:a8:45:75:93:20:be: be:bb:d6:7c:88:cc:95:6d:c6:29:d1:27:db:cc:06: 8d:76:8a:34:da:54:33:cc:76:20:f3:cc:4a:58:87: d7:61:5a:f8:5f:b1:19:d3:e7:01:3f:e4:d2:b6:13: 61:59:82:dd:33:8d:c1:49:00:a5:6c:de:c2:26:d7: 56:24:e0:5f:32:e3:9c:2a:d8:3a:78:53:5a:b6:f4: e8:86:38:51:4d:0f:43:d4:ea:ef:18:13:38:53:c1: f3:c3:20:f3:af:df:ff:c6:17:b0:b7:04:d2:b2:f3: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:61:9E:BC:E2:0C:56:9C:08:D0:9F:1F:A6:FE:96:C5:E3:A1:C5 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:86:c9:bf:7c:26:b4:49:a7:02:9d:3a:fd:d5:2e:7a:08:b4: 37:e5:65:7c:81:bb:2d:23:96:d4:76:31:fc:80:b5:2e:1b:1d: 20:21:fe:d3:8b:3a:d3:df:70:5c:01:8a:00:75:95:5e:21:0e: 07:16:10:e4:ff:e6:72:bb:b9:be:01:c8:db:3e:04:50:2f:af: 33:de:3d:f5:65:9c:27:62:51:89:52:f2:92:5f:42:e4:96:97: 41:8f:64:c2:dd:f2:2b:a4:eb:f0:13:d6:42:e9:77:8f:1e:4b: 17:64:cc:33:e9:f7:60:50:b2:aa:39:0b:71:da:13:21:03:61: 56:88:9c:a6:13:51:fc:f4:a0:61:47:f6:51:6b:00:00:47:3a: 50:7b:64:5c:98:38:cf:1d:64:88:1f:b1:05:64:00:d4:6a:dd: a1:da:77:8b:22:65:7a:a6:c0:2e:0a:f4:d9:14:86:c6:dc:9e: 47:df:3e:1f:8b:59:62:dc:cf:ef:8d:c4:72:85:2c:39:c1:27: d9:8f:fa:8d:f5:30:b2:a1:0d:0c:ae:7c:39:8b:5a:b1:ec:16: 6b:00:72:e5:7d:b7:71:3e:9e:05:fe:07:fc:91:fc:c4:5d:57: 08:63:9d:ad:b1:19:61:a5:cf:5f:85:d2:6f:0d:26:31:11:b0: 92:23:03:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjQxMTIyMjE0ODQ3WhcNMjQxMTI5MjE0ODQ3WjAYMRYwFAYD VQQDEw02NzQwZmMzZi0wYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJSgAUe3gaV0KpwElCCtl3V1XMC/WxZv/ovU9F8EqgGnPDLFPmIw3q0x80n9 UJdiFskX3MjXj+ALOOhSNaDWKd49xkVFKyR249ODBVrlMiX/Es9YzRyhMiWXGsQE fCtEzzVjRobCh7zR9cF/bornsO/oLH4+8YJbf0uxKbHYxBMwbHTwJwnm0/LpGO6h upCoRXWTIL6+u9Z8iMyVbcYp0SfbzAaNdoo02lQzzHYg88xKWIfXYVr4X7EZ0+cB P+TSthNhWYLdM43BSQClbN7CJtdWJOBfMuOcKtg6eFNatvTohjhRTQ9D1OrvGBM4 U8HzwyDzr9//xhewtwTSsvN+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz9YZ68 4gxWnAjQnx+m/pbF46HFMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbhsm/fCa0SacCnTr91S56CLQ35WV8gbstI5bUdjH8gLUuGx0gIf7T izrT33BcAYoAdZVeIQ4HFhDk/+Zyu7m+AcjbPgRQL68z3j31ZZwnYlGJUvKSX0Lk lpdBj2TC3fIrpOvwE9ZC6XePHksXZMwz6fdgULKqOQtx2hMhA2FWiJymE1H89KBh R/ZRawAARzpQe2RcmDjPHWSIH7EFZADUat2h2neLImV6psAuCvTZFIbG3J5H3z4f i1li3M/vjcRyhSw5wSfZj/qN9TCyoQ0Mrnw5i1qx7BZrAHLlfbdxPp4F/gf8kfzE XVcIY52tsRlhpc9fhdJvDSYxEbCSIwPR -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org