$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft File: QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json) Hash identifier: wSXMlM2R8O1bj9YoqBH+MNKfxCe0pBYlEPLn4OKblHs= Subject key identifier: AC:0C:1D:4A:F9:1F:89:5B:96:07:D5:5F:D6:98:18:90:21:DE:C4:E2 Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:37:56 +0000 Manifest this update: Wed 23 Oct 2024 06:37:56 +0000 Manifest next update: Wed 30 Oct 2024 06:37:56 +0000 Files and hashes: 1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: KJIX47mhsS1Tcvps1TllY4TpfrBQC6SEu4nsHl/r2nk=) 2: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: Uc6IvGFV1iQCfhkRq/qlgRwPJG6xeOo9MbTiUR3zcfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Validity Not Before: Oct 23 06:37:56 2024 GMT Not After : Oct 30 06:37:56 2024 GMT Subject: CN=671899c4-1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:4b:d4:fc:66:78:d4:3a:6f:48:2c:83:3f: 45:2f:61:03:a5:c3:e5:37:1d:46:ec:57:2f:b0:ca: 93:09:63:db:88:c1:9b:0b:80:82:40:88:39:de:69: 13:ca:71:4a:27:b5:e8:63:14:71:9f:bf:00:0f:23: 6e:69:a7:ba:d9:40:f7:0f:c7:76:4d:8d:cc:dd:57: b7:67:cb:e0:46:12:35:9e:2c:c6:90:fd:4c:51:4f: f2:8b:d9:23:cb:b1:1f:b6:ed:aa:d1:10:c4:b3:f2: ed:6b:a7:2e:cc:a8:3c:55:08:52:ad:22:b0:a3:4b: 1c:01:e8:cc:cb:62:6f:57:74:0a:ea:7e:0e:bc:1d: 39:55:fd:16:40:55:94:b6:d3:97:82:e7:37:09:a7: cb:d7:07:27:bf:f8:eb:24:ce:84:66:27:65:d0:40: f7:db:98:b8:55:c2:a7:72:05:d8:5d:b8:ed:b0:ed: 29:b8:bf:aa:8c:f0:2a:c5:0e:70:ce:4d:62:02:e5: e5:8f:a9:60:f1:f0:8d:94:83:0f:86:10:da:15:01: ee:4d:d8:0e:74:74:f1:2c:af:78:87:42:4f:d6:14: b7:df:14:8e:6b:ee:f1:60:9a:41:af:c9:2c:50:de: 2d:c9:9f:f5:28:71:49:ac:11:81:b8:b5:02:80:4d: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0C:1D:4A:F9:1F:89:5B:96:07:D5:5F:D6:98:18:90:21:DE:C4:E2 X509v3 Authority Key Identifier: keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:01:08:e0:16:4a:18:6a:53:d2:31:47:93:cc:f7:7a:6d: 76:79:f8:6e:64:3b:d5:e3:76:14:b5:36:e2:04:2e:94:76:92: e8:cb:c2:48:dd:54:7c:78:85:c1:59:3f:e8:45:5e:b5:87:0d: e2:31:c6:03:5c:0c:51:b6:14:76:2f:a8:92:14:1b:e2:45:1d: 2e:00:6f:df:3e:16:fc:8e:6b:e5:40:51:fb:28:d9:61:51:be: 36:b6:06:0c:21:27:3f:75:17:1f:3d:13:3b:dc:7e:22:f4:93: 17:8c:92:04:30:06:6e:e4:03:b4:27:48:f3:f4:7c:76:98:ae: 9d:4b:8e:ec:0a:dd:2f:35:cf:06:6e:49:9f:f3:91:b3:6e:b3: 85:0b:ec:f3:90:a7:bd:ca:74:6d:e9:d3:c6:9c:bf:62:01:08: 26:e3:2f:83:36:c5:51:54:3d:ea:4e:73:c8:72:2b:4e:56:8d: c4:ec:e6:b0:9c:31:3d:1a:2c:14:d0:d8:86:ef:bd:77:7a:bf: f1:70:d2:87:f5:f8:1c:03:c9:22:89:9d:7b:dc:22:7d:46:fd: 2b:d7:d8:e7:0e:55:45:30:90:02:fd:50:73:df:f0:74:32:9b: 7a:68:3c:c9:0c:c8:db:e2:36:ad:bd:33:b8:03:3f:fd:0b:bf: e3:22:79:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoNDJCQjBGM0MxODQ3RTY1OEJCRTQxNDE4NDk0Q0U4OUNF OEUzNDQ4ODAeFw0yNDEwMjMwNjM3NTZaFw0yNDEwMzAwNjM3NTZaMBgxFjAUBgNV BAMTDTY3MTg5OWM0LTFlMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMekvU/GZ41DpvSCyDP0UvYQOlw+U3HUbsVy+wypMJY9uIwZsLgIJAiDneaRPK cUontehjFHGfvwAPI25pp7rZQPcPx3ZNjczdV7dny+BGEjWeLMaQ/UxRT/KL2SPL sR+27arREMSz8u1rpy7MqDxVCFKtIrCjSxwB6MzLYm9XdArqfg68HTlV/RZAVZS2 05eC5zcJp8vXBye/+OskzoRmJ2XQQPfbmLhVwqdyBdhduO2w7Sm4v6qM8CrFDnDO TWIC5eWPqWDx8I2Ugw+GENoVAe5N2A50dPEsr3iHQk/WFLffFI5r7vFgmkGvySxQ 3i3Jn/UocUmsEYG4tQKATZy1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrAwdSvkf iVuWB9Vf1pgYkCHexOIwHwYDVR0jBBgwFoAUQrsPPBhH5li75BQYSUzonOjjRIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0IwNDkwOENFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyL1Fyc1BQQmhINWxpNzVCUVlTVXpvbk9qalJJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXJzUFBCaEg1bGk3NUJRWVNVem9uT2pqUklnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NTA2L0IwNDkwOENFNkVERTExRUZBQUMyQ0I1REM0RjlBRTAyL1Fyc1BQQmhINWxp NzVCUVlTVXpvbk9qalJJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEWnAQjgFkoYalPSMUeTzPd6bXZ5+G5kO9XjdhS1NuIELpR2kujLwkjd VHx4hcFZP+hFXrWHDeIxxgNcDFG2FHYvqJIUG+JFHS4Ab98+FvyOa+VAUfso2WFR vja2BgwhJz91Fx89EzvcfiL0kxeMkgQwBm7kA7QnSPP0fHaYrp1LjuwK3S81zwZu SZ/zkbNus4UL7POQp73KdG3p08acv2IBCCbjL4M2xVFUPepOc8hyK05WjcTs5rCc MT0aLBTQ2IbvvXd6v/Fw0of1+BwDySKJnXvcIn1G/SvX2OcOVUUwkAL9UHPf8HQy m3poPMkMyNviNq29M7gDP/0Lv+Miefs= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org