$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft File: QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json) Hash identifier: bCXQ/c6/+U6AxlnKtV2E+ddwK6vczXw8mzIlhVTAsXw= Subject key identifier: 30:87:74:03:FB:F5:97:37:19:05:77:7A:2F:51:42:F3:12:B8:19:F7 Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft Manifest number: 29 Signing time: Mon 25 Nov 2024 05:41:05 +0000 Manifest this update: Mon 25 Nov 2024 05:41:05 +0000 Manifest next update: Mon 02 Dec 2024 05:41:05 +0000 Files and hashes: 1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: 2k93dDQ6T/KD+PNXPVEVfvsEnvVmC987NbmQlGcH4+Y=) 2: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: Uc6IvGFV1iQCfhkRq/qlgRwPJG6xeOo9MbTiUR3zcfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Validity Not Before: Nov 25 05:41:05 2024 GMT Not After : Dec 2 05:41:05 2024 GMT Subject: CN=67440df1-14d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:b9:e9:a9:73:99:77:b0:02:6a:e5:37:a9: ad:7b:7e:ed:b9:3f:66:6c:2e:92:e7:ea:da:7f:51: f7:80:7b:71:3b:8f:11:ef:3d:f2:b8:35:c8:7b:19: 6a:98:be:a3:64:4d:1f:d7:09:7c:c1:83:0c:ec:0f: 2d:be:6a:04:21:fe:a4:7c:aa:0b:37:58:d1:de:8b: 83:ff:2d:10:c5:3a:9c:2a:8a:a1:5e:ef:70:46:eb: 02:b9:11:a9:ff:9f:58:fc:4a:ba:9e:b7:3f:66:d1: 12:65:61:7a:b6:dd:35:71:95:34:b7:c3:c5:ce:37: 0f:5c:78:7d:2f:55:96:ca:94:e4:bc:33:f1:90:83: 87:41:17:8c:d7:9f:3c:0b:d0:cd:e7:09:e3:58:44: e6:17:37:49:69:c9:f6:6a:c8:59:d8:cd:89:17:c9: 74:b6:49:9e:ad:68:ca:7c:b9:ad:7b:46:6f:cf:43: ec:be:f9:c8:6d:bb:70:d7:e4:a5:b4:07:9a:13:ee: fa:96:3a:00:ab:f4:20:78:be:d0:86:86:a4:30:49: 29:4d:26:63:4e:e2:1c:56:a9:07:39:30:af:1a:2e: d2:f2:76:f9:fe:09:ab:6c:e2:39:2b:94:21:65:62: c3:df:39:fd:fd:62:88:a6:6c:72:bc:b4:87:a4:6f: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:87:74:03:FB:F5:97:37:19:05:77:7A:2F:51:42:F3:12:B8:19:F7 X509v3 Authority Key Identifier: keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b7:1d:0f:df:bc:0f:5d:05:8e:b9:e1:3d:6a:e4:24:0e:59: b3:33:70:e2:1c:c4:73:44:59:7c:37:23:a9:75:c8:89:38:ef: f4:be:84:1b:34:25:c6:df:c1:45:28:87:98:9a:4a:b5:61:4f: 7e:6b:55:ea:02:dd:2d:01:ae:42:41:8d:45:e9:0c:c1:3d:96: c6:2b:f9:e0:bc:d7:7f:d4:cb:1f:34:de:4b:96:80:33:f6:66: 71:63:e6:06:4a:0a:6d:90:2b:a1:11:c6:f4:4f:b0:ce:11:7d: 0a:ea:41:db:1f:45:41:d5:14:1f:27:ef:49:f1:ad:c2:7e:d0: 9b:3a:e6:cf:5c:e0:1b:1e:a5:a8:f3:f4:24:ae:b6:fd:6c:4c: 3c:9a:12:8c:79:69:65:fa:29:53:cc:08:c1:99:22:96:d4:40: c9:6b:f4:22:3a:dc:2a:67:4c:82:f7:03:1a:51:fd:83:eb:69: df:ff:68:4e:0c:8e:4e:b9:a8:ca:4e:11:11:f6:25:fd:a2:19: e0:29:69:96:c0:9f:66:4e:b3:11:d9:4b:81:35:da:26:d7:67: 53:58:b7:1d:0d:43:d4:0e:a9:17:fb:3b:46:20:d1:b2:58:43: bb:0a:f0:89:bd:29:a2:c8:e1:a7:03:30:d0:f5:28:0d:e6:28: e8:32:0a:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoNDJCQjBGM0MxODQ3RTY1OEJCRTQxNDE4NDk0Q0U4OUNF OEUzNDQ4ODAeFw0yNDExMjUwNTQxMDVaFw0yNDEyMDIwNTQxMDVaMBgxFjAUBgNV BAMTDTY3NDQwZGYxLTE0ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCad7npqXOZd7ACauU3qa17fu25P2ZsLpLn6tp/UfeAe3E7jxHvPfK4Nch7GWqY vqNkTR/XCXzBgwzsDy2+agQh/qR8qgs3WNHei4P/LRDFOpwqiqFe73BG6wK5Ean/ n1j8Srqetz9m0RJlYXq23TVxlTS3w8XONw9ceH0vVZbKlOS8M/GQg4dBF4zXnzwL 0M3nCeNYROYXN0lpyfZqyFnYzYkXyXS2SZ6taMp8ua17Rm/PQ+y++chtu3DX5KW0 B5oT7vqWOgCr9CB4vtCGhqQwSSlNJmNO4hxWqQc5MK8aLtLydvn+Cats4jkrlCFl YsPfOf39YoimbHK8tIekb4LhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMId0A/v1 lzcZBXd6L1FC8xK4GfcwHwYDVR0jBBgwFoAUQrsPPBhH5li75BQYSUzonOjjRIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0IwNDkwOENFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyL1Fyc1BQQmhINWxpNzVCUVlTVXpvbk9qalJJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXJzUFBCaEg1bGk3NUJRWVNVem9uT2pqUklnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NTA2L0IwNDkwOENFNkVERTExRUZBQUMyQ0I1REM0RjlBRTAyL1Fyc1BQQmhINWxp NzVCUVlTVXpvbk9qalJJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG63HQ/fvA9dBY654T1q5CQOWbMzcOIcxHNEWXw3I6l1yIk47/S+hBs0 JcbfwUUoh5iaSrVhT35rVeoC3S0BrkJBjUXpDME9lsYr+eC813/Uyx803kuWgDP2 ZnFj5gZKCm2QK6ERxvRPsM4RfQrqQdsfRUHVFB8n70nxrcJ+0Js65s9c4Bsepajz 9CSutv1sTDyaEox5aWX6KVPMCMGZIpbUQMlr9CI63CpnTIL3AxpR/YPrad//aE4M jk65qMpOERH2Jf2iGeApaZbAn2ZOsxHZS4E12ibXZ1NYtx0NQ9QOqRf7O0Yg0bJY Q7sK8Im9KaLI4acDMND1KA3mKOgyCs4= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:49 2024 by rpki-client on console-ams.rpki-client.org