$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: QHaHicdTg/itET8DOrwl9DdT69gPJDFS9O+m/mPuZkI= Subject key identifier: 82:36:27:00:B8:EC:FA:5F:57:90:20:81:A6:28:D0:A3:54:74:73:19 Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: 7E Signing time: Thu 21 Nov 2024 04:53:10 +0000 Manifest this update: Thu 21 Nov 2024 04:53:09 +0000 Manifest next update: Thu 28 Nov 2024 04:53:09 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: 38gZOueQiV3K8MpaGTRbkA2Nb8DdEuv/dymwYL9Xt5s=) 2: 47142068221311EFB680F113C4F9AE02.roa (hash: Wz7+GyEz4KEH5axb8P5kr/PKoJv9dBdTnqoEdl36Fic=) 3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: u90GvXDC2nj38gPxwI7H6zVq1FrynP/V/Ah+aJjG8F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Nov 21 04:53:09 2024 GMT Not After : Nov 28 04:53:09 2024 GMT Subject: CN=673ebcb5-768d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:c7:1a:4a:bc:f3:d0:41:10:48:b8:3d:a6: e2:e9:44:3a:72:2b:0e:56:c3:3c:39:e9:9d:6b:af: 21:12:d2:12:80:d1:14:10:c7:77:50:fe:4b:45:a9: 68:ec:33:b8:a7:48:fb:18:46:fd:a4:79:c8:32:a3: 2d:7d:1c:18:fd:9e:d0:19:d0:69:aa:fc:33:08:a3: 55:64:fe:c6:5b:6f:95:a6:e3:4e:ea:9c:a4:0b:6f: 06:cb:42:01:04:ca:78:35:28:4c:40:f5:e1:f5:b3: 9d:3b:73:3b:d4:e3:d2:b7:38:d2:ef:4a:53:2d:41: cd:8b:77:a2:e2:8f:7e:f1:f2:65:5f:79:7a:2d:fc: 6e:b3:a7:30:16:35:ed:96:0c:ea:d7:19:6f:c7:c9: 95:0d:cf:bd:35:05:78:ec:a7:98:72:95:96:e0:ee: 49:e1:cc:c3:f0:d3:b7:d6:f1:3b:f2:7e:e4:e1:d1: 8b:91:ff:9d:0c:38:7a:e4:86:ae:a0:6a:7f:66:c0: 0d:a4:2e:de:fa:11:06:ea:b3:ec:f9:89:f6:56:b1: f6:f8:bf:24:24:a7:e9:e3:05:d7:b9:1e:3c:c6:a1: 7d:3c:b8:e6:b5:d8:64:06:bd:ee:7c:73:be:5c:c9: 49:9d:68:63:6e:c0:07:64:e4:7b:9f:42:0a:37:79: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:36:27:00:B8:EC:FA:5F:57:90:20:81:A6:28:D0:A3:54:74:73:19 X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b0:45:06:47:07:47:8b:8f:3a:86:c1:e5:5c:11:cc:ad:64: 2c:a4:97:7e:9b:d7:53:d8:d6:29:53:29:8e:80:b5:89:bc:07: 8e:fd:bb:42:60:d2:87:f0:68:9f:e7:c4:cd:c6:8a:27:29:a3: 2b:7f:eb:2e:bf:7c:5b:d5:e4:53:ce:9d:4a:98:05:a2:64:d7: 55:9c:d6:b8:9e:54:5f:e9:67:d2:cd:ce:55:17:14:51:5c:56: d6:e7:9d:16:40:f6:34:73:f1:15:7b:70:38:29:cd:a3:e6:3a: e2:4e:5a:f4:7a:a6:e7:bb:a0:60:ac:08:cc:d0:5c:d2:c9:92: ad:95:7d:02:3c:d0:57:2c:66:49:f1:9e:37:9e:4d:1e:89:1c: 11:2d:f8:19:15:45:59:ad:95:0d:b9:6d:d4:f9:6e:f9:c3:b1: f0:19:66:4a:28:f2:d8:d6:6a:19:b3:f4:b8:01:8b:e6:b8:0a: 5d:70:92:07:7d:59:b5:70:f1:d3:e6:7a:67:38:59:0a:05:57: 35:9c:2a:a7:a3:7e:4e:e3:04:84:92:2f:3d:1c:60:d1:f0:92: 18:4b:99:04:8e:88:2a:7f:e2:e9:2e:75:86:78:cf:15:ff:7f: 5d:df:c5:b2:68:90:ef:d2:58:61:61:a2:da:11:f6:6d:60:0d: 88:92:3a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjQxMTIxMDQ1MzA5WhcNMjQxMTI4MDQ1MzA5WjAYMRYwFAYD VQQDEw02NzNlYmNiNS03NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHTHGkq889BBEEi4Pabi6UQ6cisOVsM8Oemda68hEtISgNEUEMd3UP5LRalo 7DO4p0j7GEb9pHnIMqMtfRwY/Z7QGdBpqvwzCKNVZP7GW2+VpuNO6pykC28Gy0IB BMp4NShMQPXh9bOdO3M71OPStzjS70pTLUHNi3ei4o9+8fJlX3l6Lfxus6cwFjXt lgzq1xlvx8mVDc+9NQV47KeYcpWW4O5J4czD8NO31vE78n7k4dGLkf+dDDh65Iau oGp/ZsANpC7e+hEG6rPs+Yn2VrH2+L8kJKfp4wXXuR48xqF9PLjmtdhkBr3ufHO+ XMlJnWhjbsAHZOR7n0IKN3l8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII2JwC4 7PpfV5AggaYo0KNUdHMZMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgsEUGRwdHi486hsHlXBHMrWQspJd+m9dT2NYpUymOgLWJvAeO/btC YNKH8Gif58TNxoonKaMrf+suv3xb1eRTzp1KmAWiZNdVnNa4nlRf6WfSzc5VFxRR XFbW550WQPY0c/EVe3A4Kc2j5jriTlr0eqbnu6BgrAjM0FzSyZKtlX0CPNBXLGZJ 8Z43nk0eiRwRLfgZFUVZrZUNuW3U+W75w7HwGWZKKPLY1moZs/S4AYvmuApdcJIH fVm1cPHT5npnOFkKBVc1nCqno35O4wSEki89HGDR8JIYS5kEjogqf+LpLnWGeM8V /39d38WyaJDv0lhhYaLaEfZtYA2Ikjri -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org