$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: eUszHUiD6m29U9TTa5rR/SIy+sIJnYz+inQMvBJWBAg= Subject key identifier: C8:EA:48:14:A2:BF:7A:3F:6E:CF:F5:95:75:62:CE:E3:B8:86:8D:D6 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 07C9 Signing time: Wed 20 Nov 2024 20:45:43 +0000 Manifest this update: Wed 20 Nov 2024 20:45:42 +0000 Manifest next update: Wed 27 Nov 2024 20:45:42 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: 5tWUSeMvkGHnQiVWaTK+9ez7a8Sx+nma1yff2BJXos8=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Nov 20 20:45:42 2024 GMT Not After : Nov 27 20:45:42 2024 GMT Subject: CN=673e4a77-5f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:92:15:6c:77:3f:1a:bc:78:88:92:72:be: 1d:9c:69:d2:e4:8a:9c:86:8e:97:cc:2e:33:4a:18: 2e:13:31:01:2d:16:a9:49:c9:51:52:af:71:8a:f0: 1c:0c:41:bf:0b:1a:12:66:3b:02:5b:70:7e:75:06: 03:f1:69:3f:60:67:7b:c6:47:9c:5f:d7:e5:ed:c2: 98:e5:4a:16:10:28:4e:65:0d:05:a7:c7:38:32:a0: 56:1e:d1:80:1d:f4:93:05:69:12:6b:27:2b:a5:8b: 67:b7:f8:19:31:6e:d0:d4:86:5f:ff:7c:4b:04:09: 0e:a1:25:2e:88:3d:26:6a:25:db:28:32:05:af:4a: ac:1d:ef:c1:d6:1a:6c:49:34:b0:a8:6f:78:14:70: 24:c3:6b:28:c2:28:3e:d2:6d:c6:45:73:79:20:d6: 3b:e1:7f:ea:f6:3c:c5:9d:8f:c0:cd:d8:71:a0:0e: 20:e7:cd:b6:e8:c6:50:f6:54:21:8f:55:3d:28:75: 28:40:9b:46:5d:b5:9e:c8:a3:64:06:db:19:5a:d6: 10:53:d7:2d:64:78:e4:2c:9a:77:f7:2f:2a:6f:a5: f7:f1:a4:3e:f6:94:7c:59:08:d1:a9:a2:0b:d4:9c: c1:cb:67:70:ff:60:61:2e:56:c1:aa:60:73:9b:18: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EA:48:14:A2:BF:7A:3F:6E:CF:F5:95:75:62:CE:E3:B8:86:8D:D6 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6b:ee:c9:dd:4d:87:d7:b3:79:86:8e:a3:27:07:66:21:46: 11:fe:5a:04:dc:5c:d9:e6:23:99:c8:e9:f2:06:a5:04:a6:80: 46:a4:f4:fe:94:dd:bf:8c:77:ac:81:9f:9a:8f:ea:50:2a:31: fc:45:cb:aa:03:62:c5:76:ce:8a:58:60:c8:0d:e3:3d:49:77: c1:ed:0a:c7:63:83:93:2c:f6:35:08:98:93:51:7c:6c:33:6e: c4:98:b5:18:94:5a:ee:fd:bf:67:a6:8f:11:45:1e:ce:c1:1f: 22:d0:2f:7d:d3:ee:78:cb:da:38:51:c5:c3:d1:6d:00:07:3e: 62:e2:93:31:ac:68:1f:81:d7:71:4f:d9:ee:f4:c9:60:c3:97: cb:4c:41:ed:9c:80:10:67:25:34:ad:fe:37:a6:8f:2b:46:86: b1:2f:b8:d0:47:66:0a:46:74:95:8a:dc:99:cb:24:b5:2e:c3: 61:b4:d1:e4:2e:9e:dc:1c:2b:68:e6:c4:66:ed:f5:be:b2:ec: c7:d5:d0:e7:36:bf:ef:f0:e1:c5:2d:5e:2e:ce:0a:29:fc:fc: 68:8b:ee:20:d7:73:73:0c:7c:42:46:ae:13:6a:53:95:4c:7d: 3d:48:4c:2c:81:00:3b:5f:38:f1:22:f2:1a:1b:2c:dc:6d:28: 5f:52:fb:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjQxMTIwMjA0NTQyWhcNMjQxMTI3MjA0NTQyWjAYMRYwFAYD VQQDEw02NzNlNGE3Ny01ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDySFWx3Pxq8eIiScr4dnGnS5Iqcho6XzC4zShguEzEBLRapSclRUq9xivAc DEG/CxoSZjsCW3B+dQYD8Wk/YGd7xkecX9fl7cKY5UoWEChOZQ0Fp8c4MqBWHtGA HfSTBWkSaycrpYtnt/gZMW7Q1IZf/3xLBAkOoSUuiD0maiXbKDIFr0qsHe/B1hps STSwqG94FHAkw2sowig+0m3GRXN5INY74X/q9jzFnY/AzdhxoA4g58226MZQ9lQh j1U9KHUoQJtGXbWeyKNkBtsZWtYQU9ctZHjkLJp39y8qb6X38aQ+9pR8WQjRqaIL 1JzBy2dw/2BhLlbBqmBzmxinJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjqSBSi v3o/bs/1lXVizuO4ho3WMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBca+7J3U2H17N5ho6jJwdmIUYR/loE3FzZ5iOZyOnyBqUEpoBGpPT+ lN2/jHesgZ+aj+pQKjH8RcuqA2LFds6KWGDIDeM9SXfB7QrHY4OTLPY1CJiTUXxs M27EmLUYlFru/b9npo8RRR7OwR8i0C990+54y9o4UcXD0W0ABz5i4pMxrGgfgddx T9nu9Mlgw5fLTEHtnIAQZyU0rf43po8rRoaxL7jQR2YKRnSVityZyyS1LsNhtNHk Lp7cHCto5sRm7fW+suzH1dDnNr/v8OHFLV4uzgop/Pxoi+4g13NzDHxCRq4TalOV TH09SEwsgQA7XzjxIvIaGyzcbShfUvsG -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:41 2024 by rpki-client on console-fra.rpki-client.org