$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: DgEED1+9cRjJkOok5cecavtbbHB97GUGecw6e+clSU8= Subject key identifier: 79:36:A6:D4:A0:88:2A:03:D7:D6:4E:67:73:97:36:42:2B:FB:E4:A5 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 05B1 Signing time: Wed 20 Nov 2024 22:41:36 +0000 Manifest this update: Wed 20 Nov 2024 22:41:35 +0000 Manifest next update: Wed 27 Nov 2024 22:41:35 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: x3LaAtCs+ZFMZVboUH5R+s4LavhUzQ+sMtxhjkZjJg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Nov 20 22:41:35 2024 GMT Not After : Nov 27 22:41:35 2024 GMT Subject: CN=673e65a0-6fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:e2:6c:4d:5b:28:32:ef:0f:21:59:6b:17: 11:57:b1:7f:6f:62:d3:39:82:e7:61:e0:ae:ac:a4: 29:5f:3c:87:6f:7d:a1:75:11:72:7e:43:15:32:32: d1:c4:9e:3c:60:07:69:83:5a:8a:6a:c1:75:fe:bf: 45:ad:84:45:2e:80:da:f7:44:1c:64:c0:6a:b4:62: b3:66:9f:68:18:91:ba:65:36:8f:a0:0d:2f:84:22: 07:91:55:c6:e4:56:87:12:ab:ed:86:88:cb:35:ba: c4:d0:ad:97:ec:77:dd:e1:db:d7:b3:c0:2d:fc:cd: 53:18:14:65:11:a1:5b:29:c9:2e:fd:b1:b6:95:43: 8d:1d:a9:4d:4b:cf:5c:c2:f9:d3:b1:c8:1b:cc:94: 15:a2:90:ad:3c:22:93:b3:71:e2:20:0e:42:36:02: 12:8a:c9:2c:81:19:b0:c5:45:6a:d3:10:b0:a4:d6: 76:e5:8e:03:82:a7:ea:49:0e:c8:86:6d:b8:fa:7f: 72:e8:08:69:ab:04:b3:fe:28:c9:97:6d:e3:a1:5e: 52:b0:13:f2:82:34:ca:01:09:91:1a:c1:53:92:61: 11:64:48:c4:50:6d:47:f8:42:b7:74:18:d5:01:62: 13:c4:19:d6:bd:d7:ea:71:1d:a0:9e:a9:1d:a5:cc: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:36:A6:D4:A0:88:2A:03:D7:D6:4E:67:73:97:36:42:2B:FB:E4:A5 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:50:4a:22:93:75:81:33:0c:d0:41:e1:bb:f8:64:6d:d5:1a: 37:18:12:58:38:b9:59:5f:9d:d8:cb:75:77:f1:6e:90:c1:81: 50:9e:0e:38:a0:31:b3:11:b8:ed:e7:63:ef:73:b6:5d:22:d9: d3:ff:90:7d:7a:31:d5:c3:0c:68:ef:13:e0:0c:28:84:87:7e: d2:1c:f0:65:7c:68:1f:83:18:51:df:99:a1:3a:34:6a:81:93: 6f:5f:05:3f:2c:43:d3:4a:df:55:82:36:f9:61:6e:96:ba:f9: e3:94:94:d8:39:ef:0b:94:bd:1b:ff:be:de:0a:2e:5d:86:de: c0:73:3b:4a:0e:f0:db:ce:df:d3:c4:29:ad:22:bb:23:b9:43: f3:b0:8c:5a:d0:ad:dd:88:45:8c:f0:88:f1:01:3b:5d:2c:45: f1:2f:2a:05:f3:a5:0b:a1:ed:73:97:2b:bf:87:11:51:61:fe: e2:84:df:86:37:78:ac:d3:34:6e:0a:30:78:98:17:c6:35:e2: c0:e0:88:37:85:77:e9:e5:3b:36:8b:d2:11:42:f6:62:e0:8c: 63:4e:a4:72:65:e0:71:9a:53:9d:20:ba:0c:32:53:0b:1a:3a: 93:e6:87:b6:40:c3:62:95:ba:74:70:14:68:12:93:0e:9e:57: 1d:02:62:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjQxMTIwMjI0MTM1WhcNMjQxMTI3MjI0MTM1WjAYMRYwFAYD VQQDEw02NzNlNjVhMC02ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3zibE1bKDLvDyFZaxcRV7F/b2LTOYLnYeCurKQpXzyHb32hdRFyfkMVMjLR xJ48YAdpg1qKasF1/r9FrYRFLoDa90QcZMBqtGKzZp9oGJG6ZTaPoA0vhCIHkVXG 5FaHEqvthojLNbrE0K2X7Hfd4dvXs8At/M1TGBRlEaFbKcku/bG2lUONHalNS89c wvnTscgbzJQVopCtPCKTs3HiIA5CNgISisksgRmwxUVq0xCwpNZ25Y4DgqfqSQ7I hm24+n9y6AhpqwSz/ijJl23joV5SsBPygjTKAQmRGsFTkmERZEjEUG1H+EK3dBjV AWITxBnWvdfqcR2gnqkdpcywowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk2ptSg iCoD19ZOZ3OXNkIr++SlMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7UEoik3WBMwzQQeG7+GRt1Ro3GBJYOLlZX53Yy3V38W6QwYFQng44 oDGzEbjt52Pvc7ZdItnT/5B9ejHVwwxo7xPgDCiEh37SHPBlfGgfgxhR35mhOjRq gZNvXwU/LEPTSt9Vgjb5YW6WuvnjlJTYOe8LlL0b/77eCi5dht7AcztKDvDbzt/T xCmtIrsjuUPzsIxa0K3diEWM8IjxATtdLEXxLyoF86ULoe1zlyu/hxFRYf7ihN+G N3is0zRuCjB4mBfGNeLA4Ig3hXfp5Ts2i9IRQvZi4IxjTqRyZeBxmlOdILoMMlML GjqT5oe2QMNilbp0cBRoEpMOnlcdAmJW -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org