$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: X3mB3D8kCUYDKSYb3gaoGfH8BgQ5fdaHjSROzD/4S3w= Subject key identifier: C1:20:36:86:54:D7:D2:C8:66:B9:62:09:66:F9:F3:ED:44:9C:65:23 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 1E Signing time: Thu 19 Sep 2024 06:10:09 +0000 Manifest this update: Thu 19 Sep 2024 06:10:08 +0000 Manifest next update: Thu 26 Sep 2024 06:10:08 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: hwETRNC5PGMFMVGJJkHMcOxApEIoZcSK5j+MjbSb66c=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: vCihCbD/IiwkyJf/jAh1StFRRAhfwTCEK4+ACvnlgHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Sep 19 06:10:08 2024 GMT Not After : Sep 26 06:10:08 2024 GMT Subject: CN=66ebc041-8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:a0:0d:a7:d0:38:e5:64:7b:70:44:70:e9: 82:bf:b2:ed:58:b3:a5:64:56:02:b9:d5:57:15:49: e8:3e:22:b0:67:29:3f:54:4a:2e:33:a8:89:c5:f0: 66:d5:07:92:4e:cf:b5:d4:a7:64:43:14:35:9f:77: ea:e4:8a:46:94:c8:1f:70:fe:28:65:8f:09:6a:a7: 5f:2c:28:18:8f:8c:e9:02:66:c6:4b:bf:10:9e:23: 22:c5:7f:e1:c3:81:0c:78:5a:05:8d:c2:98:1d:fa: c8:90:fb:05:67:35:86:e9:bb:24:af:ac:42:d3:f4: de:3d:a7:85:4f:69:3d:3c:3a:3a:f1:d1:56:61:d7: f7:63:29:b6:ae:fb:44:b0:04:b9:31:4c:31:8a:09: c8:0b:48:fd:5b:36:8c:4b:23:80:8b:5e:ba:48:1e: 4e:f6:66:00:1d:33:12:09:63:31:b8:f6:84:7b:ae: 4a:7c:49:99:2e:d1:1e:3c:9e:34:08:7b:94:54:fa: 4f:14:07:88:07:7c:43:bd:2a:13:d1:5c:be:d3:c4: d9:9d:a2:6a:ab:3e:dc:1f:b7:05:5c:43:b9:19:ac: 3b:fd:70:56:3f:05:f4:23:dd:9d:90:a2:d3:41:e9: e4:2b:a7:55:49:65:cf:fe:46:c1:1a:55:63:14:db: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:36:86:54:D7:D2:C8:66:B9:62:09:66:F9:F3:ED:44:9C:65:23 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:d4:23:23:97:5a:97:42:57:dd:f8:e5:7e:3b:43:9c:12: df:7e:e6:36:9c:63:83:6b:ca:2d:3f:e0:23:33:49:44:65:3d: 1d:39:23:2a:7b:3f:c0:5c:7b:7b:cb:60:1c:28:e0:69:98:82: c7:7e:04:33:1b:8e:c1:d5:1d:7f:8f:70:c5:00:d3:b3:47:b7: dc:ee:5a:80:47:18:72:aa:f1:04:ec:7b:d8:7f:44:39:27:71: 6d:30:bc:22:6c:6b:bc:87:1e:3c:14:37:12:a5:97:75:02:e0: d6:4e:62:e6:4c:27:6b:13:05:ac:1d:3a:8e:0d:11:9d:f2:cb: 48:01:69:29:82:f1:ab:7a:f2:96:b1:97:c7:fb:7f:15:f3:61: 48:89:16:7b:48:45:eb:30:55:92:03:6c:69:5b:a2:89:cb:c5: c9:74:2c:2e:d3:4b:08:24:d1:1b:c9:e7:94:08:2e:82:87:61: 90:bd:14:29:c0:ad:b2:31:82:20:11:b8:6e:b0:d3:e0:29:e8: 28:26:ba:c1:b6:2d:78:d6:06:7d:94:8f:4d:57:6d:d0:7e:9d: e3:bd:ac:3d:42:31:bf:fc:0e:bd:6b:73:28:7d:d3:84:35:91: 29:c8:04:61:5f:42:8c:bb:8a:59:c9:3f:86:37:a2:59:1f:eb: 8e:5a:ae:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTQ5QzExMC8GA1UEBRMoNDM2MzRDNzAxQkExRjFFRkNFOEY1NkFBNkFEMURCMjk0 NUExREI5RjAeFw0yNDA5MTkwNjEwMDhaFw0yNDA5MjYwNjEwMDhaMBgxFjAUBgNV BAMTDTY2ZWJjMDQxLTgyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1vaANp9A45WR7cERw6YK/su1Ys6VkVgK51VcVSeg+IrBnKT9USi4zqInF8GbV B5JOz7XUp2RDFDWfd+rkikaUyB9w/ihljwlqp18sKBiPjOkCZsZLvxCeIyLFf+HD gQx4WgWNwpgd+siQ+wVnNYbpuySvrELT9N49p4VPaT08Ojrx0VZh1/djKbau+0Sw BLkxTDGKCcgLSP1bNoxLI4CLXrpIHk72ZgAdMxIJYzG49oR7rkp8SZku0R48njQI e5RU+k8UB4gHfEO9KhPRXL7TxNmdomqrPtwftwVcQ7kZrDv9cFY/BfQj3Z2QotNB 6eQrp1VJZc/+RsEaVWMU29uTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwSA2hlTX 0shmuWIJZvnz7UScZSMwHwYDVR0jBBgwFoAUQ2NMcBuh8e/Oj1aqatHbKUWh258w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NDlDL0RFODcxOEM0NEEz MTExRUZCN0JCRDUxQ0M0RjlBRTAyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTJOTWNCdWg4ZV9PajFhcWF0SGJLVVdoMjU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NDlDL0RFODcxOEM0NEEzMTExRUZCN0JCRDUxQ0M0RjlBRTAyL1EyTk1jQnVoOGVf T2oxYXFhdEhiS1VXaDI1OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXb1CMjl1qXQlfd+OV+O0OcEt9+5jacY4Nryi0/4CMzSURlPR05Iyp7 P8Bce3vLYBwo4GmYgsd+BDMbjsHVHX+PcMUA07NHt9zuWoBHGHKq8QTse9h/RDkn cW0wvCJsa7yHHjwUNxKll3UC4NZOYuZMJ2sTBawdOo4NEZ3yy0gBaSmC8at68pax l8f7fxXzYUiJFntIReswVZIDbGlboonLxcl0LC7TSwgk0RvJ55QILoKHYZC9FCnA rbIxgiARuG6w0+Ap6CgmusG2LXjWBn2Uj01XbdB+neO9rD1CMb/8Dr1rcyh904Q1 kSnIBGFfQoy7ilnJP4Y3olkf645arso= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:53 2024 by rpki-client on console-fra.rpki-client.org