$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: Q5/ymcR/Bo1RuqNYuHAYuGzHZULwdaBhI8WlCx8ttqw= Subject key identifier: 21:88:F4:4F:90:55:17:05:58:4A:49:74:6D:1D:DE:12:04:25:7C:D3 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0BDC Signing time: Fri 22 Nov 2024 18:38:22 +0000 Manifest this update: Fri 22 Nov 2024 18:38:21 +0000 Manifest next update: Fri 29 Nov 2024 18:38:21 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: DSJgTysjfi/ojJgChsfZl7jN9rCF0v2SfZOeEUodqPQ=) 2: 3C719B64EA8B11EEAFEF872BC4F9AE02.roa (hash: e94LgWmWYRWK+pHRKXMOqrVW5jepjiqRlZQXyc1Fd9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Nov 22 18:38:21 2024 GMT Not After : Nov 29 18:38:21 2024 GMT Subject: CN=6740cf9d-2418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:c8:74:47:af:9d:f5:b8:52:d6:22:77:61: 68:9a:8e:0d:ab:0d:a4:0f:f0:d7:ad:9d:6e:d3:e5: 3b:b3:1c:3c:e9:c3:d3:77:99:b4:87:0e:cb:50:56: 98:c3:84:ef:5c:0f:ce:e7:6f:c4:42:ac:f5:c7:f8: f0:b3:49:97:6b:f7:1d:32:2d:d0:70:3c:5c:7d:fb: f3:fd:e2:fb:75:ce:46:1f:9a:bb:2a:0b:48:e8:44: cd:0e:5b:46:d1:c3:48:a3:34:a6:4b:cc:36:68:d4: c7:10:63:d9:4f:24:5b:a5:15:81:fe:99:16:1d:b3: 11:5d:3c:95:58:32:7a:4f:ab:16:0b:b8:de:43:73: 46:a7:de:8a:f6:d6:5a:6d:08:e1:b0:a5:d0:7e:bd: 3c:04:c2:5c:8a:08:1a:61:ac:2c:65:36:7c:58:3d: 7c:d3:95:ba:b8:5d:7d:64:08:11:17:18:9b:be:d4: cf:1b:6a:83:69:81:eb:d9:61:0f:d9:6d:b1:08:de: a2:a2:eb:2d:95:15:ff:c5:c0:6a:6c:38:22:58:e3: 3b:59:0c:4b:de:95:2c:59:ed:15:6f:40:f2:ee:10: cd:da:d6:3c:5f:52:ea:e4:d8:9d:07:04:1c:00:e1: 5f:3b:f2:1c:ae:25:32:2a:59:a2:f1:de:0e:2d:a1: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:88:F4:4F:90:55:17:05:58:4A:49:74:6D:1D:DE:12:04:25:7C:D3 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:19:51:c1:7b:4b:ba:c5:3d:15:1a:2e:34:5e:cf:fc:81:89: a7:6c:2c:c3:1d:f1:f9:1a:65:ba:9c:1b:5c:23:42:db:44:46: a7:93:6a:6a:49:ef:bd:0d:ef:5f:9b:6f:82:c7:df:6b:16:db: d3:1b:35:84:5a:d9:81:e8:cd:3d:b1:5f:ca:b3:1c:61:ec:4a: c9:ff:02:3d:f3:ed:ca:0b:c8:c3:f3:81:c2:7c:6b:98:74:1d: 26:76:bd:55:dd:14:da:51:f8:e7:7f:84:e3:ae:5d:b8:a8:60: e0:b7:93:19:f2:f5:5a:b1:19:c9:f3:49:4f:f5:38:02:21:37: c3:3a:e3:fb:63:8a:41:ce:6c:15:c1:f2:b0:9f:66:93:44:a4: b8:cf:4e:61:14:85:27:59:50:68:65:0f:9d:74:7a:2c:8d:1d: 5b:c4:4f:95:da:b4:c3:d0:ff:4c:5b:71:78:72:b4:d8:95:5d: 9e:4f:cf:31:c7:ff:8b:09:3f:6b:d1:2d:5d:34:e6:fe:fa:12: 44:a3:4b:aa:fd:cd:90:f3:b9:5b:c3:bb:97:1e:4b:d5:59:1a: cd:06:22:f8:a9:e2:d7:e0:6d:0d:a4:84:cd:53:68:72:84:91: 30:98:66:8f:3d:0b:b9:e4:7b:08:3b:ee:df:c0:ec:bf:f9:12: 25:d3:ee:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjQxMTIyMTgzODIxWhcNMjQxMTI5MTgzODIxWjAYMRYwFAYD VQQDEw02NzQwY2Y5ZC0yNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzLIdEevnfW4UtYid2Fomo4Nqw2kD/DXrZ1u0+U7sxw86cPTd5m0hw7LUFaY w4TvXA/O52/EQqz1x/jws0mXa/cdMi3QcDxcffvz/eL7dc5GH5q7KgtI6ETNDltG 0cNIozSmS8w2aNTHEGPZTyRbpRWB/pkWHbMRXTyVWDJ6T6sWC7jeQ3NGp96K9tZa bQjhsKXQfr08BMJciggaYawsZTZ8WD1805W6uF19ZAgRFxibvtTPG2qDaYHr2WEP 2W2xCN6ioustlRX/xcBqbDgiWOM7WQxL3pUsWe0Vb0Dy7hDN2tY8X1Lq5NidBwQc AOFfO/IcriUyKlmi8d4OLaGPcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGI9E+Q VRcFWEpJdG0d3hIEJXzTMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5GVHBe0u6xT0VGi40Xs/8gYmnbCzDHfH5GmW6nBtcI0LbREank2pq Se+9De9fm2+Cx99rFtvTGzWEWtmB6M09sV/Ksxxh7ErJ/wI98+3KC8jD84HCfGuY dB0mdr1V3RTaUfjnf4Tjrl24qGDgt5MZ8vVasRnJ80lP9TgCITfDOuP7Y4pBzmwV wfKwn2aTRKS4z05hFIUnWVBoZQ+ddHosjR1bxE+V2rTD0P9MW3F4crTYlV2eT88x x/+LCT9r0S1dNOb++hJEo0uq/c2Q87lbw7uXHkvVWRrNBiL4qeLX4G0NpITNU2hy hJEwmGaPPQu55HsIO+7fwOy/+RIl0+7Z -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org