$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: 0RaFQq31CV6Q7V0hm1tzO9TAqlJoYZSX/jvb32N0Ih0= Subject key identifier: 5C:A1:DE:B0:FA:CE:C0:74:E9:42:F5:47:23:6A:31:8E:5B:96:3E:AC Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0BDC Signing time: Fri 22 Nov 2024 18:26:08 +0000 Manifest this update: Fri 22 Nov 2024 18:26:08 +0000 Manifest next update: Fri 29 Nov 2024 18:26:08 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: 1IWZAP+yvJPWQEmPP8T8EtZOgO+fWO8D36Zpzz7KKpM=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: RZTHu0Pp/QOoEKtmlbB4TD2hR3XHnathw6Ld38M8okg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3040 (0xbe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Nov 22 18:26:08 2024 GMT Not After : Nov 29 18:26:08 2024 GMT Subject: CN=6740ccc0-ca18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:11:c1:f7:17:76:4b:bf:8c:d8:0c:f3:17: 31:60:3a:f9:c6:de:a8:80:da:73:82:44:45:9d:ba: b2:8c:3e:71:cf:68:7a:a2:58:85:39:ea:0e:44:1d: 18:27:b8:71:55:d3:4e:2a:97:2c:c2:5a:4c:ff:d1: 79:f4:be:d4:80:5f:6b:84:6c:ac:29:bb:c4:e1:10: 95:03:c2:c6:d3:95:dc:3e:57:ec:b0:04:cc:8d:d9: ee:d2:b8:89:08:da:15:13:45:ae:9b:4a:f6:4b:bc: 05:2f:71:20:d9:d4:ce:b4:33:1f:8c:d8:b6:f7:a0: b0:e9:70:54:c0:27:38:8a:3d:dc:cb:0d:2c:12:fb: 52:ef:70:a2:c0:51:56:ed:ec:86:46:47:d5:d9:14: 56:03:bf:ba:0f:34:2b:89:93:0d:3b:ee:87:e3:21: 20:4c:bc:ee:fb:ee:90:07:4b:9d:c1:30:15:69:68: bf:86:55:7d:56:85:07:f2:19:96:ac:2c:1c:65:3a: b9:81:92:32:0f:bc:ab:e3:76:f9:a3:61:39:53:7c: 84:11:88:bd:46:16:58:18:2d:9b:da:8f:f4:a8:30: a1:45:5e:76:30:f6:b3:8a:01:b5:7a:a3:14:c3:99: 15:74:69:0e:0b:05:d2:33:b9:86:f0:f1:92:67:b6: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:DE:B0:FA:CE:C0:74:E9:42:F5:47:23:6A:31:8E:5B:96:3E:AC X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ed:38:54:bf:5e:43:37:e4:fe:25:93:78:66:84:59:b4:96: a0:4e:eb:83:47:88:28:57:9d:85:72:af:0e:16:5d:6d:91:7c: c9:2b:c8:47:33:98:cd:d4:b8:a2:35:8d:12:92:a9:51:be:27: 04:6a:22:09:7c:0b:0a:41:1e:fc:79:ff:eb:91:fd:37:2f:78: a7:59:8e:ce:bb:02:70:42:19:8e:80:ce:42:d5:39:5b:7a:7a: f6:14:5d:91:81:91:d9:a7:ea:cc:62:1a:5c:11:e1:1d:94:fd: 77:38:ea:27:a5:13:72:2e:50:31:39:5d:b7:8c:1b:b2:34:0c: bc:cf:98:a2:a2:24:53:27:8b:19:e6:93:7d:53:60:96:66:a5: 6c:66:3a:69:e7:59:9c:01:49:ad:07:8d:b3:ab:3c:f3:06:1d: 16:aa:2a:be:04:5b:91:3e:3a:7e:ac:6b:e7:cd:74:be:71:35: 50:42:bd:26:21:9d:f9:c2:cc:5b:0e:9a:5e:4a:97:df:46:95: 5d:c9:46:85:82:e2:64:4a:f5:a2:58:3c:6c:e5:d7:32:8a:db: 3c:da:28:44:e8:a7:b5:b1:8a:28:9e:39:ea:55:96:9b:ac:48: a1:34:d5:6b:0d:3a:57:ba:28:b1:01:9f:d9:9d:a0:1a:cc:a3: 67:6d:51:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjQxMTIyMTgyNjA4WhcNMjQxMTI5MTgyNjA4WjAYMRYwFAYD VQQDEw02NzQwY2NjMC1jYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QkRwfcXdku/jNgM8xcxYDr5xt6ogNpzgkRFnbqyjD5xz2h6oliFOeoORB0Y J7hxVdNOKpcswlpM/9F59L7UgF9rhGysKbvE4RCVA8LG05XcPlfssATMjdnu0riJ CNoVE0Wum0r2S7wFL3Eg2dTOtDMfjNi296Cw6XBUwCc4ij3cyw0sEvtS73CiwFFW 7eyGRkfV2RRWA7+6DzQriZMNO+6H4yEgTLzu++6QB0udwTAVaWi/hlV9VoUH8hmW rCwcZTq5gZIyD7yr43b5o2E5U3yEEYi9RhZYGC2b2o/0qDChRV52MPazigG1eqMU w5kVdGkOCwXSM7mG8PGSZ7Z2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyh3rD6 zsB06UL1RyNqMY5blj6sMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG7ThUv15DN+T+JZN4ZoRZtJagTuuDR4goV52Fcq8OFl1tkXzJK8hH M5jN1LiiNY0SkqlRvicEaiIJfAsKQR78ef/rkf03L3inWY7OuwJwQhmOgM5C1Tlb enr2FF2RgZHZp+rMYhpcEeEdlP13OOonpRNyLlAxOV23jBuyNAy8z5iioiRTJ4sZ 5pN9U2CWZqVsZjpp51mcAUmtB42zqzzzBh0Wqiq+BFuRPjp+rGvnzXS+cTVQQr0m IZ35wsxbDppeSpffRpVdyUaFguJkSvWiWDxs5dcyits82ihE6Ke1sYoonjnqVZab rEihNNVrDTpXuiixAZ/ZnaAazKNnbVEW -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org