$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft File: qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json) Hash identifier: 8oZkbGHpWEl+pEAn/+KX+W0xQkq0mTXu62jAEh3RnbA= Subject key identifier: BF:D6:68:F4:3C:3A:7C:1D:FA:20:93:69:CF:9C:3E:7F:42:F9:3D:3F Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft Manifest number: 0613 Signing time: Sun 24 Nov 2024 22:11:43 +0000 Manifest this update: Sun 24 Nov 2024 22:11:42 +0000 Manifest next update: Sun 01 Dec 2024 22:11:42 +0000 Files and hashes: 1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: 5dzzopyNWqOn6skjoKg7fCUxYRNXqb/VPRiH2ASR+c8=) 2: ED6AC2042F8F11EE895A9C2DC4F9AE02.roa (hash: u+VhGowYLIxVMjAVLBfnnCu45VHndlnwmBn/wCGYcRA=) 3: 7B34351E6C4011EFB07AFE4DC4F9AE02.roa (hash: a8hiZQY4feWw7cGzPQPoFMY0Vgh/L0UfvR1IyLlgJEI=) 4: D6E4690E2F8F11EE98845D2DC4F9AE02.roa (hash: z/o4m6HmNX417WCq+N0zVbLQp0K50mnNXtt3i5iEFeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Nov 24 22:11:42 2024 GMT Not After : Dec 1 22:11:42 2024 GMT Subject: CN=6743a49f-d378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:8b:ae:7f:f8:02:23:40:53:4e:87:63:47: f9:6a:02:2a:81:13:0d:74:11:e7:19:3d:99:61:0f: 3e:25:06:b5:d7:44:8b:8d:b1:94:4c:b2:d8:2c:d7: 27:04:0e:16:3a:1e:92:2f:31:ea:c9:94:83:39:9e: 5f:cd:aa:98:25:57:19:20:17:56:87:0e:a0:52:47: cd:2c:90:dd:2f:5b:72:42:22:0f:1c:9c:9d:50:f4: c7:f3:9c:35:e2:66:66:07:ae:6c:69:4e:c4:68:a1: 2f:59:b2:55:e4:34:c6:a7:5f:7f:df:fb:54:37:19: 8c:34:bd:be:90:47:f3:a5:07:ee:34:77:d8:75:e9: 2c:09:c4:cf:e3:5b:2d:70:a4:69:04:69:33:a1:b4: 28:76:fd:fd:f7:76:19:18:58:f7:57:f4:65:5c:eb: bb:05:dc:cc:94:55:e3:e2:09:8d:19:87:32:68:27: 66:11:36:d3:2d:6f:40:ae:d9:1e:22:2c:24:e4:f1: 7d:bf:4a:60:15:97:7d:52:d9:30:75:99:b4:1f:89: f6:a4:dc:52:ff:3c:e6:7e:ea:7b:8b:64:13:af:eb: 15:7a:39:f7:b6:aa:54:c4:17:48:a1:b1:0b:ef:65: ea:57:7d:c5:22:d4:a3:82:62:e5:2f:43:8f:08:1c: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:68:F4:3C:3A:7C:1D:FA:20:93:69:CF:9C:3E:7F:42:F9:3D:3F X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:01:ac:d6:3d:76:c2:57:4f:b8:7a:32:d3:2e:eb:a6:f3:86: 52:10:7f:b2:be:d6:cb:21:0d:5b:f8:c2:6c:45:f8:4f:36:b9: b9:35:7b:7c:e1:0e:18:97:7a:a4:3b:b2:d8:eb:27:7b:f6:74: ab:33:6d:3e:f5:1c:7a:ba:e6:45:93:0f:91:c9:4a:b9:e4:0a: 1e:f9:7c:ca:ff:2e:e1:59:0c:51:44:15:33:d1:2f:31:ed:8a: 38:9d:5f:5f:54:1b:0d:16:67:e2:8f:85:98:db:11:3b:b6:e4: 9b:b8:b2:d2:fc:9c:29:a5:b2:0b:de:68:47:44:a5:2b:b4:40: 07:96:97:5f:43:79:9e:dd:0f:38:87:8c:ca:4d:7a:d2:3e:4f: 62:c9:7e:2d:8d:9c:64:8f:91:6f:b9:20:ea:2b:d9:5c:c8:15: 28:91:a3:43:f8:7a:c6:a3:73:16:a6:38:e7:13:6a:8c:43:09: e2:f7:ae:50:b0:9e:8e:4b:94:26:c7:b3:55:15:c8:3e:3a:a1: f7:ef:dc:59:b7:cc:75:a9:ce:d5:af:1d:4f:67:6a:da:00:61: 74:7e:f8:c2:c2:1a:34:31:51:04:c9:f2:a0:46:69:c9:0e:c5: 92:1b:2d:69:68:9e:03:cf:31:9c:04:f6:64:82:9b:44:d0:ee: f9:29:d0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjQxMTI0MjIxMTQyWhcNMjQxMjAxMjIxMTQyWjAYMRYwFAYD VQQDEw02NzQzYTQ5Zi1kMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+WLrn/4AiNAU06HY0f5agIqgRMNdBHnGT2ZYQ8+JQa110SLjbGUTLLYLNcn BA4WOh6SLzHqyZSDOZ5fzaqYJVcZIBdWhw6gUkfNLJDdL1tyQiIPHJydUPTH85w1 4mZmB65saU7EaKEvWbJV5DTGp19/3/tUNxmMNL2+kEfzpQfuNHfYdeksCcTP41st cKRpBGkzobQodv3993YZGFj3V/RlXOu7BdzMlFXj4gmNGYcyaCdmETbTLW9Artke Iiwk5PF9v0pgFZd9UtkwdZm0H4n2pNxS/zzmfup7i2QTr+sVejn3tqpUxBdIobEL 72XqV33FItSjgmLlL0OPCBxN0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/WaPQ8 Onwd+iCTac+cPn9C+T0/MB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjM1My8zQkZERUQ2NDg2QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3 allqdWQ3MlJ3VmNYWE1QQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvAazWPXbCV0+4ejLTLuum84ZSEH+yvtbLIQ1b+MJsRfhPNrm5NXt8 4Q4Yl3qkO7LY6yd79nSrM20+9Rx6uuZFkw+RyUq55Aoe+XzK/y7hWQxRRBUz0S8x 7Yo4nV9fVBsNFmfij4WY2xE7tuSbuLLS/JwppbIL3mhHRKUrtEAHlpdfQ3me3Q84 h4zKTXrSPk9iyX4tjZxkj5FvuSDqK9lcyBUokaND+HrGo3MWpjjnE2qMQwni965Q sJ6OS5Qmx7NVFcg+OqH379xZt8x1qc7Vrx1PZ2raAGF0fvjCwho0MVEEyfKgRmnJ DsWSGy1paJ4DzzGcBPZkgptE0O75KdB3 -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:50 2024 by rpki-client on console-fra.rpki-client.org