$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft File: QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json) Hash identifier: 2h3duWeau2eY8EO6Q4W/SLuXc+lOBbMKyFNLqAWrb5Y= Subject key identifier: AE:21:47:33:0B:46:20:1B:BA:21:39:8E:0A:2A:99:E0:9C:87:B8:E4 Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 5F68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft Manifest number: 3428 Signing time: Wed 20 Nov 2024 20:05:04 +0000 Manifest this update: Wed 20 Nov 2024 20:05:03 +0000 Manifest next update: Wed 27 Nov 2024 20:05:03 +0000 Files and hashes: 1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: 211VXLoByZEhWz9rvJQ2xDfl5PHosk4h2xPO5ObAV5M=) 2: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: ZH3Mq/JSGWA6DuI0NcZDqTsE9u1Wv10V6AeYETNaO6o=) 3: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: Giv4rcaEM71vd0FJYtYnZ1NZEvI1/oUilndLpAEn83g=) 4: 4E9D3CC61F5511EBAA049D14C4F9AE02.roa (hash: ps/h6G9ZK3Tx0wcyJa3VEs1GoZ3nLFBshAaXDJE7sno=) 5: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: tnJ3XOL1qQV4G/mV0ORt0qAipnI6yxGGobtXPhZDv0c=) 6: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: 9GuUG9mVckkRQctgNCdCmkXtRR7SNi7u2JK2feaLBfM=) 7: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: KrCTzS2XbgtLsY6GZt/EHaNU/HloOc9wNHxytXA1aYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24424 (0x5f68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: Nov 20 20:05:03 2024 GMT Not After : Nov 27 20:05:03 2024 GMT Subject: CN=673e40ef-5d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:f2:4a:00:c6:a3:53:28:4a:c0:b9:7b:d3: 2a:dd:11:ce:73:3e:1a:be:a6:7d:34:7f:f0:22:63: bd:9e:e1:45:a1:f8:b1:93:85:82:7a:fe:62:6f:4f: 5c:25:f2:00:06:f0:87:b9:f4:69:35:cd:ae:a2:7a: f1:4c:82:9c:ec:17:64:92:36:5a:b1:48:79:75:79: 8d:d9:5d:87:c3:23:d8:94:4b:d5:39:be:91:5b:25: 7c:48:d3:8e:2a:fe:4a:95:e3:e9:0e:47:ff:f1:d9: 53:f1:d1:c8:d4:f0:7c:41:09:86:ae:66:83:6c:f1: be:1d:0e:5a:d7:94:19:aa:f0:5f:ce:22:a5:88:f1: 75:54:68:56:68:91:8c:45:a3:3d:ee:bf:0b:01:34: 22:0c:78:59:28:3d:22:1f:58:c4:05:2f:d0:ed:de: 39:4a:01:86:4f:50:42:c9:5c:da:0a:07:cb:78:fc: 31:f0:fe:46:c8:3e:49:ed:3b:a5:65:65:f9:15:08: 4a:9b:07:3c:6e:34:18:d0:a5:d2:20:5f:9b:80:30: 9c:73:00:15:a3:2b:bb:4a:f2:06:5a:aa:ad:a7:b9: a7:69:21:27:b5:70:e1:af:12:87:84:65:62:40:04: eb:e5:4e:83:eb:0e:7d:a6:a6:2f:9b:00:53:d5:74: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:47:33:0B:46:20:1B:BA:21:39:8E:0A:2A:99:E0:9C:87:B8:E4 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:72:50:7f:58:80:ad:eb:fe:42:ac:f7:09:ac:f5:e8:1e:a8: bb:99:91:62:82:17:08:99:85:43:2d:37:0b:3c:e5:99:38:a8: 13:c7:11:4d:ac:49:7f:99:8b:a4:37:de:b0:de:f4:7f:8c:2b: 89:39:14:84:1b:7c:32:ab:41:bc:0f:9b:1c:53:b4:fb:b4:85: 1c:dc:cf:13:40:ef:de:cf:a2:96:49:81:33:55:30:20:89:db: 43:f8:cd:ce:e2:28:7f:01:70:df:04:6d:fd:6e:d8:0e:ea:0b: 2a:28:4f:62:29:18:e9:b4:ec:b0:f2:d5:4e:4b:38:be:d5:40: c7:c4:e6:9d:b3:e8:21:59:ec:04:8d:f5:69:4c:97:d5:9a:36: 6a:b2:ad:97:ca:5d:d2:cb:2b:45:df:c0:9b:6c:06:09:8c:c7: e1:42:34:90:94:3e:fb:84:55:72:5c:f7:19:28:19:e0:16:7f: 83:4f:fd:59:7a:42:0e:41:cb:a1:0e:f4:55:f2:77:40:72:96: 7c:25:19:18:a7:82:5f:86:cb:ab:b1:2c:cc:83:e0:f2:8e:ba: 1b:04:a1:8c:07:cc:c0:c1:fe:a8:a9:60:de:cd:62:f8:89:5a: 1a:c4:bd:0b:5d:f9:97:8a:cb:0a:ce:85:f7:18:25:da:d3:02: b8:c1:70:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICX2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjQxMTIwMjAwNTAzWhcNMjQxMTI3MjAwNTAzWjAYMRYwFAYD VQQDEw02NzNlNDBlZi01ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLLySgDGo1MoSsC5e9Mq3RHOcz4avqZ9NH/wImO9nuFFofixk4WCev5ib09c JfIABvCHufRpNc2uonrxTIKc7BdkkjZasUh5dXmN2V2HwyPYlEvVOb6RWyV8SNOO Kv5KlePpDkf/8dlT8dHI1PB8QQmGrmaDbPG+HQ5a15QZqvBfziKliPF1VGhWaJGM RaM97r8LATQiDHhZKD0iH1jEBS/Q7d45SgGGT1BCyVzaCgfLePwx8P5GyD5J7Tul ZWX5FQhKmwc8bjQY0KXSIF+bgDCccwAVoyu7SvIGWqqtp7mnaSEntXDhrxKHhGVi QATr5U6D6w59pqYvmwBT1XTr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4hRzML RiAbuiE5jgoqmeCch7jkMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTMyMy8wODREODhENDk1QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHot eTFXUXlXeU1OaDR2N1VTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWclB/WICt6/5CrPcJrPXoHqi7mZFighcImYVDLTcLPOWZOKgTxxFN rEl/mYukN96w3vR/jCuJORSEG3wyq0G8D5scU7T7tIUc3M8TQO/ez6KWSYEzVTAg idtD+M3O4ih/AXDfBG39btgO6gsqKE9iKRjptOyw8tVOSzi+1UDHxOads+ghWewE jfVpTJfVmjZqsq2Xyl3SyytF38CbbAYJjMfhQjSQlD77hFVyXPcZKBngFn+DT/1Z ekIOQcuhDvRV8ndAcpZ8JRkYp4JfhsursSzMg+DyjrobBKGMB8zAwf6oqWDezWL4 iVoaxL0LXfmXissKzoX3GCXa0wK4wXCp -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org