$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: q70yKjzqUCl4EkFioDapIZHJJZZOfoc46HXXGowC8bY= Subject key identifier: AC:1E:60:14:47:9F:49:FB:05:E5:62:58:63:1F:AB:72:78:47:40:77 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: 5C Signing time: Thu 21 Nov 2024 05:10:21 +0000 Manifest this update: Thu 21 Nov 2024 05:10:20 +0000 Manifest next update: Thu 28 Nov 2024 05:10:20 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: /5gNKIHFzEBn1gKyElSCwv0i0U0PpKMlMAAtDm29jYU=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Nov 21 05:10:20 2024 GMT Not After : Nov 28 05:10:20 2024 GMT Subject: CN=673ec0bd-16ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:3a:27:2b:a4:79:04:bd:6f:2c:8c:ba:37: c2:82:6e:25:5e:e4:ef:55:d5:85:ba:43:74:fb:2e: dd:3d:3a:84:3c:a3:a4:77:de:ac:c3:24:ad:75:1d: e9:7d:0e:a2:ba:34:26:7a:d5:4e:89:dc:86:bf:85: fa:10:a8:84:e0:23:38:d3:9f:c3:cb:6f:02:59:41: ba:da:4f:76:fa:d0:2f:fc:a3:7a:59:82:71:0b:e3: 28:fb:f2:a3:a0:e3:b1:21:4e:51:a3:0c:c0:0b:8c: 20:39:fb:62:52:45:27:55:df:95:c7:ee:59:a4:db: ff:2a:0b:6c:2f:b4:43:13:0b:28:27:cc:80:e2:e9: e4:d1:35:19:e2:cb:5f:b1:22:c3:8b:73:d8:1b:1c: bf:8d:d6:7c:c2:28:88:c6:41:e4:e2:20:e0:c5:10: 4e:14:17:6e:79:8e:75:90:29:4d:a5:21:b6:e7:12: 53:10:e5:01:7f:b4:1f:02:3c:b1:c3:36:12:cd:16: 05:89:f7:38:17:63:17:8d:48:5b:2c:22:32:45:d4: 54:8e:c7:93:b7:28:21:9a:32:99:8e:82:09:97:4b: 2d:33:7f:c8:58:5a:fe:23:db:36:5f:a4:34:32:ad: 2f:98:e8:f8:02:db:ec:32:db:3d:31:41:b3:4b:00: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1E:60:14:47:9F:49:FB:05:E5:62:58:63:1F:AB:72:78:47:40:77 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:43:08:49:aa:a2:76:f2:8e:3c:40:18:b4:f0:c8:2e:ce:db: df:76:94:bf:22:11:b0:9d:ec:29:2a:bb:22:e9:14:31:f9:54: 2c:fc:55:59:3f:d8:1a:c9:40:c6:74:d9:d1:22:e1:a3:b6:bc: fa:73:2c:67:12:30:26:c3:33:3b:93:40:a8:b7:76:10:47:b2: 40:80:e3:4b:52:f8:3b:2f:a0:9b:76:94:5d:f5:76:1d:ca:85: a3:6a:a8:fa:75:e2:29:78:8f:f9:49:dc:42:ea:94:10:41:ee: 27:7d:94:bd:66:3e:f1:d2:f6:b0:3d:9b:f8:f5:65:f9:46:33: 16:b7:ad:92:54:61:f8:c5:ab:14:51:b7:01:e4:7e:46:2b:3f: 3a:de:d8:78:46:a9:dd:cf:c4:b3:38:c0:49:fe:99:6e:4f:05: 36:b7:f6:f1:8c:bc:8b:0c:4f:a1:17:7c:56:d9:74:64:3f:19: 60:56:e1:17:8e:c3:bf:e1:90:3f:85:37:0e:0d:73:ec:13:d8: 62:47:a8:f8:2e:25:87:1b:64:78:9d:04:7d:65:4a:b7:87:3c: 67:43:b4:ca:08:e5:ce:e8:df:95:ed:8a:1c:da:71:f2:95:8b: 07:33:27:a7:6e:d3:22:0e:7f:79:d2:39:5a:a8:61:91:24:48: 7c:89:32:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzFCNzExMC8GA1UEBRMoQTgxRDE1NUNBNDA0QUU0MTQ1NzgxQUYwNUVCNTNBMTIx OUUyRTA2NTAeFw0yNDExMjEwNTEwMjBaFw0yNDExMjgwNTEwMjBaMBgxFjAUBgNV BAMTDTY3M2VjMGJkLTE2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIJzonK6R5BL1vLIy6N8KCbiVe5O9V1YW6Q3T7Lt09OoQ8o6R33qzDJK11Hel9 DqK6NCZ61U6J3Ia/hfoQqITgIzjTn8PLbwJZQbraT3b60C/8o3pZgnEL4yj78qOg 47EhTlGjDMALjCA5+2JSRSdV35XH7lmk2/8qC2wvtEMTCygnzIDi6eTRNRniy1+x IsOLc9gbHL+N1nzCKIjGQeTiIODFEE4UF255jnWQKU2lIbbnElMQ5QF/tB8CPLHD NhLNFgWJ9zgXYxeNSFssIjJF1FSOx5O3KCGaMpmOggmXSy0zf8hYWv4j2zZfpDQy rS+Y6PgC2+wy2z0xQbNLAObtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrB5gFEef SfsF5WJYYx+rcnhHQHcwHwYDVR0jBBgwFoAUqB0VXKQErkFFeBrwXrU6Ehni4GUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMUI3L0ZDQzMzNENDMUU2 QjExRUZBQzBFOTE0RUM0RjlBRTAyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRH VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUIwVlhLUUVya0ZGZUJyd1hyVTZFaG5pNEdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz MUI3L0ZDQzMzNENDMUU2QjExRUZBQzBFOTE0RUM0RjlBRTAyL3FCMFZYS1FFcmtG RmVCcndYclU2RWhuaTRHVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5DCEmqonbyjjxAGLTwyC7O2992lL8iEbCd7CkquyLpFDH5VCz8VVk/ 2BrJQMZ02dEi4aO2vPpzLGcSMCbDMzuTQKi3dhBHskCA40tS+DsvoJt2lF31dh3K haNqqPp14il4j/lJ3ELqlBBB7id9lL1mPvHS9rA9m/j1ZflGMxa3rZJUYfjFqxRR twHkfkYrPzre2HhGqd3PxLM4wEn+mW5PBTa39vGMvIsMT6EXfFbZdGQ/GWBW4ReO w7/hkD+FNw4Nc+wT2GJHqPguJYcbZHidBH1lSreHPGdDtMoI5c7o35XtihzacfKV iwczJ6du0yIOf3nSOVqoYZEkSHyJMm4= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org