$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: zVXIkPZg4MmVO+c3LwtVLWB5o5PKUsKszyYYtyuSCMo= Subject key identifier: C9:DC:AA:E1:CE:D9:6D:E4:7A:84:A6:10:9F:78:6B:4D:5B:66:77:04 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: 3A Signing time: Sun 15 Sep 2024 09:55:48 +0000 Manifest this update: Sun 15 Sep 2024 09:55:47 +0000 Manifest next update: Sun 22 Sep 2024 09:55:47 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: P7Cts0u1ONtdwWbjQ2OP6/W034/GYB1GceJ1Pd5Tl4s=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Sep 15 09:55:47 2024 GMT Not After : Sep 22 09:55:47 2024 GMT Subject: CN=66e6af23-4871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:44:81:3f:e1:74:bf:23:b4:c5:1f:49:2b: 0b:20:5c:b1:ca:0d:2b:49:6d:20:08:96:3e:ee:64: 9c:72:a4:fb:5f:81:cf:05:c2:cd:5a:4b:74:3e:56: f2:b7:17:d9:ed:8b:8c:09:60:e8:53:ea:5d:dd:70: 33:0f:f9:1c:87:ef:5e:4f:8c:5f:2c:2e:6e:f6:53: 33:be:73:db:da:b9:75:91:46:fc:b4:64:a5:6c:02: a4:d1:5b:d8:94:6c:9d:9c:74:cc:6c:7c:b0:5a:0f: 77:66:5f:41:6e:56:a2:e9:07:06:02:c6:60:51:4e: f2:2b:ac:14:32:3a:2c:3a:87:37:b7:87:ca:27:53: 75:ec:9a:6f:55:2e:ce:97:7b:9d:77:90:eb:ac:86: 2e:04:f5:18:f5:c3:7e:b6:3b:ac:c4:cc:ca:15:56: e8:8c:12:b8:47:8c:66:56:5e:8e:c1:1e:f5:b3:1c: bd:43:83:7e:94:7e:d3:9f:0b:12:a7:96:5b:80:c7: ee:72:dc:5b:3d:95:08:38:d5:1a:10:ab:4e:df:90: c4:0b:ec:2f:11:39:a9:7c:dd:f6:08:b7:74:26:98: c8:25:fc:9f:a5:9a:1a:e1:a1:4a:8f:56:ee:a2:12: 64:2e:04:68:8f:32:a7:3c:1f:ac:b2:cc:e9:77:bc: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:AA:E1:CE:D9:6D:E4:7A:84:A6:10:9F:78:6B:4D:5B:66:77:04 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:48:60:f0:2c:c5:55:60:be:10:f1:6c:5b:6b:a5:a4:a0:67: 99:0c:bd:67:81:8b:ad:c2:95:e9:b0:db:ca:37:77:9d:bc:da: e6:b7:b8:46:83:21:aa:6f:1f:52:f2:9f:a4:08:a5:22:9b:d2: 5b:8b:26:29:d5:de:ca:5a:eb:7e:df:35:8e:65:0b:fa:fd:38: 96:48:9e:a5:85:7e:7b:a5:01:5a:81:f7:d2:08:28:83:50:74: cb:07:ef:ab:da:55:4b:d0:d9:fb:e5:b0:3d:19:4c:9c:a0:68: 70:75:38:67:4a:11:71:c2:f7:57:d3:d5:a5:a9:82:c0:00:94: 6c:0f:e4:42:8f:a1:1a:dc:f3:cc:90:18:ef:3a:dd:33:3c:e5: 2b:d5:13:40:f0:01:c6:5c:b4:fc:ba:e8:26:3d:8b:1b:fb:23: 27:24:85:ab:3d:6d:dc:bb:2b:0c:53:92:3e:b3:cb:58:7a:48: 8a:5f:86:ca:8e:6f:7e:94:54:97:e7:e7:b3:25:58:8d:1f:9f: d4:a6:fb:8a:00:7f:93:11:fc:30:a3:02:e6:9c:e4:6a:71:d7: 9d:7f:f6:48:04:1b:49:6f:66:ee:09:27:e5:f8:e9:77:87:5f: 85:11:06:f1:6a:6c:96:44:a2:e6:1e:9e:44:04:b8:40:c2:34: db:0f:22:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzFCNzExMC8GA1UEBRMoQTgxRDE1NUNBNDA0QUU0MTQ1NzgxQUYwNUVCNTNBMTIx OUUyRTA2NTAeFw0yNDA5MTUwOTU1NDdaFw0yNDA5MjIwOTU1NDdaMBgxFjAUBgNV BAMTDTY2ZTZhZjIzLTQ4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbcESBP+F0vyO0xR9JKwsgXLHKDStJbSAIlj7uZJxypPtfgc8Fws1aS3Q+VvK3 F9nti4wJYOhT6l3dcDMP+RyH715PjF8sLm72UzO+c9vauXWRRvy0ZKVsAqTRW9iU bJ2cdMxsfLBaD3dmX0FuVqLpBwYCxmBRTvIrrBQyOiw6hze3h8onU3Xsmm9VLs6X e513kOushi4E9Rj1w362O6zEzMoVVuiMErhHjGZWXo7BHvWzHL1Dg36UftOfCxKn lluAx+5y3Fs9lQg41RoQq07fkMQL7C8ROal83fYIt3QmmMgl/J+lmhrhoUqPVu6i EmQuBGiPMqc8H6yyzOl3vCxHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUydyq4c7Z beR6hKYQn3hrTVtmdwQwHwYDVR0jBBgwFoAUqB0VXKQErkFFeBrwXrU6Ehni4GUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMUI3L0ZDQzMzNENDMUU2 QjExRUZBQzBFOTE0RUM0RjlBRTAyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRH VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUIwVlhLUUVya0ZGZUJyd1hyVTZFaG5pNEdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz MUI3L0ZDQzMzNENDMUU2QjExRUZBQzBFOTE0RUM0RjlBRTAyL3FCMFZYS1FFcmtG RmVCcndYclU2RWhuaTRHVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJIYPAsxVVgvhDxbFtrpaSgZ5kMvWeBi63Clemw28o3d5282ua3uEaD IapvH1Lyn6QIpSKb0luLJinV3spa637fNY5lC/r9OJZInqWFfnulAVqB99IIKINQ dMsH76vaVUvQ2fvlsD0ZTJygaHB1OGdKEXHC91fT1aWpgsAAlGwP5EKPoRrc88yQ GO863TM85SvVE0DwAcZctPy66CY9ixv7Iyckhas9bdy7KwxTkj6zy1h6SIpfhsqO b36UVJfn57MlWI0fn9Sm+4oAf5MR/DCjAuac5Gpx151/9kgEG0lvZu4JJ+X46XeH X4URBvFqbJZEouYenkQEuEDCNNsPIpY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:25 2024 by rpki-client on console-ams.rpki-client.org