$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: TICOt7/S8p/QHNPoWRrKg98NK4SPw+Ddg5AXA64syV0= Subject key identifier: 1D:24:00:4C:68:A7:67:15:0C:ED:94:EA:BE:8A:2A:D6:3C:B0:E0:6D Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 05DD Signing time: Fri 22 Nov 2024 22:28:41 +0000 Manifest this update: Fri 22 Nov 2024 22:28:40 +0000 Manifest next update: Fri 29 Nov 2024 22:28:40 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: shXbGW5Tpv/T75jUW4+4Ldj3WJW23FE5DChU+si09Pk=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Nov 22 22:28:40 2024 GMT Not After : Nov 29 22:28:40 2024 GMT Subject: CN=67410599-ad7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:5f:ea:9c:43:5c:ae:35:59:1b:5d:c5:07: 30:5c:82:57:f4:5d:f2:be:d0:bb:14:0d:0a:6c:3d: d0:8d:0f:ac:55:45:7f:15:bf:62:ee:61:e7:ca:c5: 4a:61:20:52:64:b3:e7:11:cf:51:2c:20:07:5c:d3: 2c:e5:91:f4:a5:52:8f:06:1a:06:ac:67:07:75:6a: a3:ae:22:97:c5:ca:a9:cb:7a:ca:1a:03:95:65:d1: 70:49:08:ee:a1:bf:5d:e9:96:38:8d:26:c6:47:30: 8b:fc:61:d7:53:a2:42:4e:a2:fd:04:47:d3:81:be: 5b:3d:1e:df:90:9f:ee:06:c8:ad:c8:0a:a8:c9:d6: 79:43:cf:f0:e8:06:19:c6:5b:7f:a9:af:80:f6:57: db:46:ba:ab:fb:c2:d0:cb:66:4c:cf:d4:d9:1e:98: 20:8e:dd:7e:3a:2c:43:86:de:c7:82:c2:68:1d:41: 5e:d6:2e:c4:31:c4:50:94:dd:d6:ef:8b:fb:96:92: f7:2a:58:bc:ce:27:42:79:53:4f:10:c9:79:e8:32: b6:bd:79:0b:13:ad:06:1c:36:8d:aa:36:e3:9b:cb: b7:c7:ae:c1:10:8e:9b:9b:41:f8:94:47:01:4c:7e: 9a:84:fd:93:57:95:d7:17:e4:90:f9:fa:38:3f:e8: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:00:4C:68:A7:67:15:0C:ED:94:EA:BE:8A:2A:D6:3C:B0:E0:6D X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:24:13:32:94:21:95:bd:12:57:19:4f:ac:bf:ab:b1:ae:73: af:2e:7a:a7:8f:df:35:01:59:ff:08:3e:c5:9d:48:23:81:d0: 5e:04:60:ae:1b:e1:23:fd:0f:c9:76:89:41:14:d6:f8:5a:86: 60:3b:c2:60:e9:f4:05:74:46:9a:37:b7:37:f7:86:64:fa:88: 59:ea:6d:f2:1b:ce:fe:9d:15:08:36:00:89:a2:f5:a3:6f:21: a3:79:69:ed:64:e2:02:b6:5f:45:58:c2:6b:41:3b:89:c6:0e: 08:c0:1f:4e:35:67:f6:0e:4f:22:50:1f:b6:6f:6f:05:68:80: 3a:9c:d5:16:e0:7d:19:45:61:d6:a9:16:05:77:6e:6d:15:f7: e8:87:a9:04:b6:9c:6a:8a:00:0c:50:87:53:b5:a3:aa:fd:a2: 7b:7c:1c:f8:5e:69:0b:21:2a:fa:30:71:f8:11:1b:dd:7c:1a: 51:01:8e:98:c0:d6:13:35:2c:f9:d5:2c:7a:be:5c:ff:1f:15: 0c:19:39:5d:35:ad:18:1a:5d:af:ff:2c:d1:9e:8b:36:c1:a2: d4:d6:d7:ed:00:a7:78:ec:d6:7d:5a:be:9d:14:9c:bf:8a:fe: 15:f3:f8:e0:be:ea:b7:57:31:28:01:92:5b:10:03:94:fb:36: ca:9a:84:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjQxMTIyMjIyODQwWhcNMjQxMTI5MjIyODQwWjAYMRYwFAYD VQQDEw02NzQxMDU5OS1hZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvctf6pxDXK41WRtdxQcwXIJX9F3yvtC7FA0KbD3QjQ+sVUV/Fb9i7mHnysVK YSBSZLPnEc9RLCAHXNMs5ZH0pVKPBhoGrGcHdWqjriKXxcqpy3rKGgOVZdFwSQju ob9d6ZY4jSbGRzCL/GHXU6JCTqL9BEfTgb5bPR7fkJ/uBsityAqoydZ5Q8/w6AYZ xlt/qa+A9lfbRrqr+8LQy2ZMz9TZHpggjt1+OixDht7HgsJoHUFe1i7EMcRQlN3W 74v7lpL3Kli8zidCeVNPEMl56DK2vXkLE60GHDaNqjbjm8u3x67BEI6bm0H4lEcB TH6ahP2TV5XXF+SQ+fo4P+iTcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0kAExo p2cVDO2U6r6KKtY8sOBtMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClJBMylCGVvRJXGU+sv6uxrnOvLnqnj981AVn/CD7FnUgjgdBeBGCu G+Ej/Q/JdolBFNb4WoZgO8Jg6fQFdEaaN7c394Zk+ohZ6m3yG87+nRUINgCJovWj byGjeWntZOICtl9FWMJrQTuJxg4IwB9ONWf2Dk8iUB+2b28FaIA6nNUW4H0ZRWHW qRYFd25tFffoh6kEtpxqigAMUIdTtaOq/aJ7fBz4XmkLISr6MHH4ERvdfBpRAY6Y wNYTNSz51Sx6vlz/HxUMGTldNa0YGl2v/yzRnos2waLU1tftAKd47NZ9Wr6dFJy/ iv4V8/jgvuq3VzEoAZJbEAOU+zbKmoQn -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org