$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: C2DxEAj4HJeNvXqnWLA4XgQw+zIs/n5dA8RJfYvlENU= Subject key identifier: 1C:55:1F:8B:85:0A:A7:E2:75:A4:E6:8D:DE:42:9D:AF:29:3C:66:73 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 04D3 Signing time: Fri 22 Nov 2024 23:21:08 +0000 Manifest this update: Fri 22 Nov 2024 23:21:07 +0000 Manifest next update: Fri 29 Nov 2024 23:21:07 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: Rfx3msndxBWPnr+MHCgZg8+8Z1vQybNVM1358/8G6As=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: hZNj0hXIhx7iHvLN1BguzuArYcQdXQGnTsHHjJIXTSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Nov 22 23:21:07 2024 GMT Not After : Nov 29 23:21:07 2024 GMT Subject: CN=674111e4-d96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:59:cc:da:55:fa:5c:68:d5:a2:8e:98:49: e6:85:6e:6c:f4:63:6b:8d:fe:6e:b2:88:c0:45:e0: f8:f7:dc:e7:75:da:59:cd:62:98:40:31:39:91:bf: 50:58:f5:31:fc:b7:b7:b3:43:b4:5f:56:46:5a:ec: 9e:f2:8d:2e:46:e5:72:9a:5c:59:0e:d6:01:6d:c2: b0:27:74:c9:df:b4:6f:49:b9:6b:a9:d4:c8:0e:11: 22:66:21:00:7c:c7:06:d7:17:ff:68:50:af:4e:67: 8a:fa:b7:3f:2c:ff:55:cf:d8:11:50:da:77:b8:bb: b6:50:d5:a6:ce:19:60:63:bf:96:78:e2:49:d3:00: da:1a:c5:0e:63:3d:b5:b8:c2:82:a0:c9:b1:16:78: 18:0f:1c:08:c5:02:ea:fd:69:a3:3d:11:68:b5:28: ae:51:d7:90:da:22:96:4e:6e:0b:37:de:b3:32:48: 47:c1:09:85:2b:e8:c5:ac:47:ae:ec:e8:0c:55:f4: dd:d5:e7:8c:ff:58:20:d2:fb:b1:6a:b6:f6:4c:0e: 04:0b:ce:91:35:2b:cb:4a:49:db:42:1e:1d:66:86: e6:bb:19:ae:45:76:0f:f7:0b:50:b1:99:99:e5:b5: 66:42:d3:54:b7:fd:9c:f7:0d:9d:05:6c:16:8f:1a: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:1F:8B:85:0A:A7:E2:75:A4:E6:8D:DE:42:9D:AF:29:3C:66:73 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:cc:e3:91:c9:3a:6e:e2:d1:b5:39:13:72:9e:e2:70:01:6f: 6e:f6:51:da:d9:5c:36:c7:27:1d:63:42:a6:84:32:aa:dd:16: 7c:59:75:af:17:23:78:73:75:81:1f:31:73:40:fb:4e:03:46: 54:15:5a:20:0c:73:a6:94:75:3b:b2:29:16:3e:0d:0d:1c:c8: 7f:20:ed:e7:c0:a3:38:99:1a:10:84:f1:38:21:bc:8c:ed:84: 69:39:88:e2:78:17:42:71:65:19:23:df:28:f1:95:c4:3f:14: fc:a2:6d:41:84:38:eb:e4:ce:43:c0:ba:cf:b3:d0:ef:c8:f7: 1f:f0:c7:0c:08:4a:3b:b3:67:5a:38:01:da:1d:ae:f3:2b:91: e8:13:04:af:db:a1:09:75:93:ba:e9:59:3c:6a:6d:c0:02:17: 8e:f7:86:16:ee:a5:58:fc:14:36:3d:62:59:1c:47:0e:62:fb: 17:2e:d1:99:70:c5:96:f0:79:8b:13:3b:c8:33:43:75:8f:af: 6f:8f:79:55:92:81:bf:09:2e:4b:b9:68:40:7a:d6:38:57:b7: ad:f6:23:96:ca:6d:dc:f8:4a:15:ec:3e:a4:45:df:1c:c3:13: 2f:d5:e3:fa:2f:8e:d4:43:27:1d:37:bb:29:7c:18:a7:dc:a4: 90:e2:b7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjQxMTIyMjMyMTA3WhcNMjQxMTI5MjMyMTA3WjAYMRYwFAYD VQQDEw02NzQxMTFlNC1kOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmpZzNpV+lxo1aKOmEnmhW5s9GNrjf5usojAReD499znddpZzWKYQDE5kb9Q WPUx/Le3s0O0X1ZGWuye8o0uRuVymlxZDtYBbcKwJ3TJ37RvSblrqdTIDhEiZiEA fMcG1xf/aFCvTmeK+rc/LP9Vz9gRUNp3uLu2UNWmzhlgY7+WeOJJ0wDaGsUOYz21 uMKCoMmxFngYDxwIxQLq/WmjPRFotSiuUdeQ2iKWTm4LN96zMkhHwQmFK+jFrEeu 7OgMVfTd1eeM/1gg0vuxarb2TA4EC86RNSvLSknbQh4dZobmuxmuRXYP9wtQsZmZ 5bVmQtNUt/2c9w2dBWwWjxoJnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxVH4uF CqfidaTmjd5Cna8pPGZzMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKzOORyTpu4tG1ORNynuJwAW9u9lHa2Vw2xycdY0KmhDKq3RZ8WXWv FyN4c3WBHzFzQPtOA0ZUFVogDHOmlHU7sikWPg0NHMh/IO3nwKM4mRoQhPE4IbyM 7YRpOYjieBdCcWUZI98o8ZXEPxT8om1BhDjr5M5DwLrPs9DvyPcf8McMCEo7s2da OAHaHa7zK5HoEwSv26EJdZO66Vk8am3AAheO94YW7qVY/BQ2PWJZHEcOYvsXLtGZ cMWW8HmLEzvIM0N1j69vj3lVkoG/CS5LuWhAetY4V7et9iOWym3c+EoV7D6kRd8c wxMv1eP6L47UQycdN7spfBin3KSQ4reS -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org