$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: bdoHGcf1ByzTm9WQVYkNEv/RfhOegswvYJpCI39RjC4= Subject key identifier: 73:A4:99:09:BF:B3:25:4B:FE:92:D8:20:4B:FD:BD:7E:DC:D2:33:BE Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 344F Signing time: Fri 22 Nov 2024 14:47:25 +0000 Manifest this update: Fri 22 Nov 2024 14:47:24 +0000 Manifest next update: Fri 29 Nov 2024 14:47:24 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: dPeHj6s1PCjMdTPUvaO2AhbD7bHu/Tks+yylMZako6M=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Nov 22 14:47:24 2024 GMT Not After : Nov 29 14:47:24 2024 GMT Subject: CN=6740997c-8b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:9b:04:f4:7e:92:9d:11:2f:d3:52:b8:8f: fd:37:fc:19:89:dc:c2:75:38:5b:22:23:fa:78:02: e0:50:9d:17:a2:a9:20:66:ef:bc:92:95:b0:bf:40: fd:62:e3:69:72:a4:20:f9:24:5d:4a:a1:f8:f7:d1: ed:56:1c:e9:6a:47:e2:38:47:b3:4a:89:90:2a:a8: 12:e6:6d:c1:30:8f:7a:10:0f:03:d0:76:38:d4:4b: 16:1d:8b:29:1c:d9:4e:75:17:89:15:01:07:ab:e3: f0:fa:fa:c9:05:8a:b3:38:07:b7:a8:8d:c0:f4:7d: f1:7f:03:6f:99:eb:cc:66:09:1a:f4:8c:76:eb:97: 1c:4a:d1:31:ee:22:fc:c0:de:fc:95:8a:89:60:be: bf:4c:c3:e0:90:44:92:3d:f2:fa:76:65:82:e2:50: 38:4b:cb:79:fe:fd:3b:e0:34:d5:93:1c:08:03:c2: 9a:15:51:24:76:c8:48:6d:be:64:19:05:12:07:03: 8f:14:75:ec:37:9f:a4:79:ba:3c:cb:26:ce:6c:09: 69:a0:d6:92:1d:ce:ad:94:b7:3c:d5:42:04:9a:ca: a8:1f:bf:00:70:48:0e:8e:1f:f5:12:88:78:41:3e: 30:80:4d:89:2e:20:5f:d6:5e:61:c8:41:c6:3d:49: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:99:09:BF:B3:25:4B:FE:92:D8:20:4B:FD:BD:7E:DC:D2:33:BE X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:eb:b5:66:e9:9b:99:81:3a:77:71:88:47:6e:96:d6:20: 63:10:e2:b9:f0:d7:a7:1f:c3:d3:87:aa:75:16:ba:4b:04:9e: 5a:78:f5:03:0f:c8:a9:35:29:5e:ab:38:12:ca:74:5d:19:22: 0d:64:7c:e9:f7:c8:f1:75:ff:6a:2e:f2:4a:b7:4a:5b:9c:3c: fb:67:66:5b:53:c4:fc:85:18:9a:ee:ce:09:86:13:e7:60:39: 5f:5b:8a:79:07:5e:7d:6b:24:16:c3:45:75:99:ca:1d:29:75: 16:d9:66:56:39:6f:1f:fe:45:fe:96:2e:54:32:a9:98:67:24: e5:4c:9f:d6:30:f5:ee:af:23:76:7f:4d:31:55:32:94:71:e0: 4c:a4:20:b5:d4:85:10:e1:9f:53:06:f6:9b:8c:78:b2:a1:2c: e7:0f:1c:d3:a5:2f:ae:15:6f:81:e3:fc:92:a0:04:96:3d:17: 91:f3:9a:bf:6d:c6:82:99:62:38:11:d3:72:36:d3:a7:fd:69: 51:f3:de:1a:dd:de:f9:9e:33:4b:e1:78:a4:36:f3:c4:1a:aa: 56:c8:24:ac:e3:b1:27:11:a7:2b:29:4b:c4:e9:a7:bd:a6:1d: d0:de:c9:7f:71:59:70:33:a1:42:36:0f:31:26:d8:72:79:c9: 58:76:3e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjQxMTIyMTQ0NzI0WhcNMjQxMTI5MTQ0NzI0WjAYMRYwFAYD VQQDEw02NzQwOTk3Yy04YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmCbBPR+kp0RL9NSuI/9N/wZidzCdThbIiP6eALgUJ0XoqkgZu+8kpWwv0D9 YuNpcqQg+SRdSqH499HtVhzpakfiOEezSomQKqgS5m3BMI96EA8D0HY41EsWHYsp HNlOdReJFQEHq+Pw+vrJBYqzOAe3qI3A9H3xfwNvmevMZgka9Ix265ccStEx7iL8 wN78lYqJYL6/TMPgkESSPfL6dmWC4lA4S8t5/v074DTVkxwIA8KaFVEkdshIbb5k GQUSBwOPFHXsN5+kebo8yybObAlpoNaSHc6tlLc81UIEmsqoH78AcEgOjh/1Eoh4 QT4wgE2JLiBf1l5hyEHGPUnziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOkmQm/ syVL/pLYIEv9vX7c0jO+MB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuaeu1ZumbmYE6d3GIR26W1iBjEOK58NenH8PTh6p1FrpLBJ5aePUD D8ipNSleqzgSynRdGSINZHzp98jxdf9qLvJKt0pbnDz7Z2ZbU8T8hRia7s4JhhPn YDlfW4p5B159ayQWw0V1mcodKXUW2WZWOW8f/kX+li5UMqmYZyTlTJ/WMPXuryN2 f00xVTKUceBMpCC11IUQ4Z9TBvabjHiyoSznDxzTpS+uFW+B4/ySoASWPReR85q/ bcaCmWI4EdNyNtOn/WlR894a3d75njNL4XikNvPEGqpWyCSs47EnEacrKUvE6ae9 ph3Q3sl/cVlwM6FCNg8xJthyeclYdj5+ -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org