$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: 3F8zhvxULlC7zyx41sclHikLAX9JP1isc1tPlon5uN8= Subject key identifier: 16:A2:79:64:B1:8C:DD:A4:E6:EB:E5:6C:A4:0D:54:F0:11:C9:9F:E0 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 1161 Signing time: Fri 22 Nov 2024 17:12:02 +0000 Manifest this update: Fri 22 Nov 2024 17:12:01 +0000 Manifest next update: Fri 29 Nov 2024 17:12:01 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: Dl/3lJBBXTP3/Kjf1hoLrq1+ETiYf+1Dac8erZVyWe0=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: WdopqEhvTQ3vKYnwSSQrxk36f/vPLbjR5paNeXudr14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Nov 22 17:12:01 2024 GMT Not After : Nov 29 17:12:01 2024 GMT Subject: CN=6740bb61-32c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:b3:dc:47:60:a9:a0:11:c9:ca:07:eb:f8: a3:8b:2e:08:41:db:88:63:e4:b4:f7:dd:da:0d:b5: f9:97:15:95:ae:64:5c:08:ce:d8:9d:08:71:35:2e: ce:ff:10:84:0c:03:09:2d:3b:f6:a5:db:b5:bc:1d: 13:f8:76:42:bc:05:bd:71:c4:43:4b:e7:8e:4c:d9: 14:27:e8:d3:88:bd:bf:c6:74:b4:3d:67:56:97:f5: e8:b0:f0:28:9d:4d:c8:1c:12:05:1a:f4:71:b3:c4: 8e:6f:39:b7:a5:57:d1:07:2c:a1:73:db:92:ba:07: 6a:af:63:8b:bb:7c:91:16:9d:56:07:2c:18:19:9b: 73:bc:61:92:17:50:b1:12:41:af:a9:96:2f:7b:9e: a0:1d:21:d1:44:f4:d6:f7:f9:68:39:44:82:10:c0: fa:97:b0:66:97:88:22:b0:51:32:bc:c8:bb:c8:03: 48:a5:1b:8a:c6:f0:ca:df:82:36:ff:cf:b5:7b:23: 56:6b:76:64:77:7e:fd:8e:2c:e3:89:f4:90:f0:0a: 13:39:c6:62:ff:e9:4a:53:81:84:a3:2e:24:a7:d5: a1:5b:fa:1a:28:2f:ef:09:2c:44:8c:1b:1c:ac:e7: 4f:39:68:f0:16:9e:9b:7a:14:29:9e:f4:1a:f3:52: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:79:64:B1:8C:DD:A4:E6:EB:E5:6C:A4:0D:54:F0:11:C9:9F:E0 X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5a:5b:fc:45:23:23:e5:a6:f3:f5:85:5c:e9:a4:59:4c:60: 00:b5:97:96:c0:cb:99:7e:6b:a7:4d:59:27:c0:18:cb:70:e9: 25:fb:92:5d:76:c3:2e:fa:b4:ca:42:50:61:52:3e:fd:f8:95: ce:60:a9:44:d2:90:ab:b6:8f:53:0c:bc:ae:21:70:2e:b1:86: 2d:bc:91:02:17:ae:93:d5:60:ef:37:58:c4:49:cc:8c:f7:dd: 6b:2a:46:79:87:5e:b6:a1:69:38:53:a2:41:bd:94:0e:2d:59: 0d:9e:8c:39:11:77:7d:ab:67:f5:b2:1b:b0:90:c7:25:03:3e: 1f:b7:c3:03:be:79:72:78:cb:9f:d1:fc:e0:ed:f7:4d:64:49: bb:9b:89:eb:62:2c:40:8d:2e:31:bb:35:57:92:d9:48:48:48: 52:12:a3:0e:8c:a6:2c:a5:3f:71:a0:65:13:3d:98:ff:b8:04: ed:1b:8d:6d:03:5a:1e:dc:d9:e9:1f:32:1d:3b:08:32:80:cf: 21:02:6c:c1:b4:5f:ef:8a:e1:51:24:fc:3f:e5:01:60:23:b0: 71:de:02:b1:48:5a:c1:9f:ee:46:a6:2b:6a:f4:7c:76:b2:33: 4a:02:05:05:db:34:70:3e:47:fd:ce:ca:be:9f:f2:9b:04:24: 19:e0:cf:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjQxMTIyMTcxMjAxWhcNMjQxMTI5MTcxMjAxWjAYMRYwFAYD VQQDEw02NzQwYmI2MS0zMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPGz3EdgqaARycoH6/ijiy4IQduIY+S0993aDbX5lxWVrmRcCM7YnQhxNS7O /xCEDAMJLTv2pdu1vB0T+HZCvAW9ccRDS+eOTNkUJ+jTiL2/xnS0PWdWl/XosPAo nU3IHBIFGvRxs8SObzm3pVfRByyhc9uSugdqr2OLu3yRFp1WBywYGZtzvGGSF1Cx EkGvqZYve56gHSHRRPTW9/loOUSCEMD6l7Bml4gisFEyvMi7yANIpRuKxvDK34I2 /8+1eyNWa3Zkd379jizjifSQ8AoTOcZi/+lKU4GEoy4kp9WhW/oaKC/vCSxEjBsc rOdPOWjwFp6behQpnvQa81JorwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaieWSx jN2k5uvlbKQNVPARyZ/gMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuWlv8RSMj5abz9YVc6aRZTGAAtZeWwMuZfmunTVknwBjLcOkl+5Jd dsMu+rTKQlBhUj79+JXOYKlE0pCrto9TDLyuIXAusYYtvJECF66T1WDvN1jEScyM 991rKkZ5h162oWk4U6JBvZQOLVkNnow5EXd9q2f1shuwkMclAz4ft8MDvnlyeMuf 0fzg7fdNZEm7m4nrYixAjS4xuzVXktlISEhSEqMOjKYspT9xoGUTPZj/uATtG41t A1oe3NnpHzIdOwgygM8hAmzBtF/viuFRJPw/5QFgI7Bx3gKxSFrBn+5Gpitq9Hx2 sjNKAgUF2zRwPkf9zsq+n/KbBCQZ4M/b -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org