$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: /sC6TRbpSn8L3x9LlpbRz0a76FuHa3xjuaiF0OijVAA= Subject key identifier: B7:FA:42:DB:20:13:31:D9:A2:93:9D:AF:F6:93:11:42:11:01:68:B8 Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 035B Signing time: Sat 23 Nov 2024 00:32:13 +0000 Manifest this update: Sat 23 Nov 2024 00:32:13 +0000 Manifest next update: Sat 30 Nov 2024 00:32:13 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: 5e7XXGEGGOXr4gJlUfHZ+CC45fyKM5ZY0d5HWeFrI0Y=) 2: CFA920BC8FB811EC92086311C4F9AE02.roa (hash: 1OBuY5MU83EkVfnkNYYd7uHi9h21/DvPnEdx+2Gx7SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Nov 23 00:32:13 2024 GMT Not After : Nov 30 00:32:13 2024 GMT Subject: CN=6741228d-f305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:cd:23:e2:66:ec:f4:56:d2:f9:0d:10:72: 7b:ea:3e:b9:4a:62:d6:a6:60:41:c9:96:82:1c:99: 82:f2:a3:9c:8f:59:8a:0b:4c:7d:af:62:6d:6e:e5: a5:fa:51:bb:14:0a:4b:17:d5:15:25:6e:d9:1e:78: 8d:63:03:c1:31:00:c6:21:3e:8d:52:6b:5a:ff:ab: 45:9f:5d:85:91:b5:2c:45:cc:6d:3c:d5:21:54:c4: 0c:8a:fe:47:75:20:9f:2c:72:9a:dd:5f:3c:86:1d: 14:7f:4b:a3:ed:62:f8:4c:43:fc:c6:20:97:9e:9d: 1c:d0:5b:b2:2c:4d:89:41:4c:33:89:3a:fc:11:07: df:08:ad:51:7b:0e:86:b4:4f:a6:fd:6e:e4:7a:bf: f3:7c:98:8f:d3:94:33:43:2c:e5:6f:08:95:62:b4: 18:b9:1a:54:ab:8f:9d:9e:7b:64:dd:91:96:cd:a6: ae:8d:af:a1:ab:01:ff:f3:6c:45:23:ea:d1:db:1a: cb:97:22:a6:b1:15:eb:31:35:30:cc:57:b9:6e:f2: 3d:0f:a0:cf:d6:a4:95:e7:b9:f7:d8:cd:f6:36:69: 82:1d:88:a8:67:66:b8:6b:c5:7d:0c:54:a4:b3:92: 37:1c:b5:29:71:76:e9:d8:c1:60:bf:b3:97:28:91: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FA:42:DB:20:13:31:D9:A2:93:9D:AF:F6:93:11:42:11:01:68:B8 X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dd:b8:b2:52:15:95:9c:c4:d3:33:e1:bc:d8:ff:1c:22:71: 22:2f:00:df:00:09:d9:e1:77:3c:59:b7:8f:4e:95:f3:8d:03: 4e:c6:2c:7c:98:c3:e1:bb:00:00:1d:16:33:79:33:ec:69:9c: 9d:2a:f5:43:e2:f3:47:3a:e5:c3:27:4d:11:b3:3b:9f:fd:fa: 21:ae:e8:4a:dc:4b:35:13:60:a9:00:4f:d1:1f:c5:13:fe:7c: eb:c0:81:cf:70:81:39:89:26:b2:00:00:03:5e:ce:9e:47:ce: ce:ca:0f:b2:27:a8:b2:bd:aa:bb:cb:4d:b1:95:b7:92:39:9e: c1:84:56:d8:ca:97:94:06:8a:6a:7c:e9:f5:80:f9:aa:dd:6e: 01:73:37:55:50:b1:38:c2:09:55:28:a9:ad:43:4e:2a:5b:a2: 2d:71:78:af:de:dd:48:17:78:66:d4:e3:4a:ee:2c:40:7a:64: e9:c3:a7:61:ce:71:44:d3:53:f8:fa:69:89:ff:3f:2c:cf:33: f6:ad:bf:de:85:04:be:3e:44:64:f3:43:26:c7:1d:d1:91:ef: 42:2e:f9:61:1b:56:38:8c:e8:ab:a4:6f:32:b2:ad:2a:65:65: 2e:b1:7d:51:4c:ed:aa:12:df:65:53:8c:8b:39:bd:bb:93:d0: ba:75:21:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjQxMTIzMDAzMjEzWhcNMjQxMTMwMDAzMjEzWjAYMRYwFAYD VQQDEw02NzQxMjI4ZC1mMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4brNI+Jm7PRW0vkNEHJ76j65SmLWpmBByZaCHJmC8qOcj1mKC0x9r2JtbuWl +lG7FApLF9UVJW7ZHniNYwPBMQDGIT6NUmta/6tFn12FkbUsRcxtPNUhVMQMiv5H dSCfLHKa3V88hh0Uf0uj7WL4TEP8xiCXnp0c0FuyLE2JQUwziTr8EQffCK1Rew6G tE+m/W7ker/zfJiP05QzQyzlbwiVYrQYuRpUq4+dnntk3ZGWzaauja+hqwH/82xF I+rR2xrLlyKmsRXrMTUwzFe5bvI9D6DP1qSV57n32M32NmmCHYioZ2a4a8V9DFSk s5I3HLUpcXbp2MFgv7OXKJHCYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf6Qtsg EzHZopOdr/aTEUIRAWi4MB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP3biyUhWVnMTTM+G82P8cInEiLwDfAAnZ4Xc8WbePTpXzjQNOxix8 mMPhuwAAHRYzeTPsaZydKvVD4vNHOuXDJ00Rszuf/fohruhK3Es1E2CpAE/RH8UT /nzrwIHPcIE5iSayAAADXs6eR87Oyg+yJ6iyvaq7y02xlbeSOZ7BhFbYypeUBopq fOn1gPmq3W4BczdVULE4wglVKKmtQ04qW6ItcXiv3t1IF3hm1ONK7ixAemTpw6dh znFE01P4+mmJ/z8szzP2rb/ehQS+PkRk80Mmxx3Rke9CLvlhG1Y4jOirpG8ysq0q ZWUusX1RTO2qEt9lU4yLOb27k9C6dSGN -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org