$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json) Hash identifier: 1FBoUkhbX8+Jqwfalo5XRDNKRrGAyEQZkWNpP/BmDeM= Subject key identifier: 89:62:10:A1:09:D6:33:DB:DF:7D:16:C7:62:7E:28:02:9B:A8:E8:CB Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft Manifest number: 09CE Signing time: Fri 22 Nov 2024 19:43:08 +0000 Manifest this update: Fri 22 Nov 2024 19:43:08 +0000 Manifest next update: Fri 29 Nov 2024 19:43:08 +0000 Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: u9mpwnowRvr3iZtpxy/DrtAhRyCTy7X0/7ZZ663PNGQ=) 2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: RbBtMUxEM5O1piu47myWbtaMm/ZIwxdcYTXVUwgD12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: Nov 22 19:43:08 2024 GMT Not After : Nov 29 19:43:08 2024 GMT Subject: CN=6740decc-b734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9d:ed:ba:f1:03:35:f4:e2:ff:19:47:45:b0: 94:58:0b:5e:d1:4d:78:43:79:b2:37:41:8f:d4:0f: 3d:5c:0d:41:80:cf:1d:76:5e:60:1e:2d:37:aa:2b: f9:1e:df:8b:4d:ad:1b:4b:98:4a:d1:9e:08:0e:47: 96:b1:fa:29:39:fe:a3:4a:89:d0:c8:88:6c:d4:b1: b4:49:0d:1c:5a:ee:5b:ac:17:02:a4:e5:f4:31:70: 2a:43:3b:92:1d:21:6c:b0:95:42:90:d2:ac:b6:df: df:2b:8a:36:64:bd:1f:44:d4:21:1c:88:6f:a9:bf: 50:92:29:5c:a4:0e:6d:65:2f:46:c6:56:e4:3c:c1: 70:39:1e:d4:f4:59:a2:ad:58:07:30:7c:7f:59:e7: 4b:21:69:4d:3e:77:cb:87:00:f5:8b:b1:46:c3:6f: 17:62:75:67:9c:47:53:59:45:7f:1e:e6:bf:a8:fd: c5:e7:13:9d:94:a5:fb:98:d4:d6:98:43:25:57:f8: 9c:ac:c7:ca:40:e0:7e:8d:33:cd:43:8d:93:07:ac: e4:05:b4:3e:74:b6:01:63:95:d2:78:1e:00:53:5b: 5a:de:71:fb:74:52:28:2d:c2:d8:04:a1:79:91:fd: be:4e:70:01:28:d6:47:a6:f1:5d:05:5d:2d:90:82: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:10:A1:09:D6:33:DB:DF:7D:16:C7:62:7E:28:02:9B:A8:E8:CB X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:0c:c9:29:da:9f:e2:4e:58:51:02:34:dc:c6:d1:6e:5f:14: 66:f7:21:8e:f5:23:9f:e9:31:4c:54:3e:26:20:c4:23:30:bc: 13:51:b2:66:05:6b:29:3e:c0:f6:7e:c0:70:4f:c1:da:99:f3: 6c:62:45:f0:9f:f3:1d:74:62:61:c5:0c:c7:c0:1e:f5:b2:cc: 07:d8:6f:eb:37:60:17:92:f5:c5:c3:fb:46:47:d0:e4:53:6b: 25:2f:7a:bc:61:fa:2b:87:20:0c:0f:6a:98:b6:bc:e3:00:ee: dd:cc:9b:f7:9b:9d:0f:c2:4e:95:29:cf:c7:85:54:03:ce:09: a2:5a:22:c2:5b:7b:f8:0c:07:93:33:01:41:43:ce:ef:f1:3c: dc:83:4b:6c:e4:ce:08:ea:ed:1b:f9:11:f9:50:47:bf:10:a5: 32:8b:0d:c2:91:78:a8:5a:d5:03:b4:4b:73:9c:97:71:4d:d5: d8:e6:4b:28:6d:02:51:fa:a2:7b:be:66:96:26:d7:3a:d1:60: 25:8e:20:30:02:41:67:1e:3a:3d:3b:20:09:6b:6d:b7:c2:1a: e1:be:10:08:31:01:fc:33:a4:11:fc:bf:81:da:23:ae:87:90: 85:97:b2:1a:6e:df:73:49:0d:05:98:ea:05:d9:91:b0:5e:36: 4d:61:7a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjQxMTIyMTk0MzA4WhcNMjQxMTI5MTk0MzA4WjAYMRYwFAYD VQQDEw02NzQwZGVjYy1iNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4J3tuvEDNfTi/xlHRbCUWAte0U14Q3myN0GP1A89XA1BgM8ddl5gHi03qiv5 Ht+LTa0bS5hK0Z4IDkeWsfopOf6jSonQyIhs1LG0SQ0cWu5brBcCpOX0MXAqQzuS HSFssJVCkNKstt/fK4o2ZL0fRNQhHIhvqb9QkilcpA5tZS9GxlbkPMFwOR7U9Fmi rVgHMHx/WedLIWlNPnfLhwD1i7FGw28XYnVnnEdTWUV/Hua/qP3F5xOdlKX7mNTW mEMlV/icrMfKQOB+jTPNQ42TB6zkBbQ+dLYBY5XSeB4AU1ta3nH7dFIoLcLYBKF5 kf2+TnABKNZHpvFdBV0tkIKaawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIliEKEJ 1jPb330Wx2J+KAKbqOjLMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJENy9GOTMyMTkxMjZDQjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlq dHlpRE8tQ3RaaU41YnNpaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDODMkp2p/iTlhRAjTcxtFuXxRm9yGO9SOf6TFMVD4mIMQjMLwTUbJm BWspPsD2fsBwT8HamfNsYkXwn/MddGJhxQzHwB71sswH2G/rN2AXkvXFw/tGR9Dk U2slL3q8YforhyAMD2qYtrzjAO7dzJv3m50Pwk6VKc/HhVQDzgmiWiLCW3v4DAeT MwFBQ87v8Tzcg0ts5M4I6u0b+RH5UEe/EKUyiw3CkXioWtUDtEtznJdxTdXY5kso bQJR+qJ7vmaWJtc60WAljiAwAkFnHjo9OyAJa223whrhvhAIMQH8M6QR/L+B2iOu h5CFl7Iabt9zSQ0FmOoF2ZGwXjZNYXpv -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org