$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: KfFYJxPEZ7wO4Z7tb+Bnze/AhZwDSvKwQZDfLRlX2Fo= Subject key identifier: B6:06:76:87:0B:70:95:F5:C4:95:7B:6B:B2:67:CB:83:1C:F1:7C:32 Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 03E0 Signing time: Thu 21 Nov 2024 00:07:19 +0000 Manifest this update: Thu 21 Nov 2024 00:07:19 +0000 Manifest next update: Thu 28 Nov 2024 00:07:19 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: kuc0GiV2xO23ApT8eemesnkymilyJ04Nw4Mgaor5ouI=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: R0Eg5VTlGn4g/E+8sB7ehm+T8ICQ6nRwL2adzlDHX6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Nov 21 00:07:19 2024 GMT Not After : Nov 28 00:07:19 2024 GMT Subject: CN=673e79b7-8d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:7d:aa:c5:71:2f:a7:d2:f1:65:af:f2:1c: 49:bb:62:d0:8c:d5:42:52:83:a6:24:40:eb:97:20: 94:e2:be:2f:44:18:4f:cf:4a:ef:d5:ca:68:e1:7d: 83:0a:a3:5d:72:63:1d:e5:02:32:58:db:0b:17:71: 8f:cc:9d:4d:cf:e1:95:c3:a2:b4:ba:dd:e8:1b:cc: f8:8a:8f:de:7b:04:58:85:35:26:d5:bb:e8:d1:08: a7:f6:c3:5b:67:91:49:91:45:9b:c7:e7:ff:66:a9: d4:33:b0:68:2c:9e:a0:d3:60:09:79:29:26:31:ef: 44:1e:e3:58:6b:73:d1:28:c0:9c:bf:7e:09:cf:1f: f7:4f:4d:36:4e:21:42:6b:0c:6f:11:1d:d0:71:f1: a5:cf:f0:cb:d5:c9:7b:29:ca:0b:c7:a2:d5:d4:d1: 08:35:76:8b:ce:3c:2b:c2:e5:1b:52:17:fe:38:4e: 0b:c5:c7:8d:b1:6b:2c:4b:a5:7a:0c:ad:3f:ac:04: e6:8b:15:90:58:4a:fc:90:d3:53:9c:49:36:34:a5: 4e:4b:e1:94:e9:09:a4:bd:18:0a:69:3e:dd:8e:40: 89:33:b7:d8:bf:21:01:9c:e1:7c:56:43:af:57:35: e6:98:1b:42:6e:19:5f:42:5d:54:a4:f5:1d:12:50: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:76:87:0B:70:95:F5:C4:95:7B:6B:B2:67:CB:83:1C:F1:7C:32 X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:68:da:47:64:b2:00:8b:f4:61:60:e8:7c:d8:f4:63:32:e0: 34:9c:af:84:f5:75:6b:39:71:79:a0:da:7a:19:4c:ae:6b:d8: 33:44:a1:d0:86:10:f5:d5:8c:84:e1:7a:6d:f2:5a:67:a2:33: 58:9c:db:21:c6:3d:21:70:31:1d:20:c1:42:e3:07:de:aa:b7: b6:88:24:75:ba:5e:e3:94:14:d1:c2:84:be:ff:a5:84:2d:8a: 0f:24:cf:6b:0e:67:65:70:61:08:cb:9d:12:17:6b:19:cc:e4: 0f:e5:ac:e7:c6:ea:39:57:89:8b:17:9f:98:12:6a:8f:7f:83: 74:f1:fb:fc:20:95:01:49:f1:f1:14:c8:5f:33:eb:17:e8:44: f2:68:76:c7:65:2a:da:5a:d4:96:f9:3b:43:db:34:cf:92:45: ce:fd:2f:79:fe:00:84:82:d7:80:5f:f8:db:e6:14:d3:62:55: 75:bd:fd:58:05:36:99:19:37:85:f2:58:e8:c2:41:9f:f7:40: 2c:9a:67:01:15:0e:a7:dd:49:a1:73:8f:07:6b:1f:36:74:f9: 36:ab:55:08:5c:ed:29:bb:e0:f1:55:5c:27:ff:04:de:c3:bc: a9:4e:dd:75:93:3e:b0:ce:f2:43:38:cb:21:e8:98:18:8f:4c: d0:c2:78:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjQxMTIxMDAwNzE5WhcNMjQxMTI4MDAwNzE5WjAYMRYwFAYD VQQDEw02NzNlNzliNy04ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cJ9qsVxL6fS8WWv8hxJu2LQjNVCUoOmJEDrlyCU4r4vRBhPz0rv1cpo4X2D CqNdcmMd5QIyWNsLF3GPzJ1Nz+GVw6K0ut3oG8z4io/eewRYhTUm1bvo0Qin9sNb Z5FJkUWbx+f/ZqnUM7BoLJ6g02AJeSkmMe9EHuNYa3PRKMCcv34Jzx/3T002TiFC awxvER3QcfGlz/DL1cl7KcoLx6LV1NEINXaLzjwrwuUbUhf+OE4LxceNsWssS6V6 DK0/rATmixWQWEr8kNNTnEk2NKVOS+GU6QmkvRgKaT7djkCJM7fYvyEBnOF8VkOv VzXmmBtCbhlfQl1UpPUdElDbswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYGdocL cJX1xJV7a7Jny4Mc8XwyMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeaNpHZLIAi/RhYOh82PRjMuA0nK+E9XVrOXF5oNp6GUyua9gzRKHQ hhD11YyE4Xpt8lpnojNYnNshxj0hcDEdIMFC4wfeqre2iCR1ul7jlBTRwoS+/6WE LYoPJM9rDmdlcGEIy50SF2sZzOQP5aznxuo5V4mLF5+YEmqPf4N08fv8IJUBSfHx FMhfM+sX6ETyaHbHZSraWtSW+TtD2zTPkkXO/S95/gCEgteAX/jb5hTTYlV1vf1Y BTaZGTeF8ljowkGf90AsmmcBFQ6n3Umhc48Hax82dPk2q1UIXO0pu+DxVVwn/wTe w7ypTt11kz6wzvJDOMsh6JgYj0zQwngG -----END CERTIFICATE-----Generated at Thu Nov 21 01:32:00 2024 by rpki-client on console-fra.rpki-client.org