$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: FvZ0HfnbDIccKCtgjNRFuUP4arhSqAmrgOBLJwu4sZc= Subject key identifier: 74:F5:D2:1A:A1:06:CF:60:C5:91:95:91:F5:3C:18:60:9D:51:7E:00 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 056E Signing time: Fri 22 Nov 2024 22:54:47 +0000 Manifest this update: Fri 22 Nov 2024 22:54:47 +0000 Manifest next update: Fri 29 Nov 2024 22:54:47 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: VpqgwsGz8BCteJ4EOJqUy8sUDyg98lKj8cS7Tkpw8m4=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: mYP163XzHdEMNgiwcSiPfRwS00U9oTzAfnu92cu9hyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Nov 22 22:54:47 2024 GMT Not After : Nov 29 22:54:47 2024 GMT Subject: CN=67410bb7-fb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:c2:85:02:6b:d1:1f:e7:3d:34:cd:c6:81: 83:ee:4f:6d:40:ac:e5:96:2b:89:cc:46:92:7f:6b: be:4c:1f:f2:f1:3f:72:0e:68:12:8a:ac:36:30:e8: 18:2d:1e:e9:e8:a4:60:48:3d:95:e4:4d:cb:96:93: 6f:3a:13:45:01:1b:28:2a:d6:ac:f2:5d:f8:6c:99: b4:86:a9:62:51:76:f7:d5:d4:61:45:f8:65:75:72: 84:7f:8e:84:bf:f1:88:74:b0:06:2f:4f:9a:9c:80: ee:5d:d1:2c:65:45:79:79:5d:46:26:b8:ce:6f:e3: 88:08:62:5a:13:bb:f8:02:68:0b:23:a0:c9:95:86: 50:17:29:fe:b4:8d:9d:7d:c9:41:4f:1d:77:79:f9: dd:6b:d1:e2:4c:18:2e:38:12:73:8e:17:6f:e7:35: a5:02:24:c6:2c:16:09:f8:09:82:ad:b4:9f:79:42: 79:82:8d:21:ed:9b:fe:12:43:f6:1c:f2:cc:72:3f: 3c:91:29:02:3f:cc:fc:5f:48:d9:6d:65:61:ef:5f: c6:ce:6b:32:8e:53:c7:0d:49:61:c2:b0:79:bc:2a: f6:b2:e8:4e:5a:3a:b1:20:69:33:eb:a1:96:b5:e2: 64:66:a8:36:b5:37:9e:75:74:5f:9c:f0:34:d7:7b: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F5:D2:1A:A1:06:CF:60:C5:91:95:91:F5:3C:18:60:9D:51:7E:00 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:29:fb:f8:be:b6:3e:f9:90:1d:d3:19:ab:3b:f2:2f:90:7d: 2e:06:27:e5:7d:eb:36:2b:43:49:45:32:5c:34:59:f9:6a:c8: 8b:15:67:c5:6b:f0:62:90:46:f4:bb:db:db:a6:63:b2:b3:d5: 15:a6:bb:5a:9d:b0:be:1c:74:e1:46:46:74:65:22:9a:dc:16: e6:0e:e2:33:8c:5d:d0:d9:b0:40:36:9e:36:45:ff:ba:9e:1c: 18:eb:2d:37:7e:8b:e7:e8:ac:28:a5:df:dd:46:59:94:66:4f: 84:e0:90:39:c6:62:ce:50:2a:aa:9b:9d:97:86:80:93:d5:f7: 26:b8:85:02:a4:a1:04:1b:e9:46:0a:55:51:97:c2:2f:46:34: e2:26:26:2a:59:2a:cf:f7:c7:4e:5b:bb:80:55:0b:bf:47:b3: ef:24:55:05:c8:d1:d9:b8:f0:68:51:0d:54:af:85:e5:b0:82: 0e:d3:b8:bd:b5:29:db:9d:78:bf:b9:ab:b3:2d:4b:7d:e0:3f: 03:62:4e:d9:ba:92:81:1f:5f:63:8a:60:13:24:a1:26:b2:91: 6a:58:fe:b2:2d:da:dc:96:06:5b:13:61:5c:fe:b2:4a:44:63: 9c:6e:a4:91:71:91:cc:24:72:24:05:6c:a2:76:8d:7c:da:90: 8a:52:02:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjQxMTIyMjI1NDQ3WhcNMjQxMTI5MjI1NDQ3WjAYMRYwFAYD VQQDEw02NzQxMGJiNy1mYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDvChQJr0R/nPTTNxoGD7k9tQKzlliuJzEaSf2u+TB/y8T9yDmgSiqw2MOgY LR7p6KRgSD2V5E3LlpNvOhNFARsoKtas8l34bJm0hqliUXb31dRhRfhldXKEf46E v/GIdLAGL0+anIDuXdEsZUV5eV1GJrjOb+OICGJaE7v4AmgLI6DJlYZQFyn+tI2d fclBTx13efnda9HiTBguOBJzjhdv5zWlAiTGLBYJ+AmCrbSfeUJ5go0h7Zv+EkP2 HPLMcj88kSkCP8z8X0jZbWVh71/GzmsyjlPHDUlhwrB5vCr2suhOWjqxIGkz66GW teJkZqg2tTeedXRfnPA013vX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT10hqh Bs9gxZGVkfU8GGCdUX4AMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCKfv4vrY++ZAd0xmrO/IvkH0uBiflfes2K0NJRTJcNFn5asiLFWfF a/BikEb0u9vbpmOys9UVprtanbC+HHThRkZ0ZSKa3BbmDuIzjF3Q2bBANp42Rf+6 nhwY6y03fovn6Kwopd/dRlmUZk+E4JA5xmLOUCqqm52XhoCT1fcmuIUCpKEEG+lG ClVRl8IvRjTiJiYqWSrP98dOW7uAVQu/R7PvJFUFyNHZuPBoUQ1Ur4XlsIIO07i9 tSnbnXi/uauzLUt94D8DYk7ZupKBH19jimATJKEmspFqWP6yLdrclgZbE2Fc/rJK RGOcbqSRcZHMJHIkBWyido182pCKUgJG -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:37 2024 by rpki-client on console-fra.rpki-client.org