$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: 8hST07BaMAkZZqYd8Awfs+AeesyqsadQ+yDO9+pjeaU= Subject key identifier: 79:8E:83:9A:60:AB:05:70:78:46:FA:14:39:A5:97:06:AC:06:D1:5A Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 0178 Signing time: Thu 21 Nov 2024 02:10:20 +0000 Manifest this update: Thu 21 Nov 2024 02:10:19 +0000 Manifest next update: Thu 28 Nov 2024 02:10:19 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: tQvJMWINYuwnCLRhLURK4aHCFdu9sezRWgQ4cBOiDEs=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: zVPRl8aSlwcxV68OyN0H+R3+MRPBkO3MLKHRfVZXzvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Nov 21 02:10:19 2024 GMT Not After : Nov 28 02:10:19 2024 GMT Subject: CN=673e968b-fe46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:c9:d8:97:8b:c4:a9:49:01:0e:78:80:32: a8:dd:11:86:77:30:d5:2b:2b:db:a9:49:09:1d:37: 42:ce:ff:41:c3:7c:33:c0:6c:29:09:69:61:48:30: e5:7d:c4:dd:45:9e:b9:a7:c6:a4:23:41:8d:2a:be: e6:60:5d:f1:49:a3:84:60:e2:2a:af:d5:a6:bc:7e: 23:e6:7e:45:59:5f:1b:8b:43:79:c7:9c:20:22:5c: fc:1d:4b:b5:69:a9:37:fe:6f:1c:ec:c1:ba:ca:9f: 68:45:3f:2b:99:df:f3:49:e9:87:f4:09:4c:ad:26: 7f:8e:31:d0:2b:7b:28:02:ed:fd:27:fe:ab:fb:0a: c6:fd:65:bf:06:e9:0d:05:1f:3a:02:31:83:d6:d3: 57:b8:41:6e:a9:79:a9:3b:4a:32:a3:06:aa:c5:0c: 03:63:4a:51:5a:1a:ab:60:b8:35:2b:16:ad:86:41: 27:d1:da:a3:74:6e:df:7b:66:fd:f2:45:10:0b:f6: 1b:f0:9d:80:32:66:d6:c1:5b:d6:05:5e:e3:60:79: 15:b6:d9:e5:13:51:23:c7:74:ec:0c:3a:f3:03:64: 7e:99:29:f2:a5:42:e4:51:4d:d9:17:cc:cd:6d:05: c5:53:c8:bc:d0:99:7a:26:1b:dc:3b:af:46:31:a3: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8E:83:9A:60:AB:05:70:78:46:FA:14:39:A5:97:06:AC:06:D1:5A X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:46:e5:a2:bb:84:ec:c6:38:1e:dc:d0:56:80:7e:08:1d:6d: 5e:96:ae:e1:52:45:5b:9c:8e:3b:a5:ec:25:45:e4:a7:0e:7a: e8:2c:c5:15:d0:94:e1:a6:2d:fa:35:c7:03:33:6a:9f:9d:44: 1f:a5:73:84:43:b5:f6:e7:d5:77:aa:6e:0f:c6:e2:83:50:70: 95:1b:ea:5b:ab:22:d8:ee:8c:d4:0e:e8:79:f5:1b:56:e2:16: fd:7f:bf:be:6d:6b:ff:14:b3:80:4c:8b:e1:11:4d:79:d6:a4: 26:0d:c7:13:d7:79:cf:c1:f6:61:10:de:4d:4d:fa:ba:d6:90: 58:f1:7a:4d:e3:3e:b4:17:65:64:b0:4b:0b:19:42:ec:dd:df: bf:91:9b:c6:e6:15:e5:83:ab:b1:66:47:e9:40:77:9d:e9:e6: b7:8e:a4:cc:88:3b:20:6d:4c:7e:fe:1d:9b:1d:f9:8b:06:58: db:70:e8:70:22:7d:e4:5b:56:ba:a9:0a:bd:f4:15:19:ab:d5: 54:43:2e:8a:98:44:01:72:4f:50:4e:2d:05:13:55:ca:94:e6: 38:5d:1f:e8:1b:34:38:b0:9f:45:50:e1:de:17:b3:eb:0f:15: ec:b7:35:8c:22:81:25:ec:90:ad:40:49:fb:ba:5b:53:ad:f8: 9a:4b:f4:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjQxMTIxMDIxMDE5WhcNMjQxMTI4MDIxMDE5WjAYMRYwFAYD VQQDEw02NzNlOTY4Yi1mZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JXJ2JeLxKlJAQ54gDKo3RGGdzDVKyvbqUkJHTdCzv9Bw3wzwGwpCWlhSDDl fcTdRZ65p8akI0GNKr7mYF3xSaOEYOIqr9WmvH4j5n5FWV8bi0N5x5wgIlz8HUu1 aak3/m8c7MG6yp9oRT8rmd/zSemH9AlMrSZ/jjHQK3soAu39J/6r+wrG/WW/BukN BR86AjGD1tNXuEFuqXmpO0oyowaqxQwDY0pRWhqrYLg1KxathkEn0dqjdG7fe2b9 8kUQC/Yb8J2AMmbWwVvWBV7jYHkVttnlE1Ejx3TsDDrzA2R+mSnypULkUU3ZF8zN bQXFU8i80Jl6JhvcO69GMaNbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmOg5pg qwVweEb6FDmllwasBtFaMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLRuWiu4Tsxjge3NBWgH4IHW1elq7hUkVbnI47pewlReSnDnroLMUV 0JThpi36NccDM2qfnUQfpXOEQ7X259V3qm4PxuKDUHCVG+pbqyLY7ozUDuh59RtW 4hb9f7++bWv/FLOATIvhEU151qQmDccT13nPwfZhEN5NTfq61pBY8XpN4z60F2Vk sEsLGULs3d+/kZvG5hXlg6uxZkfpQHed6ea3jqTMiDsgbUx+/h2bHfmLBljbcOhw In3kW1a6qQq99BUZq9VUQy6KmEQBck9QTi0FE1XKlOY4XR/oGzQ4sJ9FUOHeF7Pr DxXstzWMIoEl7JCtQEn7ultTrfiaS/S6 -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:08 2024 by rpki-client on console-fra.rpki-client.org