$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: fBcEzyevFuPaei22DgYm/YgaOts1IE5IVAloLOmZmho= Subject key identifier: D4:87:5F:6F:B3:C2:BF:01:6C:23:F4:0A:E2:9D:F1:20:6B:7F:8A:56 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 0527 Signing time: Fri 22 Nov 2024 23:06:05 +0000 Manifest this update: Fri 22 Nov 2024 23:06:05 +0000 Manifest next update: Fri 29 Nov 2024 23:06:05 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: mO0JEQybP+bTMTM8XeWgHo6jD6i8heONvXYafGLV1kY=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: /G+AQ8TJkbikggjTpkYg/WgLzS7otK6YzAWhBXn6B7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Nov 22 23:06:05 2024 GMT Not After : Nov 29 23:06:05 2024 GMT Subject: CN=67410e5d-6349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:be:b7:f1:1d:86:82:15:b5:cf:02:c1:6c: a2:e7:81:b0:4f:a2:54:0b:b1:b5:7c:64:d0:8a:ce: 0e:b0:b1:62:b9:99:bc:de:47:c0:f7:3a:8f:19:e6: 9b:1d:eb:b7:f3:08:97:9c:34:2b:59:d3:76:a7:e5: 23:d1:68:f6:bb:50:30:ac:87:31:b6:8b:2c:0b:a0: 80:c4:16:05:5e:29:17:ce:41:86:db:e0:ea:b4:bd: a0:35:68:f0:08:28:0c:a3:50:4e:1e:28:d7:35:e9: aa:a0:97:a3:4b:e7:b3:7c:f6:17:91:7d:49:29:d7: 68:6d:7f:22:0c:47:c4:8e:02:8d:ee:b1:d9:bf:45: 63:ac:05:c4:96:d6:11:8f:4f:94:e3:29:ea:51:c0: 6b:e2:90:9c:b0:4a:6a:53:4f:af:9d:9f:85:ca:70: a3:12:6b:33:5b:5a:51:b5:aa:29:33:82:57:44:ef: 00:98:20:50:fb:2d:a2:91:3f:a9:07:fa:12:13:fd: 39:94:a0:93:ea:9c:c5:03:f7:36:ba:04:17:e9:8d: b3:ed:7b:3f:38:6e:36:f7:c1:ca:d2:1b:69:7d:1f: 1e:71:99:95:4b:c1:d4:2a:38:5d:76:28:24:c7:32: c0:10:1c:ff:5b:66:20:04:3f:34:70:9d:17:02:05: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:5F:6F:B3:C2:BF:01:6C:23:F4:0A:E2:9D:F1:20:6B:7F:8A:56 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5b:c0:94:1e:39:31:1b:a5:82:bd:6a:03:94:71:ec:74:ea: 99:ca:3c:92:c6:1c:68:e8:68:a5:d7:e4:b8:3c:b2:fc:78:c1: 24:8d:00:27:4e:1e:8f:8b:84:f0:44:4d:d3:da:f0:46:07:5c: ff:9e:a3:1f:7a:83:b2:4d:2e:2d:f6:d6:36:57:7b:bc:17:fa: 0b:dd:63:0f:a4:5c:1b:8f:12:17:8e:c5:ac:11:91:fa:b5:9f: 2a:b6:65:83:3d:1f:bc:5b:a7:ca:b4:6b:ca:6c:70:7a:5f:bd: 77:e1:ae:62:28:a7:f0:d0:97:84:d8:4b:28:68:a7:8b:73:5b: be:24:2b:d7:ec:ee:87:38:f5:57:7d:f2:b1:4d:f5:b3:82:43: ea:cf:e5:4a:73:dc:8c:bf:84:75:06:29:53:0b:95:dc:28:cc: 04:91:99:27:44:38:e9:a1:de:d3:1c:5d:5e:0a:55:7a:b5:57: c5:31:fa:96:77:66:bb:8c:0b:d8:9a:15:85:85:da:5a:a5:1b: 39:90:ab:61:23:dd:a1:17:59:f2:33:c6:70:68:af:fe:e8:9c: f0:fa:b6:18:f8:94:51:e1:7c:e2:2e:4d:c5:5d:61:ba:a2:d0: 22:4c:0a:a1:d9:f0:04:b3:5d:92:0e:f1:e3:cd:c7:65:0f:89: 15:79:48:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjQxMTIyMjMwNjA1WhcNMjQxMTI5MjMwNjA1WjAYMRYwFAYD VQQDEw02NzQxMGU1ZC02MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJy+t/EdhoIVtc8CwWyi54GwT6JUC7G1fGTQis4OsLFiuZm83kfA9zqPGeab Heu38wiXnDQrWdN2p+Uj0Wj2u1AwrIcxtossC6CAxBYFXikXzkGG2+DqtL2gNWjw CCgMo1BOHijXNemqoJejS+ezfPYXkX1JKddobX8iDEfEjgKN7rHZv0VjrAXEltYR j0+U4ynqUcBr4pCcsEpqU0+vnZ+FynCjEmszW1pRtaopM4JXRO8AmCBQ+y2ikT+p B/oSE/05lKCT6pzFA/c2ugQX6Y2z7Xs/OG4298HK0htpfR8ecZmVS8HUKjhddigk xzLAEBz/W2YgBD80cJ0XAgX/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSHX2+z wr8BbCP0CuKd8SBrf4pWMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcW8CUHjkxG6WCvWoDlHHsdOqZyjySxhxo6Gil1+S4PLL8eMEkjQAn Th6Pi4TwRE3T2vBGB1z/nqMfeoOyTS4t9tY2V3u8F/oL3WMPpFwbjxIXjsWsEZH6 tZ8qtmWDPR+8W6fKtGvKbHB6X7134a5iKKfw0JeE2EsoaKeLc1u+JCvX7O6HOPVX ffKxTfWzgkPqz+VKc9yMv4R1BilTC5XcKMwEkZknRDjpod7THF1eClV6tVfFMfqW d2a7jAvYmhWFhdpapRs5kKthI92hF1nyM8ZwaK/+6Jzw+rYY+JRR4XziLk3FXWG6 otAiTAqh2fAEs12SDvHjzcdlD4kVeUhM -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org