$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: 9HHeYW1zXDdZ2HknLAxjZUz6cbXYByHUZCE9YE+7lfU= Subject key identifier: 21:2D:49:B0:9D:81:60:EF:F0:DF:1D:E2:FB:72:C9:FC:23:B5:10:C4 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 0158 Signing time: Sat 23 Nov 2024 02:30:17 +0000 Manifest this update: Sat 23 Nov 2024 02:30:16 +0000 Manifest next update: Sat 30 Nov 2024 02:30:16 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: fub2RBY5smYU+epKLYVn8R0TJWJOBl103XI8Inb+A8M=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: mUMNE966BicNSpJESgW+HWrC/YbRSMoz47CHc52HDoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Nov 23 02:30:16 2024 GMT Not After : Nov 30 02:30:16 2024 GMT Subject: CN=67413e38-2aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:0a:5b:34:5b:05:be:84:f4:27:9b:df:53: d6:dc:8c:54:cf:7e:15:b4:3d:26:27:da:d6:21:70: 17:d8:11:61:41:f1:98:60:b6:53:0a:93:c9:5c:f1: 9a:e1:9a:a4:c1:08:ae:c0:2e:b5:e4:bb:41:7d:ce: a0:00:f9:c7:98:66:b1:07:ab:9a:d4:cb:d0:ca:ca: 83:1a:44:98:6c:db:15:db:27:3b:6a:d0:27:1b:04: 73:97:df:6c:ca:97:2c:ac:fb:e9:a6:06:24:cf:54: 18:a2:32:63:b4:c6:de:13:4e:8e:38:8c:d6:1a:8a: 25:21:ae:2d:98:2c:07:32:fc:ad:39:e4:b7:6a:84: 8c:e6:44:ed:6c:2e:91:fa:4d:e6:d5:4d:04:82:43: 35:59:03:1a:c2:8b:f9:c8:62:0d:ab:07:0b:9a:5b: 29:87:d5:1a:b2:f0:d7:90:57:d5:ba:1d:ed:6b:5d: 28:3f:13:25:2b:6a:34:1f:5c:2b:56:27:0d:e4:d9: 39:6c:d3:30:97:87:5e:1f:da:16:16:6f:5a:cc:fd: 42:f1:f6:5f:e8:da:47:6b:90:4b:e7:1a:86:21:98: 14:5d:1b:ee:d1:bc:3b:9b:53:69:99:5f:99:c8:1d: 60:4b:29:ce:f7:1e:32:a3:7f:0c:0e:d6:8f:99:06: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2D:49:B0:9D:81:60:EF:F0:DF:1D:E2:FB:72:C9:FC:23:B5:10:C4 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cc:9f:83:d4:1f:02:f7:71:38:a4:d6:cb:d7:83:81:ea:42: 20:a2:77:81:f0:60:70:2f:94:1e:0e:13:4b:4b:ae:00:c0:5b: 4d:49:f2:c3:47:27:2b:5c:da:e9:56:3b:78:8f:79:7f:ea:de: b7:11:ee:cb:30:4b:12:f9:a6:15:14:35:ea:e3:bf:6d:97:26: 59:d5:fe:45:de:e3:7d:e5:8d:6a:ae:65:af:cb:2d:b8:9a:7e: 6a:6c:df:79:2a:4d:58:a5:ec:a4:61:2a:14:fe:7d:e6:e9:da: 3a:e5:03:9a:66:6c:42:ae:bd:cc:ea:21:2f:5a:b1:97:b8:0d: ac:ad:18:8a:2b:61:7e:7b:8d:12:07:f7:3d:b2:e3:16:01:83: f3:76:22:67:16:f9:37:c3:0e:fd:c1:f6:57:49:4c:7a:ba:37: 7b:97:e5:18:3d:20:2e:37:0f:11:69:99:54:35:1e:bf:a6:59: c1:79:4c:93:91:b8:13:da:f2:26:4b:c1:f0:e1:4c:4f:f9:77: b5:3c:db:dd:b0:12:88:b5:16:a8:51:77:c2:71:3a:c1:c6:f4: d7:06:8d:4c:0d:56:86:6f:c4:e6:08:47:a6:55:77:67:a5:6d: 2b:b8:d6:c6:0a:cc:40:f2:c5:6e:a6:21:58:f8:db:43:ff:40: 8a:c8:2c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjQxMTIzMDIzMDE2WhcNMjQxMTMwMDIzMDE2WjAYMRYwFAYD VQQDEw02NzQxM2UzOC0yYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoAKWzRbBb6E9Ceb31PW3IxUz34VtD0mJ9rWIXAX2BFhQfGYYLZTCpPJXPGa 4ZqkwQiuwC615LtBfc6gAPnHmGaxB6ua1MvQysqDGkSYbNsV2yc7atAnGwRzl99s ypcsrPvppgYkz1QYojJjtMbeE06OOIzWGoolIa4tmCwHMvytOeS3aoSM5kTtbC6R +k3m1U0EgkM1WQMawov5yGINqwcLmlsph9UasvDXkFfVuh3ta10oPxMlK2o0H1wr VicN5Nk5bNMwl4deH9oWFm9azP1C8fZf6NpHa5BL5xqGIZgUXRvu0bw7m1NpmV+Z yB1gSynO9x4yo38MDtaPmQabLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEtSbCd gWDv8N8d4vtyyfwjtRDEMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtzJ+D1B8C93E4pNbL14OB6kIgoneB8GBwL5QeDhNLS64AwFtNSfLD RycrXNrpVjt4j3l/6t63Ee7LMEsS+aYVFDXq479tlyZZ1f5F3uN95Y1qrmWvyy24 mn5qbN95Kk1YpeykYSoU/n3m6do65QOaZmxCrr3M6iEvWrGXuA2srRiKK2F+e40S B/c9suMWAYPzdiJnFvk3ww79wfZXSUx6ujd7l+UYPSAuNw8RaZlUNR6/plnBeUyT kbgT2vImS8Hw4UxP+Xe1PNvdsBKItRaoUXfCcTrBxvTXBo1MDVaGb8TmCEemVXdn pW0ruNbGCsxA8sVupiFY+NtD/0CKyCze -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org