$ rpki-client -vvf rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft File: q6y5DDE0hQG0sdXlosfP8f2HtVs.mft (raw, json) Hash identifier: wy83sIM0lIuzkabFjaz2Oam0Tpa/KhaKNSwot9skQ8k= Subject key identifier: 5C:BD:A6:09:C2:F6:02:07:34:73:AA:52:54:89:95:20:B3:DD:2B:77 Authority key identifier: AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B Certificate issuer: /CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft Manifest number: 0565 Signing time: Fri 22 Nov 2024 22:55:41 +0000 Manifest this update: Fri 22 Nov 2024 22:55:40 +0000 Manifest next update: Fri 29 Nov 2024 22:55:40 +0000 Files and hashes: 1: q6y5DDE0hQG0sdXlosfP8f2HtVs.crl (hash: 43YPy2MqwVsgbNyhWg9HWIKGVbVuY3eBXsxSN0Rmh7A=) 2: DC3716ACC0AD11EBA91C5655C4F9AE02.roa (hash: zjF6hV/xCm0hZGzWLZIyEd9PhQ3Ngnb2LQfu5dnHHQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B Validity Not Before: Nov 22 22:55:40 2024 GMT Not After : Nov 29 22:55:40 2024 GMT Subject: CN=67410bed-2df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:ed:c9:b4:67:8d:46:eb:3d:65:39:7f:be: a0:05:c9:82:59:03:3e:ed:26:bb:3b:92:8a:c1:50: 45:66:19:0c:de:1b:91:f7:af:ca:ee:7c:30:62:4e: c3:16:43:c8:c7:e0:62:ae:a6:89:87:69:4b:b3:a4: 20:84:7e:00:f1:63:12:4d:c1:ad:54:d3:50:b9:53: bf:73:97:4a:e6:f6:7a:6f:a8:91:75:e3:44:ca:af: b9:4d:d4:33:cd:b2:10:a0:7d:01:d4:be:59:2b:ce: a9:50:d4:98:46:0b:c0:69:57:57:2c:71:32:82:58: d9:8f:5a:19:a2:d7:2c:ad:4d:e1:e1:4d:71:ed:3c: ab:4f:7c:e3:99:5a:0b:17:75:32:55:95:51:cc:9e: 78:18:a0:48:92:c9:db:4a:ff:bb:e7:94:0b:f0:67: 6f:44:3f:28:ee:fa:c5:66:05:a4:6d:b3:c9:f8:49: 89:cc:48:3d:39:68:42:25:26:30:88:d2:90:17:c4: 7c:0c:10:9b:26:f3:76:19:2e:8c:ba:22:ad:16:c8: 20:82:f9:28:b8:7a:c0:18:b0:3f:d8:e1:41:db:85: bc:22:9b:47:ef:64:e0:72:6f:5b:64:a0:45:60:a6: 3a:5d:4d:c2:f3:d9:58:70:5c:e2:24:e6:0a:42:0a: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:A6:09:C2:F6:02:07:34:73:AA:52:54:89:95:20:B3:DD:2B:77 X509v3 Authority Key Identifier: keyid:AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:db:0d:f1:16:9a:aa:81:fc:06:3f:3a:65:9c:b6:ea:72:fc: 3b:d5:70:71:1a:e6:be:9f:b2:b8:8a:d5:d3:38:a1:88:ec:17: 5e:50:ca:c7:bb:f0:e0:5d:27:13:29:2b:64:af:ae:fa:cc:98: 1c:e6:90:d0:df:3f:f6:b1:73:52:ff:7d:40:88:fb:0b:1f:c9: d8:3e:43:60:a1:2e:09:e3:13:72:e4:cc:2a:e3:b6:0c:a9:3d: 96:2f:f1:8d:36:e3:89:d1:24:87:65:27:96:92:54:c4:ae:85: d6:71:fa:dc:23:9d:a7:3d:03:76:ab:40:13:a9:c2:d6:8e:0b: 77:b1:57:7c:ae:fb:59:f8:82:aa:6e:ab:0b:76:e7:9f:c1:a2: d9:0f:e6:11:b7:e6:d3:d7:ab:c0:3f:98:28:41:a7:6a:5e:5f: cd:98:ba:f1:eb:c2:39:56:25:c9:10:8a:2e:77:82:81:52:0d: 35:33:4b:1a:0a:5f:e9:64:ac:17:63:8f:1a:ed:5e:cd:a9:92: f3:db:a9:cf:a3:2e:e1:82:24:68:e5:0b:ab:5f:08:2a:5a:03: ff:1f:f8:5a:99:cf:f7:bf:2b:a6:0e:a7:41:72:ab:fe:7f:06: 59:e4:d0:cc:6b:4d:a8:3a:44:cf:1d:5a:6a:4d:ac:d5:1e:c9: 07:8e:2d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3OTAxMTAvBgNVBAUTKEFCQUNCOTBDMzEzNDg1MDFCNEIxRDVFNUEyQzdDRkYx RkQ4N0I1NUIwHhcNMjQxMTIyMjI1NTQwWhcNMjQxMTI5MjI1NTQwWjAYMRYwFAYD VQQDEw02NzQxMGJlZC0yZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy63tybRnjUbrPWU5f76gBcmCWQM+7Sa7O5KKwVBFZhkM3huR96/K7nwwYk7D FkPIx+BirqaJh2lLs6QghH4A8WMSTcGtVNNQuVO/c5dK5vZ6b6iRdeNEyq+5TdQz zbIQoH0B1L5ZK86pUNSYRgvAaVdXLHEygljZj1oZotcsrU3h4U1x7TyrT3zjmVoL F3UyVZVRzJ54GKBIksnbSv+755QL8GdvRD8o7vrFZgWkbbPJ+EmJzEg9OWhCJSYw iNKQF8R8DBCbJvN2GS6MuiKtFsgggvkouHrAGLA/2OFB24W8IptH72Tgcm9bZKBF YKY6XU3C89lYcFziJOYKQgrXwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy9pgnC 9gIHNHOqUlSJlSCz3St3MB8GA1UdIwQYMBaAFKusuQwxNIUBtLHV5aLHz/H9h7Vb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5MC9CRjJDRTNGMEMw QUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhRRzBzZFhsb3NmUDhmMkh0 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2eTVEREUwaFFHMHNkWGxvc2ZQOGYySHRWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTc5MC9CRjJDRTNGMEMwQUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhR RzBzZFhsb3NmUDhmMkh0VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW2w3xFpqqgfwGPzplnLbqcvw71XBxGua+n7K4itXTOKGI7BdeUMrH u/DgXScTKStkr676zJgc5pDQ3z/2sXNS/31AiPsLH8nYPkNgoS4J4xNy5Mwq47YM qT2WL/GNNuOJ0SSHZSeWklTEroXWcfrcI52nPQN2q0ATqcLWjgt3sVd8rvtZ+IKq bqsLduefwaLZD+YRt+bT16vAP5goQadqXl/NmLrx68I5ViXJEIoud4KBUg01M0sa Cl/pZKwXY48a7V7NqZLz26nPoy7hgiRo5QurXwgqWgP/H/hamc/3vyumDqdBcqv+ fwZZ5NDMa02oOkTPHVpqTazVHskHji00 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org