$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: cvhWO0d7dbXh0+UYLQ2dVm9roIegoTICx9QHoRJzVsU= Subject key identifier: 31:27:11:33:FD:B9:9B:72:24:7F:47:75:6C:FC:B3:C1:FC:E1:05:CC Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 0558 Signing time: Fri 22 Nov 2024 22:58:42 +0000 Manifest this update: Fri 22 Nov 2024 22:58:41 +0000 Manifest next update: Fri 29 Nov 2024 22:58:41 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: mX3cv6lLleo0EzNrBaZF5TF0/02ye+jSzPcOLaRQhDs=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: g89YmoUlNGoW7vM9eZWI3Zges2WlbrLyhloBI6u/31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Nov 22 22:58:41 2024 GMT Not After : Nov 29 22:58:41 2024 GMT Subject: CN=67410ca1-3907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:b6:eb:01:c5:ef:b1:48:73:de:1c:12:e2: 74:1f:f7:85:d1:bc:75:6f:67:7a:2d:eb:5d:fb:81: 1a:b6:41:61:08:3b:bd:56:e4:35:01:eb:40:ad:31: 84:4b:7f:09:a7:e6:d6:89:99:6d:9d:b6:c4:e0:20: 4f:bf:04:f2:39:69:33:a2:db:a8:7d:e1:f2:3a:e0: b4:0b:3c:10:72:a1:9e:8f:da:49:ca:b6:36:6f:98: 90:42:cc:9d:0b:2f:32:58:13:f7:46:c2:ef:33:01: 1a:f8:00:fe:a5:dc:f3:ab:cf:9c:4c:d6:57:43:2c: 30:17:29:2f:89:37:70:7b:38:3b:51:88:11:fd:50: 9a:98:a5:64:9d:9b:ba:12:33:f0:e8:d6:00:a6:32: 1c:03:cb:22:7a:68:aa:bc:d8:69:e7:96:1d:51:99: 28:ed:ee:27:62:00:97:be:47:97:26:83:1d:87:f0: bc:ba:55:45:4b:b7:01:77:85:f4:be:e5:2a:3d:2a: 21:1e:bb:83:fa:c5:31:3f:bd:f2:2f:03:b6:75:5c: c6:f8:c8:94:d9:9d:df:14:89:02:03:69:26:55:81: 1d:3f:6d:c6:b9:f0:a5:33:80:7e:b6:ee:4b:f0:87: 77:f3:63:0a:34:32:56:7b:1f:a8:89:75:60:e9:ab: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:11:33:FD:B9:9B:72:24:7F:47:75:6C:FC:B3:C1:FC:E1:05:CC X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:fe:c4:da:e8:67:1f:af:9e:f6:70:35:6e:da:e2:88:58: 2b:29:fa:59:57:49:f6:25:8f:fb:8b:9e:d1:f8:d6:68:5e:33: fc:6e:1e:bf:bb:46:ce:0d:64:09:b5:05:09:28:7a:2e:18:62: 2e:e3:d6:9c:80:8e:17:2c:a0:ca:2e:64:15:f3:3d:c7:e5:af: 23:f3:f2:c0:f4:83:ea:9e:a0:98:30:e9:e8:60:25:84:e4:37: 7b:af:59:f8:35:23:10:21:37:d7:b5:c5:15:93:39:07:e0:7b: b3:a0:ef:4f:35:7a:95:f6:d9:19:35:43:96:fd:d7:be:08:b7: cf:39:a5:32:7f:48:ea:48:ec:eb:2a:77:90:b3:e4:95:60:bc: 2a:0e:e4:30:e1:fc:fd:2a:63:6b:c4:2f:c6:6f:eb:f9:e4:6d: 4c:48:03:b6:fb:7c:cd:60:f9:0a:64:8a:18:16:a3:ba:f4:b3: da:3b:dd:55:de:24:e2:2e:ec:04:5c:79:a4:39:36:6b:a7:78: 69:d6:c0:e2:cb:03:a7:dd:fc:0d:fd:61:36:42:ab:ec:16:fa: 32:a6:5a:c8:93:72:c3:5a:8e:54:20:0a:0d:70:34:c9:8e:74: 9a:12:94:3f:8e:f4:67:b9:2c:5d:b8:fd:39:c7:d9:9b:28:25: 0b:cf:ef:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjQxMTIyMjI1ODQxWhcNMjQxMTI5MjI1ODQxWjAYMRYwFAYD VQQDEw02NzQxMGNhMS0zOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK226wHF77FIc94cEuJ0H/eF0bx1b2d6Letd+4EatkFhCDu9VuQ1AetArTGE S38Jp+bWiZltnbbE4CBPvwTyOWkzotuofeHyOuC0CzwQcqGej9pJyrY2b5iQQsyd Cy8yWBP3RsLvMwEa+AD+pdzzq8+cTNZXQywwFykviTdwezg7UYgR/VCamKVknZu6 EjPw6NYApjIcA8siemiqvNhp55YdUZko7e4nYgCXvkeXJoMdh/C8ulVFS7cBd4X0 vuUqPSohHruD+sUxP73yLwO2dVzG+MiU2Z3fFIkCA2kmVYEdP23GufClM4B+tu5L 8Id382MKNDJWex+oiXVg6atLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEnETP9 uZtyJH9HdWz8s8H84QXMMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv1P7E2uhnH6+e9nA1btriiFgrKfpZV0n2JY/7i57R+NZoXjP8bh6/ u0bODWQJtQUJKHouGGIu49acgI4XLKDKLmQV8z3H5a8j8/LA9IPqnqCYMOnoYCWE 5Dd7r1n4NSMQITfXtcUVkzkH4HuzoO9PNXqV9tkZNUOW/de+CLfPOaUyf0jqSOzr KneQs+SVYLwqDuQw4fz9KmNrxC/Gb+v55G1MSAO2+3zNYPkKZIoYFqO69LPaO91V 3iTiLuwEXHmkOTZrp3hp1sDiywOn3fwN/WE2QqvsFvoyplrIk3LDWo5UIAoNcDTJ jnSaEpQ/jvRnuSxduP05x9mbKCULz++G -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org