$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: VnkP8zLgKKpxVnc0M4NvV2bTM7OrGMR36nX8J2D0+4o= Subject key identifier: E8:E7:8E:92:97:D6:B1:16:AC:F9:23:4E:B8:AC:6F:30:0C:90:49:36 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 04E7 Signing time: Fri 22 Nov 2024 23:16:29 +0000 Manifest this update: Fri 22 Nov 2024 23:16:28 +0000 Manifest next update: Fri 29 Nov 2024 23:16:28 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: MjLf+ySmpEeocSf4ZWXVO1L5sivfSj5YmV27Btwcxl8=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: K0g8xWII4g0z2vzjoBYClHiJj2EJk6kk9zBp36ie6T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: Nov 22 23:16:28 2024 GMT Not After : Nov 29 23:16:28 2024 GMT Subject: CN=674110cd-a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:3f:e1:c3:84:c1:0a:aa:90:62:c7:49:d9: 38:a9:4f:57:09:86:cc:04:2e:32:bb:ac:9e:2a:c2: cc:47:bb:e7:a9:e6:c8:f9:85:f9:26:4f:50:e5:9d: e0:ed:9f:b2:80:7b:c9:cb:a9:15:9e:40:1e:2d:ce: 0a:e3:33:40:44:25:01:30:43:9f:a6:ec:4c:d4:7b: c7:b1:41:f6:8e:dd:c6:89:b6:86:39:0f:df:ef:9e: f1:f7:a7:cc:0f:81:97:ba:4c:ac:95:c3:69:2a:e1: 73:a3:66:cb:dc:c1:75:5b:02:ea:2b:63:48:fb:01: 3c:f6:04:9c:4b:2a:c0:dc:da:ea:88:76:e5:19:04: 02:a9:78:7f:82:7d:b4:77:5a:a5:1a:a4:c3:f0:19: 76:f2:8e:a1:a8:0c:42:fd:55:a5:ad:c5:0d:bd:7d: f7:30:ae:58:58:7e:f3:9a:21:24:c7:11:c7:68:da: 55:e2:96:e3:46:99:13:81:46:18:6c:60:2a:98:ed: 42:09:f5:09:91:99:35:d8:c4:96:cc:a2:3b:fb:bd: 5a:12:64:0d:40:c1:c6:65:c6:ad:32:d9:c8:e8:6c: b5:0b:a6:93:c8:c5:b9:24:c0:ec:e2:73:55:54:38: 6c:f6:5d:98:7c:5c:5b:c4:72:5e:dd:19:6d:7c:7a: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:8E:92:97:D6:B1:16:AC:F9:23:4E:B8:AC:6F:30:0C:90:49:36 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:68:1b:43:dd:21:40:64:df:77:87:5e:c3:6a:47:9c:2d:08: 71:bd:b6:05:04:04:92:25:1f:09:49:12:7d:aa:ad:0a:ab:b8: b4:f9:cc:10:e2:2e:42:bc:17:ea:0c:70:4f:5c:0e:1c:b1:7e: 14:9c:86:01:87:fc:56:80:f3:6e:17:9b:2f:dc:7b:68:5d:8b: f6:4d:9b:5c:6d:02:f3:af:88:49:14:a1:0d:c3:aa:44:a0:ff: af:4e:80:f8:50:e2:4c:74:28:67:88:3e:d3:5b:4c:41:f8:ac: 1b:c7:7f:0b:3d:9e:41:04:87:c4:55:54:1a:56:77:72:ab:41: 05:ca:00:26:79:f4:be:27:71:9d:00:14:af:a5:b4:7c:f9:ad: ae:33:7a:92:56:85:43:b0:36:df:b1:4c:97:a5:2c:1c:8a:e1: 1d:1c:fe:9e:13:17:23:98:4a:7a:67:ae:9a:60:a8:dc:35:b8: 38:32:48:56:70:3a:a0:f5:a3:1e:93:a1:47:83:90:e8:db:bc: db:1b:d6:11:ee:b4:e3:12:8d:65:e7:f1:bd:31:16:ba:f0:ae: 9d:38:4b:76:bf:7b:43:e2:ae:9a:7a:5f:1e:c9:d9:02:50:0f: 41:12:70:42:6b:c2:a8:eb:16:6d:8d:2a:d6:32:32:c8:44:05: c3:9b:f9:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjQxMTIyMjMxNjI4WhcNMjQxMTI5MjMxNjI4WjAYMRYwFAYD VQQDEw02NzQxMTBjZC1hMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXc/4cOEwQqqkGLHSdk4qU9XCYbMBC4yu6yeKsLMR7vnqebI+YX5Jk9Q5Z3g 7Z+ygHvJy6kVnkAeLc4K4zNARCUBMEOfpuxM1HvHsUH2jt3GibaGOQ/f757x96fM D4GXukyslcNpKuFzo2bL3MF1WwLqK2NI+wE89gScSyrA3NrqiHblGQQCqXh/gn20 d1qlGqTD8Bl28o6hqAxC/VWlrcUNvX33MK5YWH7zmiEkxxHHaNpV4pbjRpkTgUYY bGAqmO1CCfUJkZk12MSWzKI7+71aEmQNQMHGZcatMtnI6Gy1C6aTyMW5JMDs4nNV VDhs9l2YfFxbxHJe3RltfHpH7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjnjpKX 1rEWrPkjTrisbzAMkEk2MB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0aBtD3SFAZN93h17DakecLQhxvbYFBASSJR8JSRJ9qq0Kq7i0+cwQ 4i5CvBfqDHBPXA4csX4UnIYBh/xWgPNuF5sv3HtoXYv2TZtcbQLzr4hJFKENw6pE oP+vToD4UOJMdChniD7TW0xB+Kwbx38LPZ5BBIfEVVQaVndyq0EFygAmefS+J3Gd ABSvpbR8+a2uM3qSVoVDsDbfsUyXpSwciuEdHP6eExcjmEp6Z66aYKjcNbg4MkhW cDqg9aMek6FHg5Do27zbG9YR7rTjEo1l5/G9MRa68K6dOEt2v3tD4q6ael8eydkC UA9BEnBCa8Ko6xZtjSrWMjLIRAXDm/kq -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org