$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: cx/MI66nyiD/FnHamGiA0YEiKloveue7buV/4Akr4OE= Subject key identifier: 85:28:E7:96:9D:4A:73:81:46:1D:DC:90:46:9F:25:42:DE:E3:83:89 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0180 Signing time: Sat 23 Nov 2024 02:01:16 +0000 Manifest this update: Sat 23 Nov 2024 02:01:16 +0000 Manifest next update: Sat 30 Nov 2024 02:01:16 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: V0t9JAjxSpCiz4CsRTUXyrsDF+9mCfIKzdn+a/fwmOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Nov 23 02:01:16 2024 GMT Not After : Nov 30 02:01:16 2024 GMT Subject: CN=6741376c-a3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:09:47:6e:34:e0:fd:fb:1c:3c:cb:50:bd: a7:7e:5d:9a:5b:2e:77:1a:d1:20:9b:5f:bb:fd:f4: b4:01:24:7b:45:b1:fa:0d:d6:9a:ef:0a:44:0c:d3: ac:e1:98:47:a2:2a:34:8a:1f:33:56:dc:11:19:43: bd:77:9b:93:38:c0:14:fe:b5:57:67:bc:38:2c:43: b6:e6:be:af:a1:bb:30:bc:37:c9:e5:94:d4:50:87: a5:84:09:c9:e6:22:df:3d:9f:06:3b:c6:14:6f:c3: a2:28:5e:d7:8a:cc:18:f8:79:09:c6:67:1f:69:ae: ca:2b:3e:ae:73:23:45:50:8e:3e:dd:fc:5a:41:ff: 30:85:3a:1d:0c:f9:d2:85:af:9f:13:38:e3:81:0a: eb:c9:1f:3b:4b:00:29:cd:c7:96:c5:0b:8a:27:69: 7f:51:0c:ba:6d:59:07:21:5c:25:bf:b9:6f:24:2e: 26:a9:74:14:7e:33:a1:64:0e:b4:99:54:7d:7d:93: d9:ad:39:a7:bc:95:59:b8:bd:5e:87:5f:6b:8a:1a: f5:2a:83:69:4b:0a:62:15:01:cd:e3:23:67:f6:1d: ec:10:0e:c4:65:a6:a3:c6:77:72:0f:90:e1:f5:62: 96:7c:2c:d9:f0:b8:05:9e:e9:40:43:4e:ae:39:fa: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:E7:96:9D:4A:73:81:46:1D:DC:90:46:9F:25:42:DE:E3:83:89 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:27:66:c2:61:a3:1a:99:2c:d9:50:e2:22:57:fe:05:02:b2: 7c:8f:f3:97:2d:30:21:da:08:92:4e:cb:09:65:ea:24:91:8e: 21:49:77:08:c0:39:c2:2b:4c:9f:b9:01:2a:4b:5c:47:27:38: e0:fa:1b:8a:ac:ed:da:30:2b:b8:97:2d:ab:32:d0:e2:27:d4: 30:9b:7e:27:e5:12:32:2d:04:20:2f:19:29:c6:b4:94:97:e5: 04:8e:d7:e4:42:ed:95:c8:2c:73:69:9d:61:38:3b:18:30:f1: 8b:90:9b:62:b2:7e:d5:10:b1:88:5b:a1:e3:a5:a7:62:35:3b: dd:b2:8d:32:77:79:6e:98:8c:b8:93:d0:10:c3:53:63:22:64: 17:43:84:af:d0:b4:cc:47:10:40:14:ce:05:2a:dc:9f:2b:1a: 8b:da:42:9f:fa:1f:38:4b:a5:9a:f8:f2:75:f0:4d:68:ad:ae: c0:d1:ed:e2:e5:31:60:04:29:36:4f:f5:34:e4:0d:72:74:5e: 3b:f5:0a:9e:21:43:67:7a:b4:56:d7:f4:91:6a:a8:d8:d0:c3: d2:c3:1e:a3:d3:c1:18:04:0c:ba:2a:0c:07:71:a4:af:b7:35: 5e:3a:16:b7:16:13:66:08:16:cd:16:a6:b0:5d:22:cd:4b:bd: 85:18:35:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjQxMTIzMDIwMTE2WhcNMjQxMTMwMDIwMTE2WjAYMRYwFAYD VQQDEw02NzQxMzc2Yy1hM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBIJR2404P37HDzLUL2nfl2aWy53GtEgm1+7/fS0ASR7RbH6Ddaa7wpEDNOs 4ZhHoio0ih8zVtwRGUO9d5uTOMAU/rVXZ7w4LEO25r6vobswvDfJ5ZTUUIelhAnJ 5iLfPZ8GO8YUb8OiKF7XiswY+HkJxmcfaa7KKz6ucyNFUI4+3fxaQf8whTodDPnS ha+fEzjjgQrryR87SwApzceWxQuKJ2l/UQy6bVkHIVwlv7lvJC4mqXQUfjOhZA60 mVR9fZPZrTmnvJVZuL1eh19rihr1KoNpSwpiFQHN4yNn9h3sEA7EZaajxndyD5Dh 9WKWfCzZ8LgFnulAQ06uOfrCvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUo55ad SnOBRh3ckEafJULe44OJMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+J2bCYaMamSzZUOIiV/4FArJ8j/OXLTAh2giSTssJZeokkY4hSXcI wDnCK0yfuQEqS1xHJzjg+huKrO3aMCu4ly2rMtDiJ9Qwm34n5RIyLQQgLxkpxrSU l+UEjtfkQu2VyCxzaZ1hODsYMPGLkJtisn7VELGIW6HjpadiNTvdso0yd3lumIy4 k9AQw1NjImQXQ4Sv0LTMRxBAFM4FKtyfKxqL2kKf+h84S6Wa+PJ18E1ora7A0e3i 5TFgBCk2T/U05A1ydF479QqeIUNnerRW1/SRaqjY0MPSwx6j08EYBAy6KgwHcaSv tzVeOha3FhNmCBbNFqawXSLNS72FGDWT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org