$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: JBl4H9Ml7005TJ/sA13FrafyGZYTSLfZmIPyHM7CNQs= Subject key identifier: BB:0F:9F:25:FF:85:B5:C6:E7:00:F9:1D:72:FB:B5:CF:01:51:2C:03 Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: 71 Signing time: Sat 23 Nov 2024 04:52:05 +0000 Manifest this update: Sat 23 Nov 2024 04:52:05 +0000 Manifest next update: Sat 30 Nov 2024 04:52:05 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: FoscCXDm15uxZo+gZYGnu5ji2BuOXX8oIMAyxwA7Zg0=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Nov 23 04:52:05 2024 GMT Not After : Nov 30 04:52:05 2024 GMT Subject: CN=67415f75-20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6e:ce:43:39:f1:88:e0:9b:03:6b:5b:5d:52: 74:ad:bd:91:d9:b8:e1:de:f8:7c:f6:c2:74:95:56: db:13:c6:6f:c0:74:31:e2:ca:74:ae:08:21:25:9a: 1f:0b:ee:75:58:c2:6d:10:2d:38:e6:81:37:ed:b2: a1:12:80:25:ff:a3:03:cf:7a:40:ee:dd:59:b4:36: d2:4b:d2:e7:e8:e9:20:31:99:a9:7b:ab:eb:28:2a: f5:d9:7a:25:cb:c9:f2:22:3e:c6:93:7a:bb:b2:cf: 44:d8:03:bd:78:0d:62:72:55:32:bf:bf:4a:f6:23: ef:27:08:cc:15:59:46:89:3a:9c:d1:d5:45:b5:d1: f0:71:f5:69:6a:67:0a:04:a7:e8:ff:e2:98:56:93: 26:be:57:c2:6e:bc:30:7a:60:98:78:ce:58:48:05: d4:d8:5e:42:95:f9:59:10:9f:a9:ca:eb:ad:0e:eb: b6:54:79:e3:0a:73:71:5d:bc:0f:33:79:1f:42:2f: 5e:c4:ea:0c:63:b4:55:9b:87:96:25:26:a2:ac:81: cb:74:71:7d:8e:81:47:6e:57:24:7e:2f:ce:d5:cd: 4f:d4:14:08:f1:05:65:eb:56:ad:41:4e:3b:7c:77: 04:91:02:fb:3f:38:ea:7d:d4:8b:44:30:2f:ac:e5: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0F:9F:25:FF:85:B5:C6:E7:00:F9:1D:72:FB:B5:CF:01:51:2C:03 X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8d:7c:14:d6:66:24:a2:69:f3:3e:5d:ac:f8:5a:2c:e6:29: 46:d2:62:f6:fb:b1:63:bc:c6:eb:2e:6c:69:fb:f4:6a:55:04: 87:c9:c5:b6:7d:35:41:f7:b7:ed:45:fb:e9:4c:b7:02:df:b7: fb:c2:da:27:f9:7a:3e:65:15:be:b5:ea:b4:30:78:16:40:9f: 86:b5:91:0c:f6:d9:c0:29:7e:e1:61:ab:40:38:dc:58:c5:e3: 14:9e:82:bb:36:20:86:73:76:c8:7a:10:ba:89:e9:b8:55:96: 01:67:5e:da:44:b0:d7:f5:bd:90:2c:33:dc:90:78:74:08:49: 32:b0:d2:ad:6f:59:58:c5:0b:e9:7c:52:5c:58:66:79:7d:a8: 1b:d6:6f:a9:f4:0d:96:35:b9:e6:a6:c2:c7:42:76:83:64:2e: 8d:ce:16:ed:71:df:89:9c:42:26:87:9f:25:58:ca:e3:75:55: e2:bb:db:93:6b:cf:44:e5:b8:64:f4:b1:fa:3c:b3:1a:8b:67: 13:8b:09:74:39:fb:3a:2f:f0:6c:10:04:c3:53:7d:d6:4f:ca: 7c:4a:c0:ac:d1:3e:8c:80:f6:81:ba:83:5e:aa:c1:15:91:2d: 78:ef:a9:91:d6:ba:e2:1d:07:31:6e:4f:63:7e:c4:ef:b7:ac: 01:3c:65:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTQ5QjExMC8GA1UEBRMoRDUwMzdBRjk2OUM4QUNFQTAxQjU3MEZDNjRBREQ0ODI4 QUMwNjQxNDAeFw0yNDExMjMwNDUyMDVaFw0yNDExMzAwNDUyMDVaMBgxFjAUBgNV BAMTDTY3NDE1Zjc1LTIwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxbs5DOfGI4JsDa1tdUnStvZHZuOHe+Hz2wnSVVtsTxm/AdDHiynSuCCElmh8L 7nVYwm0QLTjmgTftsqESgCX/owPPekDu3Vm0NtJL0ufo6SAxmal7q+soKvXZeiXL yfIiPsaTeruyz0TYA714DWJyVTK/v0r2I+8nCMwVWUaJOpzR1UW10fBx9WlqZwoE p+j/4phWkya+V8JuvDB6YJh4zlhIBdTYXkKV+VkQn6nK660O67ZUeeMKc3FdvA8z eR9CL17E6gxjtFWbh5YlJqKsgct0cX2OgUduVyR+L87VzU/UFAjxBWXrVq1BTjt8 dwSRAvs/OOp91ItEMC+s5aoLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuw+fJf+F tcbnAPkdcvu1zwFRLAMwHwYDVR0jBBgwFoAU1QN6+WnIrOoBtXD8ZK3UgorAZBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNDlCL0I5NEY2OTM2MDE1 MTExRUY5ODU3QzAxRUM0RjlBRTAyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFONi1XbklyT29CdFhEOFpLM1Vnb3JBWkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NDlCL0I5NEY2OTM2MDE1MTExRUY5ODU3QzAxRUM0RjlBRTAyLzFRTjYtV25Jck9v QnRYRDhaSzNVZ29yQVpCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALuNfBTWZiSiafM+Xaz4WizmKUbSYvb7sWO8xusubGn79GpVBIfJxbZ9 NUH3t+1F++lMtwLft/vC2if5ej5lFb616rQweBZAn4a1kQz22cApfuFhq0A43FjF 4xSegrs2IIZzdsh6ELqJ6bhVlgFnXtpEsNf1vZAsM9yQeHQISTKw0q1vWVjFC+l8 UlxYZnl9qBvWb6n0DZY1ueamwsdCdoNkLo3OFu1x34mcQiaHnyVYyuN1VeK725Nr z0TluGT0sfo8sxqLZxOLCXQ5+zov8GwQBMNTfdZPynxKwKzRPoyA9oG6g16qwRWR LXjvqZHWuuIdBzFuT2N+xO+3rAE8Zas= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org