$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: NFkKqJI2nJG/PI5mn7/0ehOou7htJub2MO6udYDxSVA= Subject key identifier: D4:10:9B:1F:8E:BC:A6:16:89:23:81:2D:C2:E8:48:50:92:C7:E0:42 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 019A Signing time: Sat 23 Nov 2024 01:52:46 +0000 Manifest this update: Sat 23 Nov 2024 01:52:46 +0000 Manifest next update: Sat 30 Nov 2024 01:52:46 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: F/HWZ2WR6PbXcBkxCl/gSdfoaGUWqVh3Oq4VPSTuZzs=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Nov 23 01:52:46 2024 GMT Not After : Nov 30 01:52:46 2024 GMT Subject: CN=6741356e-5e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:b7:ad:8d:78:1b:71:c6:7e:75:87:93:2e: ba:a6:05:e6:c9:29:76:72:57:95:12:82:9b:30:e2: 9d:ef:9c:b5:31:d9:35:bb:cd:16:4a:55:59:4f:4f: b9:03:c2:50:84:41:b2:16:b0:4b:a9:e9:68:48:fe: 2d:be:0b:22:e6:27:55:94:bf:2b:e4:20:cb:8e:57: f2:f8:05:e6:6f:2c:7f:78:2d:52:d0:cc:03:2a:d2: 42:9d:7b:06:7c:85:f3:8d:60:4c:bf:b2:25:9e:37: 37:96:e8:de:6d:1a:0e:a6:38:bb:7f:4b:ac:f2:20: 5d:6c:ce:22:f3:5e:bc:a6:ce:8c:6d:f5:6a:0b:c6: 7d:f5:97:3b:3e:fc:07:ee:75:fe:82:72:d7:b8:d5: aa:a1:5a:ef:50:23:a6:52:eb:e5:77:a0:0c:94:9b: 29:97:27:07:0f:ce:1a:50:6f:0a:63:2d:06:4c:00: 8b:c0:66:50:d7:53:72:7a:0d:c0:dd:40:e6:81:81: ea:11:73:b8:25:67:52:cc:24:9e:2b:12:2e:0e:8d: 95:02:c2:8c:29:2d:94:30:f1:82:6a:df:c3:c7:cc: b1:12:64:78:5a:7c:3c:a1:a7:83:a5:f2:15:c7:21: 69:88:bb:15:5c:d5:29:00:a5:87:92:4d:e1:6f:7b: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:9B:1F:8E:BC:A6:16:89:23:81:2D:C2:E8:48:50:92:C7:E0:42 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:85:34:c1:6c:05:06:69:73:de:37:be:b5:55:9d:4c:d7:fa: fc:5e:6e:a5:24:6f:e3:70:50:55:e8:5d:49:f6:ea:9c:02:d5: c2:f7:bc:75:e2:06:3a:89:e1:66:59:77:4a:db:22:7a:14:98: 2e:b2:6d:10:b6:45:18:7c:11:72:63:d7:97:8f:34:d1:44:55: 75:77:2c:bf:b1:09:40:18:e8:fa:61:8c:c3:dc:d6:45:9a:9b: 91:87:65:a8:2e:7c:e4:44:9e:78:ad:2c:9e:2b:1d:ed:8e:c2: fb:da:52:d6:62:6f:a2:a9:a6:b2:b6:00:ff:8f:f4:39:82:08: eb:a9:27:fe:7e:02:8e:45:83:f7:d9:2b:e0:2d:b8:43:8c:4a: b4:3b:1b:9b:68:e9:97:d4:69:7a:f2:fe:a5:dd:81:20:62:51: 5b:2f:12:30:8c:49:1f:80:77:a8:68:eb:b2:a8:e1:1c:29:e4: 73:14:c7:fd:e3:e7:d4:b8:c2:eb:33:59:e0:0a:a0:6d:6a:fc: 3b:0f:96:69:c3:b8:3f:65:a5:80:b2:3d:5e:2a:c0:11:18:83: de:f8:58:83:dc:78:64:6e:c5:3e:72:e6:4f:7c:fe:0a:f1:5d: 65:db:8d:c5:c7:e7:69:c5:4c:b5:24:3f:97:4c:c5:05:bc:88: 3f:48:56:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjQxMTIzMDE1MjQ2WhcNMjQxMTMwMDE1MjQ2WjAYMRYwFAYD VQQDEw02NzQxMzU2ZS01ZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIG3rY14G3HGfnWHky66pgXmySl2cleVEoKbMOKd75y1Mdk1u80WSlVZT0+5 A8JQhEGyFrBLqeloSP4tvgsi5idVlL8r5CDLjlfy+AXmbyx/eC1S0MwDKtJCnXsG fIXzjWBMv7Ilnjc3lujebRoOpji7f0us8iBdbM4i8168ps6MbfVqC8Z99Zc7PvwH 7nX+gnLXuNWqoVrvUCOmUuvld6AMlJsplycHD84aUG8KYy0GTACLwGZQ11Nyeg3A 3UDmgYHqEXO4JWdSzCSeKxIuDo2VAsKMKS2UMPGCat/Dx8yxEmR4Wnw8oaeDpfIV xyFpiLsVXNUpAKWHkk3hb3tkvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQQmx+O vKYWiSOBLcLoSFCSx+BCMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkhTTBbAUGaXPeN761VZ1M1/r8Xm6lJG/jcFBV6F1J9uqcAtXC97x1 4gY6ieFmWXdK2yJ6FJgusm0QtkUYfBFyY9eXjzTRRFV1dyy/sQlAGOj6YYzD3NZF mpuRh2WoLnzkRJ54rSyeKx3tjsL72lLWYm+iqaaytgD/j/Q5ggjrqSf+fgKORYP3 2SvgLbhDjEq0OxubaOmX1Gl68v6l3YEgYlFbLxIwjEkfgHeoaOuyqOEcKeRzFMf9 4+fUuMLrM1ngCqBtavw7D5Zpw7g/ZaWAsj1eKsARGIPe+FiD3HhkbsU+cuZPfP4K 8V1l243Fx+dpxUy1JD+XTMUFvIg/SFZt -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org