$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: t+uw1vQQTaHDPo5fA5eor4ak/p4V8iBmZ6mTie5haMM= Subject key identifier: BF:89:13:63:73:A6:9A:C6:20:E5:9B:62:AA:4E:54:9A:37:9F:C3:A3 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 0727 Signing time: Fri 22 Nov 2024 21:17:01 +0000 Manifest this update: Fri 22 Nov 2024 21:17:01 +0000 Manifest next update: Fri 29 Nov 2024 21:17:01 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: Ytctucjd28l5sdp5w9Rj1d6Rdt9JChE8JjTXTSIlpZE=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Nov 22 21:17:01 2024 GMT Not After : Nov 29 21:17:01 2024 GMT Subject: CN=6740f4cd-105f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:49:f5:55:71:52:da:b6:a4:fe:24:af:1e: c4:21:63:48:62:27:7f:af:30:9b:26:dd:70:1d:ee: e4:df:18:13:a4:bc:94:07:19:33:3f:ea:30:1d:07: be:ce:b6:25:36:c1:29:f2:08:42:16:ef:a9:4c:46: d7:f3:fd:6b:b3:5f:a5:76:2e:59:d3:95:fa:ce:83: b8:f8:84:df:ec:fa:f3:5b:8c:b4:19:eb:58:55:04: 82:6e:30:d3:33:e9:b8:a9:11:71:2b:c3:c3:80:db: d9:38:4e:3f:87:e0:14:f6:9c:4d:3a:0d:c7:ae:73: 81:16:ae:ac:f1:9a:b6:32:0c:34:65:72:82:92:69: 28:08:00:80:a2:ec:a2:97:c3:99:b2:e5:0c:fb:81: 96:80:4a:65:c1:ae:f2:18:43:3b:88:98:75:22:47: ca:9b:b2:05:69:9e:84:22:81:6e:36:27:89:da:1f: cd:c7:0b:32:2e:67:43:3d:93:24:ed:d5:eb:6e:5a: 1a:91:53:35:39:91:f4:73:6b:6f:97:72:87:de:21: 1f:24:fb:ba:df:55:fd:a4:4a:45:a3:56:00:25:59: f7:e0:36:fe:6d:55:58:35:a3:7d:6c:97:52:0b:28: 18:bb:26:95:85:ff:dd:18:8c:33:6d:ba:6a:b8:60: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:13:63:73:A6:9A:C6:20:E5:9B:62:AA:4E:54:9A:37:9F:C3:A3 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:56:28:6e:e5:82:43:e1:10:32:87:60:c5:ec:bd:6d:ec:18: e3:51:aa:5f:85:98:d9:9c:3b:e7:c9:d8:a3:3e:f7:c3:7b:02: 5f:ac:1a:d8:b1:aa:5d:0a:9f:d6:9b:60:2a:46:a2:8d:15:28: ba:46:66:c7:64:c4:86:55:f9:3d:6a:5c:da:12:ee:c5:3d:23: 0f:0f:2f:7e:75:5c:03:1c:ad:8b:9f:72:1e:13:87:43:11:c2: 12:91:f3:63:ae:13:1c:8b:68:be:83:b7:c1:52:13:a1:5a:09: ba:a0:d0:01:9b:85:b5:a7:54:d4:5c:31:58:bd:8d:c5:65:3d: 0f:f7:13:d2:e4:87:6f:f4:d2:c6:dc:42:8d:12:08:53:17:5a: 0f:4f:49:52:45:2b:12:39:29:f6:52:67:26:9b:55:7f:29:a4: 71:ff:3c:c2:57:3b:aa:8d:67:49:e7:41:da:7e:c6:82:65:57: 61:64:b3:bb:40:41:2e:b9:5d:44:59:bc:68:b2:0e:db:1e:d2: 71:4a:94:b4:38:d7:79:94:7c:05:36:c2:0c:3f:82:f7:ba:da: 10:4f:9d:39:29:e1:41:5e:b9:b9:27:82:72:bc:e8:db:02:38: 92:c3:a7:4d:3e:67:c0:5e:d3:d5:35:64:11:ed:65:91:70:65: 97:29:3e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjQxMTIyMjExNzAxWhcNMjQxMTI5MjExNzAxWjAYMRYwFAYD VQQDEw02NzQwZjRjZC0xMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZpJ9VVxUtq2pP4krx7EIWNIYid/rzCbJt1wHe7k3xgTpLyUBxkzP+owHQe+ zrYlNsEp8ghCFu+pTEbX8/1rs1+ldi5Z05X6zoO4+ITf7PrzW4y0GetYVQSCbjDT M+m4qRFxK8PDgNvZOE4/h+AU9pxNOg3HrnOBFq6s8Zq2Mgw0ZXKCkmkoCACAouyi l8OZsuUM+4GWgEplwa7yGEM7iJh1IkfKm7IFaZ6EIoFuNieJ2h/NxwsyLmdDPZMk 7dXrbloakVM1OZH0c2tvl3KH3iEfJPu631X9pEpFo1YAJVn34Db+bVVYNaN9bJdS CygYuyaVhf/dGIwzbbpquGCJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+JE2Nz pprGIOWbYqpOVJo3n8OjMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgVihu5YJD4RAyh2DF7L1t7BjjUapfhZjZnDvnydijPvfDewJfrBrY sapdCp/Wm2AqRqKNFSi6RmbHZMSGVfk9alzaEu7FPSMPDy9+dVwDHK2Ln3IeE4dD EcISkfNjrhMci2i+g7fBUhOhWgm6oNABm4W1p1TUXDFYvY3FZT0P9xPS5Idv9NLG 3EKNEghTF1oPT0lSRSsSOSn2Umcmm1V/KaRx/zzCVzuqjWdJ50HafsaCZVdhZLO7 QEEuuV1EWbxosg7bHtJxSpS0ONd5lHwFNsIMP4L3utoQT505KeFBXrm5J4JyvOjb AjiSw6dNPmfAXtPVNWQR7WWRcGWXKT7p -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org