$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json) Hash identifier: QcEsdLkh2+Dc7985rgvUvnd7RXLrChuMlHPvgL+usyY= Subject key identifier: E0:82:E2:AD:28:B0:7B:22:0F:E0:E3:F3:BB:34:54:9D:43:46:5B:C1 Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft Manifest number: BF Signing time: Sat 23 Nov 2024 03:55:57 +0000 Manifest this update: Sat 23 Nov 2024 03:55:57 +0000 Manifest next update: Sat 30 Nov 2024 03:55:57 +0000 Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: ERgA4kn+6OENkeDkyaypIhGYp3rpz8dgwGD9Ai4h9mA=) 2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: n4N0FT2lZDwaB7NLBXSRmim8K1WaikU2H0XvlYORAuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Validity Not Before: Nov 23 03:55:57 2024 GMT Not After : Nov 30 03:55:57 2024 GMT Subject: CN=6741524d-7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:f1:b1:de:a7:67:35:f8:89:ee:7d:54:1c: 30:87:63:4c:cd:1f:65:b4:7e:c3:55:0d:43:40:c3: ab:a8:16:4c:14:6b:d2:d4:88:a4:76:54:5d:5d:3b: e0:92:cf:91:ca:09:c9:73:1a:06:c1:2d:b1:65:cd: 1f:3f:d2:a0:36:12:34:2e:f8:61:13:8b:5c:be:08: 32:42:2b:47:64:35:17:96:0a:22:92:48:45:5a:9b: d8:70:2f:6c:40:c6:61:8e:8d:4f:68:85:a0:56:80: cd:d1:3f:a2:ae:02:c0:29:9e:78:f7:77:f3:ed:e8: cf:e0:91:b3:7c:f8:74:3d:c6:07:49:cd:16:13:4e: b0:59:7c:e0:e1:29:77:78:25:b9:03:71:32:7b:24: 9e:a6:25:2c:d1:f2:45:d1:7b:34:ec:7d:b1:65:57: 94:05:46:76:8d:10:86:a7:03:fa:7a:79:c0:62:30: e7:f2:a5:84:70:39:5f:91:5d:ad:39:8b:27:de:b7: 3e:90:81:4f:ca:a5:08:56:5b:4e:45:af:62:7d:97: 3a:85:83:87:97:9c:66:2a:3c:a9:38:ce:ed:f5:10: 93:b8:6f:68:aa:f0:b4:ed:bc:8d:00:04:8a:72:f8: 2a:c0:da:12:c2:c1:66:19:17:7a:13:e5:ad:a8:04: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:E2:AD:28:B0:7B:22:0F:E0:E3:F3:BB:34:54:9D:43:46:5B:C1 X509v3 Authority Key Identifier: keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:df:ce:ee:f3:e1:b6:bf:ec:35:58:d8:27:f0:d5:b1:f2: db:e8:bb:90:95:28:06:8e:c0:da:46:9d:70:81:b4:cb:67:0b: f4:02:98:0d:95:a1:b9:8e:ca:f4:4c:aa:a7:ea:40:80:d6:30: 36:97:e6:df:c3:32:bd:e2:ee:e0:b7:72:4e:ac:58:00:97:6e: 39:a7:fa:52:54:d7:6f:a4:21:a2:80:cd:7c:9d:6c:bb:a1:e4: ef:9a:88:de:30:0a:6d:29:80:bd:93:c2:99:cb:eb:e6:8d:e8: 29:87:90:96:13:84:9f:9c:10:b8:b3:cb:cd:20:3d:38:66:0a: ce:17:57:8c:ca:22:22:01:e0:fb:8a:0c:67:1b:c2:3b:f0:63: 94:da:a1:b1:a6:0d:80:42:bb:d6:bd:e2:91:bd:b2:88:32:a5: b1:6f:d6:ea:33:47:52:97:e7:23:90:1e:80:18:79:9d:17:06: fe:14:a0:18:6c:40:96:18:33:93:e3:a0:7a:a9:5d:22:9a:ec: 75:93:fb:30:0b:b5:ed:a5:97:44:c7:1b:8c:98:aa:76:bd:8c: 86:34:9a:50:44:2e:f4:a3:85:3c:ab:8b:21:05:fd:20:2f:f0: d3:34:2a:67:a8:d7:f1:aa:d8:4e:61:0e:88:a4:dd:94:20:a4: 93:52:43:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3QjExMTAvBgNVBAUTKDQzMkEzNkU2RDU3MDBCMEJDQUNDRTBGNDE1NzZBRTZC MTNDQUQzQzAwHhcNMjQxMTIzMDM1NTU3WhcNMjQxMTMwMDM1NTU3WjAYMRYwFAYD VQQDEw02NzQxNTI0ZC03MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAXxsd6nZzX4ie59VBwwh2NMzR9ltH7DVQ1DQMOrqBZMFGvS1IikdlRdXTvg ks+RygnJcxoGwS2xZc0fP9KgNhI0LvhhE4tcvggyQitHZDUXlgoikkhFWpvYcC9s QMZhjo1PaIWgVoDN0T+irgLAKZ5493fz7ejP4JGzfPh0PcYHSc0WE06wWXzg4Sl3 eCW5A3EyeySepiUs0fJF0Xs07H2xZVeUBUZ2jRCGpwP6ennAYjDn8qWEcDlfkV2t OYsn3rc+kIFPyqUIVltORa9ifZc6hYOHl5xmKjypOM7t9RCTuG9oqvC07byNAASK cvgqwNoSwsFmGRd6E+WtqASMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCC4q0o sHsiD+Dj87s0VJ1DRlvBMB8GA1UdIwQYMBaAFEMqNubVcAsLyszg9BV2rmsTytPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdCMS84RkFGMkJERTgy QTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3dkt6T0QwRlhhdWF4UEsw OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdCMS84RkFGMkJERTgyQTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3 dkt6T0QwRlhhdWF4UEswOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO+9/O7vPhtr/sNVjYJ/DVsfLb6LuQlSgGjsDaRp1wgbTLZwv0ApgN laG5jsr0TKqn6kCA1jA2l+bfwzK94u7gt3JOrFgAl245p/pSVNdvpCGigM18nWy7 oeTvmojeMAptKYC9k8KZy+vmjegph5CWE4SfnBC4s8vNID04ZgrOF1eMyiIiAeD7 igxnG8I78GOU2qGxpg2AQrvWveKRvbKIMqWxb9bqM0dSl+cjkB6AGHmdFwb+FKAY bECWGDOT46B6qV0imux1k/swC7XtpZdExxuMmKp2vYyGNJpQRC70o4U8q4shBf0g L/DTNCpnqNfxqthOYQ6IpN2UIKSTUkO2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org