$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: A9tI8dgoDOFWtIZQ5iENz/8XhGiJlbte9RJaKh61KuE= Subject key identifier: C6:C2:42:46:92:98:8A:6C:7E:2E:66:F5:51:6A:5E:4B:24:63:9A:7E Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 06D2 Signing time: Fri 22 Nov 2024 21:38:08 +0000 Manifest this update: Fri 22 Nov 2024 21:38:08 +0000 Manifest next update: Fri 29 Nov 2024 21:38:08 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: QnWekeZvCGGSCvuBeVuEUl+kmDZ+9VceImYJQbngsik=) 2: 765EF4EC2FB411EB9720723EC4F9AE02.roa (hash: g/bDSbiGLy9Ib5ggQX4O6TPdKn7KMsf6PZdpxfys5jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: Nov 22 21:38:08 2024 GMT Not After : Nov 29 21:38:08 2024 GMT Subject: CN=6740f9c0-7267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:9b:e9:91:ab:67:ea:2f:8a:93:c9:9f:34: a1:d0:92:f7:68:11:55:38:a2:51:3e:b3:67:4f:06: b4:cd:2c:f3:b6:a5:f1:37:e9:30:88:11:fc:76:12: 0b:aa:eb:d7:e5:7c:45:94:7c:b6:79:a3:71:93:2e: c5:72:31:9b:bf:fb:ca:48:ff:d0:e7:d6:cd:6d:a8: e1:e7:79:5e:ae:b1:3e:5c:a7:0b:51:f5:1a:ad:51: cf:f3:75:c0:58:74:cf:77:03:25:6d:e8:26:ff:65: 3c:7b:fa:00:5a:c3:73:14:de:67:62:3a:b8:d4:cb: 64:64:05:c1:0b:4b:d0:63:a2:f3:15:c6:c8:31:01: 3d:98:1d:5a:1d:cc:21:9f:ea:7f:9f:b7:6b:ca:3e: 5d:97:5b:6a:31:52:43:90:4a:5b:2f:51:e5:17:7c: 12:da:d7:43:9e:4d:7a:80:56:03:d8:27:85:34:8d: d2:a9:ee:8b:ad:03:9f:6e:55:69:ad:32:25:b7:b9: d6:15:e2:15:a5:e3:bf:7f:d4:b5:ff:a7:90:fb:fa: 20:77:b0:c7:77:03:3a:49:47:00:d1:08:45:dd:0a: be:e9:13:fd:d6:d1:38:73:76:18:a0:e4:bb:33:12: 81:99:2e:18:d1:f3:86:bb:6d:82:74:19:06:46:b3: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C2:42:46:92:98:8A:6C:7E:2E:66:F5:51:6A:5E:4B:24:63:9A:7E X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1b:31:1b:47:0a:cf:27:53:c4:16:4d:7d:a3:04:f3:d5:d2: f1:cc:4f:94:3c:e5:04:5a:17:d8:45:d4:dd:0f:12:8f:1d:5b: b4:0c:6e:5b:b7:3e:8e:d9:da:51:17:3e:33:2a:9a:0c:89:77: 9a:9d:81:2c:82:b5:cd:91:ff:a4:d7:fe:25:6c:ff:81:8c:6f: a7:1e:f6:83:be:ac:26:32:58:5a:06:e1:f0:bd:fe:7f:cc:97: e7:ec:53:f6:c1:a1:54:c0:cd:2a:54:9b:8d:ac:38:8b:e9:a2: 86:86:b7:91:55:ec:68:8a:74:e8:a6:43:b5:11:93:7d:fa:1a: 48:eb:02:11:e2:c8:e5:d2:14:0c:21:c8:42:1c:ba:09:cd:d5: a8:41:53:8a:17:4c:e4:16:d9:78:a1:b7:46:e7:4b:36:5b:ef: 6a:1b:72:69:28:24:0b:21:74:ab:d1:5c:00:f8:f1:9e:ea:84: f8:85:27:4f:83:e3:a4:41:71:ff:99:c4:be:af:86:49:2f:be: f6:41:04:fc:72:58:7c:49:2d:7a:de:b1:a4:a4:77:08:f9:f8: 86:71:9b:60:48:8d:e4:f6:f4:06:57:bb:5d:ba:7f:06:b6:34: 3b:16:65:2d:ed:73:98:0c:cc:00:42:1c:5a:84:f0:ad:d7:a5: d0:f2:38:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjQxMTIyMjEzODA4WhcNMjQxMTI5MjEzODA4WjAYMRYwFAYD VQQDEw02NzQwZjljMC03MjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNeb6ZGrZ+ovipPJnzSh0JL3aBFVOKJRPrNnTwa0zSzztqXxN+kwiBH8dhIL quvX5XxFlHy2eaNxky7FcjGbv/vKSP/Q59bNbajh53lerrE+XKcLUfUarVHP83XA WHTPdwMlbegm/2U8e/oAWsNzFN5nYjq41MtkZAXBC0vQY6LzFcbIMQE9mB1aHcwh n+p/n7dryj5dl1tqMVJDkEpbL1HlF3wS2tdDnk16gFYD2CeFNI3Sqe6LrQOfblVp rTIlt7nWFeIVpeO/f9S1/6eQ+/ogd7DHdwM6SUcA0QhF3Qq+6RP91tE4c3YYoOS7 MxKBmS4Y0fOGu22CdBkGRrNq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbCQkaS mIpsfi5m9VFqXkskY5p+MB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+GzEbRwrPJ1PEFk19owTz1dLxzE+UPOUEWhfYRdTdDxKPHVu0DG5b tz6O2dpRFz4zKpoMiXeanYEsgrXNkf+k1/4lbP+BjG+nHvaDvqwmMlhaBuHwvf5/ zJfn7FP2waFUwM0qVJuNrDiL6aKGhreRVexoinTopkO1EZN9+hpI6wIR4sjl0hQM IchCHLoJzdWoQVOKF0zkFtl4obdG50s2W+9qG3JpKCQLIXSr0VwA+PGe6oT4hSdP g+OkQXH/mcS+r4ZJL772QQT8clh8SS163rGkpHcI+fiGcZtgSI3k9vQGV7tdun8G tjQ7FmUt7XOYDMwAQhxahPCt16XQ8jgC -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:42 2024 by rpki-client on console-ams.rpki-client.org