$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: 8XlQtvhPozg/KKDuWu4TXFQMVOTAS/XYAahPvFfdx9A= Subject key identifier: 60:60:F5:79:7D:E5:9D:89:48:2B:65:BC:2F:30:B4:CB:2C:2E:5C:A3 Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 0158 Signing time: Sat 23 Nov 2024 02:27:07 +0000 Manifest this update: Sat 23 Nov 2024 02:27:07 +0000 Manifest next update: Sat 30 Nov 2024 02:27:07 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: GvFM7CQxAudxccgpO3eOuBQpRl37vcQDn2qGF3KDaJI=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: gmNihSedKpDGfcYPF1sadPjFdgvJvl9JTBA30x8f3SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: Nov 23 02:27:07 2024 GMT Not After : Nov 30 02:27:07 2024 GMT Subject: CN=67413d7b-3b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:39:ce:92:22:8b:37:03:eb:ac:ca:39:20: 9b:cb:ef:1d:2f:6d:ea:5d:34:53:f0:fb:4c:c5:03: 15:2d:98:d6:58:49:ae:2a:52:a7:bc:36:86:f4:0a: 9f:2e:76:2a:fe:18:fd:0a:f7:82:99:ab:21:b0:af: 7d:bf:05:eb:4c:62:6b:a8:9d:65:3a:4d:4f:9d:a2: c1:da:dd:d9:94:0a:6d:89:29:eb:f3:2e:c0:0f:d6: 2f:fc:ba:4e:f5:c0:07:a5:61:2c:4d:be:75:9f:08: e7:27:65:9b:db:8b:1a:b4:1f:7f:5a:b6:c4:0b:4f: dc:55:f7:26:78:51:51:4d:c6:a2:8a:03:15:f9:1f: 96:50:6b:03:da:8c:3b:4d:8d:12:26:de:0d:65:f3: 67:87:52:bd:bd:95:d4:af:8d:6c:b4:d4:5e:dd:6c: 15:15:05:8d:95:fb:7a:56:ba:59:c1:31:67:cc:94: dd:4f:22:9c:6f:7d:63:11:5e:1f:de:3e:0e:4b:da: f8:1d:cd:31:16:9a:f8:33:a9:8d:74:ed:fc:c4:12: 0f:68:62:01:b2:cd:d9:39:83:81:07:d1:9a:4c:46: 3f:ef:e6:36:50:5b:01:68:db:ec:09:f2:37:85:d7: 9e:2d:a4:bc:dd:ac:ca:48:85:d5:e0:0c:a7:18:54: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:60:F5:79:7D:E5:9D:89:48:2B:65:BC:2F:30:B4:CB:2C:2E:5C:A3 X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1e:a4:f2:69:51:9a:7f:68:60:ee:a0:54:19:7c:92:14:cf: ab:87:60:15:ca:37:5b:9c:6f:f3:6f:de:5e:17:f0:03:40:96: c2:a5:99:24:9e:7c:39:ad:23:1f:84:9c:cb:d0:c3:9e:fb:ec: c6:ab:df:27:e5:58:64:92:40:77:6d:4c:27:b4:dd:e1:55:8a: 94:1f:a3:2e:93:3a:61:37:9c:87:a5:88:c2:c7:19:0e:6c:57: db:99:69:e3:4f:e3:a4:85:0a:75:0e:10:3e:be:3e:31:73:f8: 3e:55:43:4c:8a:ca:fb:76:15:13:e0:f7:e3:bb:f8:c7:44:2e: 3c:6d:89:83:7b:06:97:14:93:35:d7:66:ef:4c:a2:1f:8e:b2: 74:f5:81:99:b7:bf:5a:fa:4d:17:7a:7b:b9:e2:55:64:2c:ab: 1b:ce:2b:06:7d:33:03:42:4e:4b:be:71:b7:bf:1d:38:c5:ac: ab:a9:e5:06:f8:ff:a6:91:73:fd:0c:5e:3e:25:b2:1a:be:80: 3b:ca:fe:fb:9e:92:22:72:70:f9:93:7f:76:9d:9e:93:f5:f7: 8d:0b:57:98:5f:be:d6:37:87:fe:f3:d9:61:25:fb:7e:c3:2b: ba:ef:ad:9c:c8:9c:f8:8d:ef:c6:4d:dd:5c:bb:67:89:76:01: 7b:67:e0:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjQxMTIzMDIyNzA3WhcNMjQxMTMwMDIyNzA3WjAYMRYwFAYD VQQDEw02NzQxM2Q3Yi0zYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Vo5zpIiizcD66zKOSCby+8dL23qXTRT8PtMxQMVLZjWWEmuKlKnvDaG9Aqf LnYq/hj9CveCmashsK99vwXrTGJrqJ1lOk1PnaLB2t3ZlAptiSnr8y7AD9Yv/LpO 9cAHpWEsTb51nwjnJ2Wb24satB9/WrbEC0/cVfcmeFFRTcaiigMV+R+WUGsD2ow7 TY0SJt4NZfNnh1K9vZXUr41stNRe3WwVFQWNlft6VrpZwTFnzJTdTyKcb31jEV4f 3j4OS9r4Hc0xFpr4M6mNdO38xBIPaGIBss3ZOYOBB9GaTEY/7+Y2UFsBaNvsCfI3 hdeeLaS83azKSIXV4AynGFSVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBg9Xl9 5Z2JSCtlvC8wtMssLlyjMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxHqTyaVGaf2hg7qBUGXySFM+rh2AVyjdbnG/zb95eF/ADQJbCpZkk nnw5rSMfhJzL0MOe++zGq98n5VhkkkB3bUwntN3hVYqUH6MukzphN5yHpYjCxxkO bFfbmWnjT+OkhQp1DhA+vj4xc/g+VUNMisr7dhUT4Pfju/jHRC48bYmDewaXFJM1 12bvTKIfjrJ09YGZt79a+k0Xenu54lVkLKsbzisGfTMDQk5LvnG3vx04xayrqeUG +P+mkXP9DF4+JbIavoA7yv77npIicnD5k392nZ6T9feNC1eYX77WN4f+89lhJft+ wyu6762cyJz4je/GTd1cu2eJdgF7Z+Dg -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org