$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: vNqqLXvOqUnRSHBa7dZ52su4zl+WbXZBbxJXfgIsOao= Subject key identifier: 9C:C1:B6:C4:EC:50:15:C0:67:D9:CB:46:D9:85:2A:61:A3:7C:F5:DF Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 0206 Signing time: Sat 23 Nov 2024 01:34:45 +0000 Manifest this update: Sat 23 Nov 2024 01:34:44 +0000 Manifest next update: Sat 30 Nov 2024 01:34:44 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: gIwjYQYG6CAuu/iPrgnvewvyGzhArSoJvkTVJTTRwiE=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: GxmjANpeukqxLs4FANE89YTMwPmxm5bH8pM5jU/l8kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Nov 23 01:34:44 2024 GMT Not After : Nov 30 01:34:44 2024 GMT Subject: CN=67413134-6571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:88:14:ee:30:e1:35:0b:d0:ec:8e:df:99: 4f:6d:1d:34:f5:a5:b0:8c:32:88:9b:1a:96:d4:36: d7:b9:e4:cb:04:48:64:7b:47:4b:2e:fd:a8:27:81: a3:88:3c:5c:44:62:eb:f2:9e:e9:c6:7d:5f:70:e1: ed:11:f8:f7:22:42:3b:85:d3:19:50:1e:ad:d2:42: 64:72:3c:3b:f9:da:a4:56:e0:48:dd:c4:4a:e7:7f: ac:c1:a6:70:24:dc:ac:ca:cb:12:58:a1:44:9b:b0: f1:f2:c9:be:a0:64:bc:4a:46:2c:63:91:d0:55:71: 61:f9:f8:87:4c:33:65:6d:ae:b2:cb:a6:ff:05:00: 23:6a:e2:e2:5f:8c:2b:6b:3e:35:ac:b3:d3:b9:78: 99:dc:d4:ad:2a:3b:c5:f2:7a:2c:f4:e7:f0:af:b9: e6:5a:6e:2b:eb:ec:e9:ed:cc:be:5f:fc:4c:fd:64: 48:f7:47:f9:6c:0b:14:31:7f:35:0a:9b:43:10:6e: 72:da:e6:9f:fa:91:76:2e:b2:21:92:d0:03:36:eb: c2:89:31:43:89:2c:a7:f5:62:16:a0:1d:ea:04:f1: 83:46:c9:ea:07:81:5d:5e:7b:ff:bb:cb:a6:b6:9b: af:3b:3f:68:a2:8c:05:a3:a9:d4:90:46:b2:1e:db: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:B6:C4:EC:50:15:C0:67:D9:CB:46:D9:85:2A:61:A3:7C:F5:DF X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ac:02:b1:f8:99:eb:1b:5f:eb:40:a1:c8:3b:c8:c1:8f:61: b7:f6:6b:a6:a8:51:27:b1:13:5e:97:e7:4a:88:1c:82:6f:8f: 22:d9:f5:1c:d7:b3:eb:c5:89:7b:06:9e:71:98:36:dc:ff:9c: de:f2:a0:10:95:a1:51:26:c0:65:30:1f:df:af:9f:e0:60:6d: 9c:9d:6d:bd:b6:69:e0:dc:c8:36:a0:27:bb:d3:04:59:f0:a0: 12:d2:aa:3c:71:78:fa:b5:a6:d9:53:1d:2e:74:4e:dd:c6:e2: de:ba:00:ad:07:91:5e:2a:f8:1f:b7:ee:a1:35:74:ab:17:2c: ff:6d:0a:db:bb:44:d1:5f:78:c1:13:28:89:4d:86:f9:8f:60: 25:eb:be:d8:7b:ea:07:03:f2:d4:6f:88:c6:fd:3e:b6:38:25: 92:d9:a8:0d:ab:37:aa:11:ca:0d:7f:18:57:fa:c0:f6:1d:16: c1:0d:21:2b:44:cc:02:d6:18:68:01:ab:5e:25:12:7c:14:ea: 95:12:0a:31:70:fa:1e:2f:72:a4:3e:8c:e5:46:e6:7e:58:4e: 8a:97:61:e3:4c:5b:d1:0f:21:bc:67:b9:b6:6e:f4:91:14:0a: e0:cb:2c:49:24:ff:19:6f:55:3b:ce:df:0f:6d:d4:f3:80:f0: 8f:62:65:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjQxMTIzMDEzNDQ0WhcNMjQxMTMwMDEzNDQ0WjAYMRYwFAYD VQQDEw02NzQxMzEzNC02NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTWIFO4w4TUL0OyO35lPbR009aWwjDKImxqW1DbXueTLBEhke0dLLv2oJ4Gj iDxcRGLr8p7pxn1fcOHtEfj3IkI7hdMZUB6t0kJkcjw7+dqkVuBI3cRK53+swaZw JNysyssSWKFEm7Dx8sm+oGS8SkYsY5HQVXFh+fiHTDNlba6yy6b/BQAjauLiX4wr az41rLPTuXiZ3NStKjvF8nos9Ofwr7nmWm4r6+zp7cy+X/xM/WRI90f5bAsUMX81 CptDEG5y2uaf+pF2LrIhktADNuvCiTFDiSyn9WIWoB3qBPGDRsnqB4FdXnv/u8um tpuvOz9ooowFo6nUkEayHtvG8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzBtsTs UBXAZ9nLRtmFKmGjfPXfMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjrAKx+JnrG1/rQKHIO8jBj2G39mumqFEnsRNel+dKiByCb48i2fUc 17PrxYl7Bp5xmDbc/5ze8qAQlaFRJsBlMB/fr5/gYG2cnW29tmng3Mg2oCe70wRZ 8KAS0qo8cXj6tabZUx0udE7dxuLeugCtB5FeKvgft+6hNXSrFyz/bQrbu0TRX3jB EyiJTYb5j2Al677Ye+oHA/LUb4jG/T62OCWS2agNqzeqEcoNfxhX+sD2HRbBDSEr RMwC1hhoAateJRJ8FOqVEgoxcPoeL3KkPozlRuZ+WE6Kl2HjTFvRDyG8Z7m2bvSR FArgyyxJJP8Zb1U7zt8PbdTzgPCPYmUc -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org