$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: TLxr1Rpo/h1IwkHmoTe6QZPwzhRKZMjOU9m/qOJ9sHE= Subject key identifier: 22:8F:CB:16:49:73:9B:77:F2:F3:77:47:B6:05:AC:66:2E:F4:EC:B1 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0B65 Signing time: Fri 22 Nov 2024 18:51:31 +0000 Manifest this update: Fri 22 Nov 2024 18:51:31 +0000 Manifest next update: Fri 29 Nov 2024 18:51:31 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: zroOYuMIJnYW1YU46xTnzBCoAKCWtadt7D6L+eyl3x4=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: Tj2VTOrTG521eWfpmsriO03fMas744CeHkfVcMr3bEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Nov 22 18:51:31 2024 GMT Not After : Nov 29 18:51:31 2024 GMT Subject: CN=6740d2b3-1615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:20:76:bd:05:cd:1e:ee:67:1a:75:2c:7e: 41:fb:d3:70:aa:d1:3f:57:3b:17:a7:11:0a:51:07: 90:b6:c4:dd:f0:bb:c9:36:5b:8b:12:b6:af:bd:27: 05:6d:5d:ec:23:d4:c4:7a:10:c5:b8:ef:98:fa:37: 98:8b:2c:b0:fe:7e:01:56:66:92:77:af:61:fd:98: 0c:e0:40:70:e9:b2:f0:ad:d9:e9:1a:e0:7a:8a:a9: fa:9d:aa:a0:35:2c:fd:20:0a:d7:02:f3:9b:32:0d: 64:24:d1:1f:e3:15:bf:16:b6:9d:89:e5:fe:f9:93: bb:42:17:90:54:41:95:2f:f1:3a:d2:86:ae:f3:08: c7:c5:c3:92:d1:d4:77:69:89:70:19:26:8f:5e:ff: 4d:99:30:ce:81:f4:6e:7c:6b:bd:a8:e3:09:5a:92: 64:b8:2c:ee:92:3a:94:e8:51:87:1e:35:28:57:1d: 85:43:62:5a:85:9d:29:27:0f:27:e9:52:2d:ae:75: 92:97:26:f9:c8:c3:f6:80:e9:44:49:20:00:3d:06: 78:81:88:73:0c:ca:31:d1:f6:9c:c6:53:b8:f1:cb: ac:d0:ce:52:86:e0:47:37:6a:58:3b:9b:bc:c1:89: 5f:e5:ff:1b:bd:a7:bb:fd:d9:04:32:0a:d9:f5:12: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:CB:16:49:73:9B:77:F2:F3:77:47:B6:05:AC:66:2E:F4:EC:B1 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:41:d1:fd:5c:56:d9:54:34:ce:9a:b6:9b:36:10:39:eb: f2:e4:f8:ca:5f:75:d3:fb:b1:2e:3a:71:3f:31:db:52:46:24: df:c5:23:73:c0:10:44:79:33:4d:8d:3f:dd:f9:64:01:e5:a8: c0:be:1e:33:cd:ca:82:84:ed:98:d8:13:33:8b:d2:2a:29:d9: 04:2b:e9:81:d4:fc:b9:df:73:86:e3:57:aa:13:1d:9e:f2:1b: 57:e4:08:b2:48:a8:83:35:b3:25:06:b6:d8:cb:8d:4e:07:c7: d3:fb:58:8c:1e:35:2b:a6:94:e1:2d:07:78:4d:85:33:5a:ca: a5:51:db:92:4d:3c:e4:50:13:ee:10:40:11:6c:2a:72:47:1a: 5e:44:d0:d5:63:d5:8b:28:36:34:b1:9d:09:3a:f1:a3:4e:06: 8a:65:43:9b:0c:8f:b1:7d:20:b7:8e:71:da:56:80:73:0f:77: 38:2b:e1:dc:fa:e1:98:dd:dc:87:95:e5:45:ac:a2:84:a0:71: b1:44:4b:51:dd:c0:7e:d6:1c:b2:46:d5:f8:8d:d2:3f:4b:1f: cd:d2:8f:5b:ad:f9:af:b5:96:a8:c7:aa:15:67:0e:89:ef:ee: ba:17:79:d0:ad:0e:fb:4c:3c:98:d4:e2:40:d0:8a:36:6e:8d: a0:f9:7a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjQxMTIyMTg1MTMxWhcNMjQxMTI5MTg1MTMxWjAYMRYwFAYD VQQDEw02NzQwZDJiMy0xNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eEgdr0FzR7uZxp1LH5B+9NwqtE/VzsXpxEKUQeQtsTd8LvJNluLEravvScF bV3sI9TEehDFuO+Y+jeYiyyw/n4BVmaSd69h/ZgM4EBw6bLwrdnpGuB6iqn6naqg NSz9IArXAvObMg1kJNEf4xW/FradieX++ZO7QheQVEGVL/E60oau8wjHxcOS0dR3 aYlwGSaPXv9NmTDOgfRufGu9qOMJWpJkuCzukjqU6FGHHjUoVx2FQ2JahZ0pJw8n 6VItrnWSlyb5yMP2gOlESSAAPQZ4gYhzDMox0facxlO48cus0M5ShuBHN2pYO5u8 wYlf5f8bvae7/dkEMgrZ9RJm5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKPyxZJ c5t38vN3R7YFrGYu9OyxMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8YEHR/VxW2VQ0zpq2mzYQOevy5PjKX3XT+7EuOnE/MdtSRiTfxSNz wBBEeTNNjT/d+WQB5ajAvh4zzcqChO2Y2BMzi9IqKdkEK+mB1Py533OG41eqEx2e 8htX5AiySKiDNbMlBrbYy41OB8fT+1iMHjUrppThLQd4TYUzWsqlUduSTTzkUBPu EEARbCpyRxpeRNDVY9WLKDY0sZ0JOvGjTgaKZUObDI+xfSC3jnHaVoBzD3c4K+Hc +uGY3dyHleVFrKKEoHGxREtR3cB+1hyyRtX4jdI/Sx/N0o9brfmvtZaox6oVZw6J 7+66F3nQrQ77TDyY1OJA0Io2bo2g+Xp2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org