$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: rh+T3Y1LZVTu1ZrdX+s3NAqe5B4nEoRYv3PT51uO1L8= Subject key identifier: B5:E1:3E:68:46:2F:BB:D3:6A:57:39:A4:49:36:6A:15:BA:EF:63:3F Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 043C Signing time: Fri 22 Nov 2024 23:49:56 +0000 Manifest this update: Fri 22 Nov 2024 23:49:55 +0000 Manifest next update: Fri 29 Nov 2024 23:49:55 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: w0PStKhRDhpYVL03NZedksxxZRSrh5jtvrb2D1CylNg=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: h2VFu+bRi/Tc7d1D9Q7uqR0rEcZTl9eTudd8RE6n4PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: Nov 22 23:49:55 2024 GMT Not After : Nov 29 23:49:55 2024 GMT Subject: CN=674118a3-1b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:9c:f0:e8:91:98:24:36:8a:06:1d:dd:89: d6:74:c2:64:34:5e:41:b6:8a:3a:e7:52:20:e9:9d: 10:22:df:44:7c:19:fd:9f:50:1d:31:c4:c4:d2:a6: c4:7a:4c:68:6d:ac:93:01:26:15:87:ff:af:91:21: 73:9b:8b:a2:b2:50:7f:5b:96:2f:e5:a1:c7:ba:f7: e4:29:a1:5e:1c:a5:c5:49:d4:64:53:78:29:b4:b8: a5:50:03:cf:c0:c5:9e:8a:51:4a:b5:25:52:2a:0d: bb:de:c7:8f:d1:67:9f:ec:12:51:9a:70:8a:1a:ca: cd:2d:3c:ae:65:26:f1:e5:63:93:1f:09:05:00:ba: 1f:5d:66:3b:f3:10:1e:0e:f3:18:9a:db:5d:38:87: 61:95:81:9d:8b:fb:87:2d:5a:82:7c:52:79:c8:c9: 0e:7d:99:bb:79:c5:a6:13:5e:61:7b:14:4d:08:76: b2:ff:49:32:c7:62:4e:f4:f2:4b:18:59:bd:0a:a7: 97:f1:e1:ea:9d:cd:a9:7e:a8:5e:95:5b:c9:53:07: 58:12:70:d2:7d:37:28:85:2e:e5:80:7f:25:64:5f: 63:40:a2:39:31:bb:38:92:0f:14:6b:ac:0d:02:3a: 3c:2b:4f:df:49:79:f0:bf:33:2c:a7:7e:7b:fc:f6: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:3E:68:46:2F:BB:D3:6A:57:39:A4:49:36:6A:15:BA:EF:63:3F X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1e:b7:8a:67:d6:26:09:5a:28:49:86:34:2b:ee:c9:19:48: af:53:1c:84:ae:f2:d5:1f:d5:4c:d8:4a:a4:04:d8:da:f7:7c: ac:f4:03:69:f7:4d:a1:fd:f2:1b:23:69:f3:e8:86:89:e5:8a: ea:7a:aa:47:2d:18:11:b8:7f:fa:8c:83:0f:d4:c0:1e:30:19: 81:bf:12:ec:93:59:dd:b2:97:6c:cb:c9:33:9a:b6:15:08:1c: 81:7d:1a:4a:d4:21:b2:0b:51:de:d3:b1:67:02:e5:91:32:1a: 24:62:b0:de:22:39:25:7b:1b:0c:90:e4:35:b9:22:df:58:d6: 0a:6a:1d:f7:7e:4f:d0:2a:81:1e:4e:71:67:6c:a7:98:50:70: 3b:22:d6:69:63:c7:fb:59:36:93:bc:1d:76:57:8d:86:0f:2f: 1e:04:47:18:eb:10:6c:f0:89:c0:4c:50:eb:85:5b:8e:d9:3e: ea:ea:17:b1:69:7a:2c:9d:b9:04:42:c3:34:aa:5d:c5:a4:c9: 7d:85:e3:c1:02:1e:d2:65:a1:d7:a2:68:9e:11:46:a7:c6:ec: 52:3e:27:a9:df:75:0f:b6:2a:18:09:1e:7d:6f:cb:0a:0d:92: 83:31:c8:4a:e3:0a:ff:2f:8b:6c:ab:11:12:18:40:fe:ca:0b: 78:0c:53:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjQxMTIyMjM0OTU1WhcNMjQxMTI5MjM0OTU1WjAYMRYwFAYD VQQDEw02NzQxMThhMy0xYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3ic8OiRmCQ2igYd3YnWdMJkNF5Btoo651Ig6Z0QIt9EfBn9n1AdMcTE0qbE ekxobayTASYVh/+vkSFzm4uislB/W5Yv5aHHuvfkKaFeHKXFSdRkU3gptLilUAPP wMWeilFKtSVSKg273seP0Wef7BJRmnCKGsrNLTyuZSbx5WOTHwkFALofXWY78xAe DvMYmttdOIdhlYGdi/uHLVqCfFJ5yMkOfZm7ecWmE15hexRNCHay/0kyx2JO9PJL GFm9CqeX8eHqnc2pfqhelVvJUwdYEnDSfTcohS7lgH8lZF9jQKI5Mbs4kg8Ua6wN Ajo8K0/fSXnwvzMsp357/Pas7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXhPmhG L7vTalc5pEk2ahW672M/MB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsHreKZ9YmCVooSYY0K+7JGUivUxyErvLVH9VM2EqkBNja93ys9ANp 902h/fIbI2nz6IaJ5YrqeqpHLRgRuH/6jIMP1MAeMBmBvxLsk1ndspdsy8kzmrYV CByBfRpK1CGyC1He07FnAuWRMhokYrDeIjklexsMkOQ1uSLfWNYKah33fk/QKoEe TnFnbKeYUHA7ItZpY8f7WTaTvB12V42GDy8eBEcY6xBs8InATFDrhVuO2T7q6hex aXosnbkEQsM0ql3FpMl9hePBAh7SZaHXomieEUanxuxSPiep33UPtioYCR59b8sK DZKDMchK4wr/L4tsqxESGED+ygt4DFN5 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org