$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft File: QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft (raw, json) Hash identifier: maaSaw86QmTEpeqx/ZFUj/qhIl0MQFC3mFN9CAaNnJM= Subject key identifier: 17:A4:29:B5:F5:C5:88:CB:44:96:A7:61:E3:AD:1D:22:C3:F8:EE:2B Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft Manifest number: 0718 Signing time: Fri 22 Nov 2024 21:23:17 +0000 Manifest this update: Fri 22 Nov 2024 21:23:16 +0000 Manifest next update: Fri 29 Nov 2024 21:23:16 +0000 Files and hashes: 1: QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl (hash: YoynDtZX6DU8BUjv66/qilJSMKt3o2BZJ2BkkN7lGbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB Validity Not Before: Nov 22 21:23:16 2024 GMT Not After : Nov 29 21:23:16 2024 GMT Subject: CN=6740f645-638f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:17:67:91:9e:4f:0d:5f:9b:f2:1b:9c:72: 01:92:d9:62:c4:2e:44:52:e4:c7:2a:f5:8e:58:f8: 9e:2e:14:06:8a:95:9e:c8:85:ca:00:00:c1:3b:23: 62:88:fe:90:a1:93:a0:c1:28:7e:84:60:66:51:71: f1:3c:da:12:b9:26:0a:75:ee:d6:c0:21:b4:d2:29: 8e:85:3b:dc:5d:65:f1:f8:d4:fe:78:55:2a:b2:a7: fa:56:8b:d3:47:25:90:5b:46:8a:6e:51:11:49:10: 17:90:84:bb:02:48:10:bd:6c:fd:9d:0d:5c:56:6d: e7:d3:75:13:21:60:2e:da:11:92:5c:cc:d0:8d:c0: d2:55:c1:86:de:a1:b1:c8:78:21:1e:29:99:2d:b2: bd:a4:02:e1:9d:c4:94:aa:46:56:d6:98:c5:de:d2: 00:a2:2e:29:c0:3a:57:de:ee:47:95:5a:b1:98:d7: a6:1b:9e:b3:8f:5d:e4:98:f5:c5:f2:17:87:6c:22: 08:e8:9c:a6:e2:f7:01:c8:75:34:55:fc:af:34:65: db:9f:43:df:7f:13:f0:bb:d5:12:ea:62:aa:e3:6b: de:98:ff:94:a6:ed:30:fb:2a:7d:94:e9:92:05:c2: c8:1d:69:c7:5d:6c:74:51:5b:95:c8:82:19:87:17: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:29:B5:F5:C5:88:CB:44:96:A7:61:E3:AD:1D:22:C3:F8:EE:2B X509v3 Authority Key Identifier: keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:9b:36:6b:34:95:03:5d:c4:2a:7e:66:40:63:90:c4:be: 65:6b:11:18:d1:5c:bc:34:36:57:11:1d:52:01:a5:76:60:d5: d4:40:1b:30:8a:3c:d5:3c:c6:0d:a5:3e:7b:69:13:f8:1b:fd: 9d:62:78:06:b2:84:11:89:a2:a3:59:ec:44:ed:9f:0f:a3:be: 1a:e6:31:c6:c3:64:8f:55:7a:3a:b7:fc:9e:fe:ca:e4:0d:ef: d8:8a:ae:f1:83:16:f5:4f:1e:6a:f5:a5:f6:b3:06:28:f2:8a: 10:12:c8:13:8a:39:19:38:5c:2c:56:eb:83:89:6a:30:ca:bc: 2e:ec:9c:c3:29:e6:fa:a9:ac:34:ad:06:44:f5:b4:33:f3:b2: 25:f7:60:8b:72:e1:cb:a3:fc:98:d7:a5:45:a1:5a:3e:02:dc: b5:5c:35:ae:38:cd:b7:71:42:ab:52:fd:80:cb:9a:82:2e:3a: 3d:74:28:8e:1c:f2:18:a9:ff:7f:a6:a0:89:12:60:e4:d8:eb: 83:c1:d8:2f:18:fd:e7:11:3f:1e:8b:0a:9b:be:1d:8c:93:a1: 3a:ef:ae:4b:64:e4:ea:69:46:1a:bb:6b:8b:e3:8b:69:e5:eb: 71:a7:6d:b5:3a:f4:81:8b:33:70:fd:00:90:3b:88:92:c0:48: dc:a3:5b:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5NDYxMTAvBgNVBAUTKDQzMzhDRTNDMDYzMTBBN0E5NEYwOUJCMTM2RkFDQkMy ODM1NUFGQ0IwHhcNMjQxMTIyMjEyMzE2WhcNMjQxMTI5MjEyMzE2WjAYMRYwFAYD VQQDEw02NzQwZjY0NS02MzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGUXZ5GeTw1fm/IbnHIBktlixC5EUuTHKvWOWPieLhQGipWeyIXKAADBOyNi iP6QoZOgwSh+hGBmUXHxPNoSuSYKde7WwCG00imOhTvcXWXx+NT+eFUqsqf6VovT RyWQW0aKblERSRAXkIS7AkgQvWz9nQ1cVm3n03UTIWAu2hGSXMzQjcDSVcGG3qGx yHghHimZLbK9pALhncSUqkZW1pjF3tIAoi4pwDpX3u5HlVqxmNemG56zj13kmPXF 8heHbCII6Jym4vcByHU0VfyvNGXbn0PffxPwu9US6mKq42vemP+Upu0w+yp9lOmS BcLIHWnHXWx0UVuVyIIZhxeZAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBekKbX1 xYjLRJanYeOtHSLD+O4rMB8GA1UdIwQYMBaAFEM4zjwGMQp6lPCbsTb6y8KDVa/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTk0Ni9DNjdFRDFGRTE3 RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENucVU4SnV4TnZyTHdvTlZy OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F6ak9QQVl4Q25xVThKdXhOdnJMd29OVnI4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTk0Ni9DNjdFRDFGRTE3RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENu cVU4SnV4TnZyTHdvTlZyOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfwps2azSVA13EKn5mQGOQxL5laxEY0Vy8NDZXER1SAaV2YNXUQBsw ijzVPMYNpT57aRP4G/2dYngGsoQRiaKjWexE7Z8Po74a5jHGw2SPVXo6t/ye/srk De/Yiq7xgxb1Tx5q9aX2swYo8ooQEsgTijkZOFwsVuuDiWowyrwu7JzDKeb6qaw0 rQZE9bQz87Il92CLcuHLo/yY16VFoVo+Aty1XDWuOM23cUKrUv2Ay5qCLjo9dCiO HPIYqf9/pqCJEmDk2OuDwdgvGP3nET8eiwqbvh2Mk6E6765LZOTqaUYau2uL44tp 5etxp221OvSBizNw/QCQO4iSwEjco1sw -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org