$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: aE1vLTSMRGIGLboIfQoKXW4RfB5M8npVvMJGhgWDG9Q= Subject key identifier: 39:D4:27:10:25:A9:C6:37:AF:2F:1D:31:B2:0C:49:5B:A4:EC:41:78 Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: D2 Signing time: Sat 23 Nov 2024 03:46:00 +0000 Manifest this update: Sat 23 Nov 2024 03:46:00 +0000 Manifest next update: Sat 30 Nov 2024 03:46:00 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: hk5pLfogm3MqUwLH0kdDzqWEQ/og2LvIs6ZRK5PxdGM=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Nov 23 03:46:00 2024 GMT Not After : Nov 30 03:46:00 2024 GMT Subject: CN=67414ff8-3af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:97:aa:74:ca:33:ba:b4:13:38:5a:fe:34: 88:a6:d5:f7:7d:5e:a9:fb:c8:de:77:18:0b:f1:c4: 55:2f:93:68:70:51:f9:ef:3a:23:f6:03:b8:dc:51: ea:18:7a:3d:c2:3b:ae:44:98:f5:a3:09:f3:7a:bd: 33:30:b6:67:9a:f5:bc:e9:bf:35:88:22:a9:42:77: 0d:50:23:e9:c2:a0:a4:0c:64:e8:13:38:35:cf:f0: 20:e0:83:bb:03:b8:bb:9a:6d:1b:cd:fa:b7:75:84: 6a:d4:ba:4d:31:32:3d:1c:c4:9c:44:73:60:dc:63: e1:38:25:0e:26:f7:b4:b2:72:6e:9e:61:cf:5c:6a: e7:35:dc:a7:04:91:dc:a2:6e:4b:cb:78:6b:83:3f: 2c:23:98:07:6c:90:2b:97:c5:d9:85:90:d6:77:53: 62:fa:7a:bd:04:55:a1:49:2a:e6:ba:66:9e:9c:2b: 1c:4e:9b:b7:83:07:eb:68:e8:eb:e3:10:39:44:2b: cd:2a:8f:fc:45:60:cd:98:4d:39:58:3e:ea:0d:97: 66:71:58:f7:c7:a4:a6:35:06:d3:3f:40:46:0a:4e: 66:e1:8c:51:62:bc:e0:68:42:27:a6:45:18:09:65: c8:91:01:4d:f7:37:95:43:12:db:53:b1:a3:b9:f7: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:27:10:25:A9:C6:37:AF:2F:1D:31:B2:0C:49:5B:A4:EC:41:78 X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:e7:96:69:42:ef:66:1f:1b:da:6b:4b:f3:ff:09:73:d7: e7:56:c9:42:1c:23:bd:5a:bd:9c:d7:9b:29:ae:d2:f2:9b:c1: ab:70:ef:ec:7c:49:7c:62:44:51:66:c3:3a:82:75:75:cf:5f: 95:52:90:8b:25:1c:1a:f6:d2:70:55:c5:f5:75:60:6f:00:71: db:bf:9b:da:3f:43:f6:1f:c8:ea:6b:c1:a0:48:f0:2a:cf:e3: 01:1c:57:68:7c:3e:75:f5:7a:c2:2d:ec:c1:b7:34:77:ce:74: 10:c1:e4:64:e8:e9:0a:02:8e:b6:85:15:86:8e:c3:0d:64:c6: 17:b5:ea:3c:7e:82:4d:50:44:57:95:3b:27:06:e5:dc:bd:84: ae:33:fe:4c:d9:0b:12:ab:1c:7b:f5:3e:02:84:25:aa:08:52: 03:c2:d1:c0:0b:2d:da:d2:57:6e:c0:eb:a6:a0:44:31:a8:93: 7b:8d:c0:f9:9a:d5:33:0a:25:ef:fc:a3:24:ec:22:ff:78:93: 30:7d:f5:b2:76:7a:7b:7c:76:d0:77:7d:a6:ce:fb:08:10:50: 4b:b8:e2:db:53:98:b9:e0:b4:c6:ae:fb:af:e7:d9:62:c5:ce: 3c:5f:8c:de:17:db:66:18:32:c7:0d:8a:1c:44:30:eb:44:4e: 74:a5:f8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjQxMTIzMDM0NjAwWhcNMjQxMTMwMDM0NjAwWjAYMRYwFAYD VQQDEw02NzQxNGZmOC0zYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArESXqnTKM7q0Ezha/jSIptX3fV6p+8jedxgL8cRVL5NocFH57zoj9gO43FHq GHo9wjuuRJj1ownzer0zMLZnmvW86b81iCKpQncNUCPpwqCkDGToEzg1z/Ag4IO7 A7i7mm0bzfq3dYRq1LpNMTI9HMScRHNg3GPhOCUOJve0snJunmHPXGrnNdynBJHc om5Ly3hrgz8sI5gHbJArl8XZhZDWd1Ni+nq9BFWhSSrmumaenCscTpu3gwfraOjr 4xA5RCvNKo/8RWDNmE05WD7qDZdmcVj3x6SmNQbTP0BGCk5m4YxRYrzgaEInpkUY CWXIkQFN9zeVQxLbU7GjufedkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnUJxAl qcY3ry8dMbIMSVuk7EF4MB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/+eWaULvZh8b2mtL8/8Jc9fnVslCHCO9Wr2c15sprtLym8GrcO/s fEl8YkRRZsM6gnV1z1+VUpCLJRwa9tJwVcX1dWBvAHHbv5vaP0P2H8jqa8GgSPAq z+MBHFdofD519XrCLezBtzR3znQQweRk6OkKAo62hRWGjsMNZMYXteo8foJNUERX lTsnBuXcvYSuM/5M2QsSqxx79T4ChCWqCFIDwtHACy3a0lduwOumoEQxqJN7jcD5 mtUzCiXv/KMk7CL/eJMwffWydnp7fHbQd32mzvsIEFBLuOLbU5i54LTGrvuv59li xc48X4zeF9tmGDLHDYocRDDrRE50pfiU -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org