$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: YyhXvFgTThPjjJCfuzKor6hLMmsIvr5Wf5XtX0WdJdY= Subject key identifier: 17:33:61:1E:D0:87:48:EE:E2:21:2B:5A:0A:EE:EE:D9:AF:44:E9:4B Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 3424 Signing time: Fri 22 Nov 2024 15:17:57 +0000 Manifest this update: Fri 22 Nov 2024 15:17:57 +0000 Manifest next update: Fri 29 Nov 2024 15:17:57 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: k6vAuaoO+xXlNWxM8kxJaXHMDxgNn3Hm2NGAb4Eq4A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: Nov 22 15:17:57 2024 GMT Not After : Nov 29 15:17:57 2024 GMT Subject: CN=6740a0a5-fb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:78:7f:e5:ac:dc:11:84:69:b5:7b:8a:25:37: 78:60:22:bc:2c:b3:ad:4f:8d:7c:d2:52:b7:c6:9f: 53:e6:c7:a0:44:74:cd:f6:33:c2:a8:8d:1c:4d:d9: dd:13:bc:11:97:fd:62:b6:50:a8:7d:82:5e:dd:95: 21:17:e6:13:1d:1e:0e:17:aa:3c:f7:69:cd:4b:8a: 14:23:ac:a8:52:12:b8:c9:14:d4:11:39:e9:b3:88: 60:95:5f:95:37:74:1e:23:56:7f:24:b7:72:67:72: 94:bd:26:32:fc:67:3e:ee:88:36:52:6c:6b:b1:31: 14:05:da:98:e3:56:78:51:07:1d:2e:e9:2f:7c:06: b7:04:36:5a:64:a9:fb:77:26:2c:2a:86:11:db:22: 07:15:24:4e:1a:91:52:8b:1d:c5:36:76:8d:4c:87: 34:b4:9d:f8:57:72:c6:7d:7f:c6:06:86:0f:61:4b: c1:b4:52:d8:b1:99:89:ee:80:18:79:1e:6b:84:8f: c2:cb:e5:85:02:2a:66:e3:0b:30:dd:9a:eb:06:60: ed:48:f5:3a:e1:b3:79:d0:d7:08:8e:85:64:dc:53: 46:5e:5d:4a:12:55:82:4d:db:31:f2:cf:98:f6:3f: 86:c5:a4:6f:ea:42:5f:38:8a:25:2d:5b:e4:3f:0d: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:61:1E:D0:87:48:EE:E2:21:2B:5A:0A:EE:EE:D9:AF:44:E9:4B X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:41:9a:ba:1e:ec:84:d1:b9:d8:bc:62:09:7c:8b:a2:ac:86: 65:d4:0c:84:1a:5a:93:54:db:08:a6:72:8b:1c:36:b0:af:26: 47:1d:36:ff:1c:c3:d2:1b:1b:0b:f4:d8:d9:e6:53:27:8d:e0: 1a:9c:9a:c6:98:a2:73:19:5c:14:87:2a:86:c1:1e:1d:17:75: a3:9d:93:aa:4c:f5:44:e7:ed:91:00:d7:f3:ad:23:a5:95:0c: e9:4a:12:4c:e2:a9:98:92:33:58:60:05:10:ea:92:35:15:cd: a3:c5:bc:22:f9:c1:08:a0:04:00:57:1e:12:65:c3:49:0c:2b: 5d:39:6b:b8:ef:be:1a:75:ae:58:1a:ce:51:63:0b:90:f2:26: 8a:5c:2d:ae:7b:28:6f:fc:ea:c2:30:7b:b6:6d:ca:88:c9:e7: f1:8d:38:12:db:35:40:4b:e4:a6:1d:81:8c:e7:e0:2a:e1:54: 01:a6:35:ee:cf:a9:1f:5f:e8:d2:8c:cc:0c:0d:69:a6:f3:7e: c8:3c:18:c5:80:3d:44:d7:90:a9:fd:78:15:a0:13:74:35:c6: 4a:e2:7d:78:36:fd:f1:6a:2b:f3:08:5e:36:c6:af:a7:60:4d: f0:b5:7a:0d:7d:f5:cb:1c:b3:08:3d:2c:bd:62:d1:7c:01:d5: da:1f:49:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjQxMTIyMTUxNzU3WhcNMjQxMTI5MTUxNzU3WjAYMRYwFAYD VQQDEw02NzQwYTBhNS1mYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63h/5azcEYRptXuKJTd4YCK8LLOtT4180lK3xp9T5segRHTN9jPCqI0cTdnd E7wRl/1itlCofYJe3ZUhF+YTHR4OF6o892nNS4oUI6yoUhK4yRTUETnps4hglV+V N3QeI1Z/JLdyZ3KUvSYy/Gc+7og2UmxrsTEUBdqY41Z4UQcdLukvfAa3BDZaZKn7 dyYsKoYR2yIHFSROGpFSix3FNnaNTIc0tJ34V3LGfX/GBoYPYUvBtFLYsZmJ7oAY eR5rhI/Cy+WFAipm4wsw3ZrrBmDtSPU64bN50NcIjoVk3FNGXl1KElWCTdsx8s+Y 9j+GxaRv6kJfOIolLVvkPw2P5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBczYR7Q h0ju4iErWgru7tmvROlLMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOQZq6HuyE0bnYvGIJfIuirIZl1AyEGlqTVNsIpnKLHDawryZHHTb/ HMPSGxsL9NjZ5lMnjeAanJrGmKJzGVwUhyqGwR4dF3WjnZOqTPVE5+2RANfzrSOl lQzpShJM4qmYkjNYYAUQ6pI1Fc2jxbwi+cEIoAQAVx4SZcNJDCtdOWu4774ada5Y Gs5RYwuQ8iaKXC2ueyhv/OrCMHu2bcqIyefxjTgS2zVAS+SmHYGM5+Aq4VQBpjXu z6kfX+jSjMwMDWmm837IPBjFgD1E15Cp/XgVoBN0NcZK4n14Nv3xaivzCF42xq+n YE3wtXoNffXLHLMIPSy9YtF8AdXaH0l8 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org