$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: Jj16M1JEYyS3f1ZKQb2PItkUAGnt/vJlXH7L1Xjtv9U= Subject key identifier: 83:DD:DD:03:E4:94:FE:B1:FC:98:A9:E7:3F:9B:3A:9A:CF:B9:0B:06 Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: 011C Signing time: Sat 23 Nov 2024 02:58:42 +0000 Manifest this update: Sat 23 Nov 2024 02:58:41 +0000 Manifest next update: Sat 30 Nov 2024 02:58:41 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: MKmdV8phcLEKMd0T4mqmxtXwsoEy8ekak71bDIVwbEU=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: 5uqHr9WzaI9hGdiEKRKQvARm6NgS6ujezLHWBDKu2RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Validity Not Before: Nov 23 02:58:41 2024 GMT Not After : Nov 30 02:58:41 2024 GMT Subject: CN=674144e1-5482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:bb:9a:10:db:2b:75:82:06:98:4a:c3:19: 06:9a:8d:b6:e2:d4:a7:20:a4:f9:5b:7e:fe:b0:b4: 3a:87:7e:b4:c6:a9:49:2f:d6:8c:cb:20:82:2d:5a: c1:f9:dc:4c:95:ae:47:eb:89:46:69:37:db:eb:c9: d4:1c:1c:ba:a4:54:e9:0c:64:63:df:e1:69:5f:eb: ac:22:cc:b8:aa:1e:87:95:ba:4a:5e:1f:82:88:c9: 0a:b7:55:bb:f6:eb:33:83:2a:e7:05:dd:ab:a7:15: 2d:02:80:c6:91:d5:4f:80:d3:5e:ee:ad:1d:5a:8d: 3a:e6:42:3f:0d:20:90:86:3f:ea:04:df:78:96:f6: 7f:75:50:f5:e7:47:13:36:5b:ad:fd:d5:0a:5d:36: 5f:c0:86:5c:7f:49:e3:fe:cd:31:e7:62:4a:e6:d4: b2:e3:6a:77:0d:e6:f1:0f:f0:a8:2f:79:51:ec:8f: cf:ce:b2:30:79:95:48:7f:b1:ff:e1:61:29:68:e1: ac:7f:aa:67:7e:26:7d:c9:8d:27:dd:df:78:ed:7b: ca:f2:7f:34:1e:ec:6b:89:53:dd:27:54:c1:f4:d7: 1a:f5:20:7e:92:9c:81:83:43:6f:b4:fb:15:15:06: bf:74:c3:b1:05:29:4e:e2:41:c6:8d:48:01:19:7d: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:DD:03:E4:94:FE:B1:FC:98:A9:E7:3F:9B:3A:9A:CF:B9:0B:06 X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:91:83:ff:5b:8e:28:de:e3:ba:7a:9d:2d:73:a1:a8:8d: 01:ad:3d:ce:ae:16:c6:c1:26:c7:b3:96:c0:f4:ba:ea:ed:7f: ff:97:68:bc:5a:c3:aa:1d:8b:f8:dd:88:a5:e0:95:36:cd:3c: 4a:f9:40:56:90:37:82:c6:6f:ee:b2:b8:65:1a:41:36:5f:f6: 32:fa:d2:27:6b:05:a5:eb:b1:4c:dd:6c:11:97:b6:d5:a1:2f: 33:08:33:46:09:12:d6:a8:f4:3a:85:62:59:a6:79:10:34:c4: 87:f8:e0:cf:89:b8:7a:08:0b:ec:49:41:37:f1:77:09:88:67: bc:65:e9:c0:da:39:dd:c7:e3:8e:93:2f:6e:be:34:80:44:a1: 5c:63:08:2f:09:70:50:04:2a:b4:23:75:b4:ec:3a:ea:e2:d2: e5:49:bd:58:8c:18:71:18:9f:18:ec:22:a1:b0:8f:6f:47:ff: 75:e2:75:0c:8a:ae:6d:3e:33:3a:84:c5:54:7e:66:8b:1d:8c: 2f:ff:45:d5:e1:82:09:9e:fd:ae:38:94:57:d7:d1:3a:32:e0: 4a:e6:2c:4f:55:33:b9:0a:6d:40:78:a0:97:95:71:1d:a0:16: c4:94:c5:db:fe:4b:e6:4d:17:64:e5:14:93:ad:37:8a:ed:7a: 42:1b:8c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjQxMTIzMDI1ODQxWhcNMjQxMTMwMDI1ODQxWjAYMRYwFAYD VQQDEw02NzQxNDRlMS01NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdO7mhDbK3WCBphKwxkGmo224tSnIKT5W37+sLQ6h360xqlJL9aMyyCCLVrB +dxMla5H64lGaTfb68nUHBy6pFTpDGRj3+FpX+usIsy4qh6HlbpKXh+CiMkKt1W7 9uszgyrnBd2rpxUtAoDGkdVPgNNe7q0dWo065kI/DSCQhj/qBN94lvZ/dVD150cT Nlut/dUKXTZfwIZcf0nj/s0x52JK5tSy42p3DebxD/CoL3lR7I/PzrIweZVIf7H/ 4WEpaOGsf6pnfiZ9yY0n3d947XvK8n80HuxriVPdJ1TB9Nca9SB+kpyBg0NvtPsV FQa/dMOxBSlO4kHGjUgBGX0GXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPd3QPk lP6x/Jip5z+bOprPuQsGMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9ZGD/1uOKN7junqdLXOhqI0BrT3OrhbGwSbHs5bA9Lrq7X//l2i8 WsOqHYv43Yil4JU2zTxK+UBWkDeCxm/usrhlGkE2X/Yy+tInawWl67FM3WwRl7bV oS8zCDNGCRLWqPQ6hWJZpnkQNMSH+ODPibh6CAvsSUE38XcJiGe8ZenA2jndx+OO ky9uvjSARKFcYwgvCXBQBCq0I3W07Drq4tLlSb1YjBhxGJ8Y7CKhsI9vR/914nUM iq5tPjM6hMVUfmaLHYwv/0XV4YIJnv2uOJRX19E6MuBK5ixPVTO5Cm1AeKCXlXEd oBbElMXb/kvmTRdk5RSTrTeK7XpCG4wf -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org