$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json) Hash identifier: DvjZOKY6d5PISCsMO3QiS8byhzxV9CiBZzWjWzbPnNQ= Subject key identifier: F1:14:AB:29:5F:90:FB:00:EC:19:0D:2C:C6:A3:88:0F:C4:95:92:C3 Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft Manifest number: C7 Signing time: Sat 23 Nov 2024 03:54:27 +0000 Manifest this update: Sat 23 Nov 2024 03:54:27 +0000 Manifest next update: Sat 30 Nov 2024 03:54:27 +0000 Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: pfVWyced/fWd3aNM1PPcGzC5TX6LK7xJ2EHLRqBSw6A=) 2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: 3T8n7XFrrCjc9ierjYTs1Q2T8wlu+fKt96UZROhsq48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Validity Not Before: Nov 23 03:54:27 2024 GMT Not After : Nov 30 03:54:27 2024 GMT Subject: CN=674151f3-5684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:6c:06:d2:6e:a4:03:53:35:a3:0c:70:64: a3:67:21:91:1b:6e:d5:f7:50:dc:6d:35:bb:3c:1e: ba:ab:e4:94:47:79:82:7f:72:69:30:78:d3:d1:57: 9c:7a:51:4b:50:71:15:1c:2e:a0:e0:03:bd:f2:95: 1c:7b:c3:ce:99:58:4c:43:97:f7:20:46:4e:76:8a: e5:5d:4d:f7:be:1c:7a:e1:b5:8f:ef:46:ca:3b:67: 86:cc:2c:34:df:7f:35:b9:3f:6d:c9:12:6f:71:a1: 7f:1b:c4:b1:94:78:78:22:77:db:a9:61:78:b6:ee: 1b:f2:d2:c6:5d:52:7b:ad:8e:16:95:7c:bd:ae:5f: de:91:a1:5f:f6:1f:4b:20:d0:5d:fb:76:97:e9:ce: 8c:67:79:58:af:fe:51:69:a3:85:06:3f:64:bc:3c: 49:31:d4:be:da:b0:ce:64:ee:18:4c:42:d6:83:6c: a0:ff:ec:c6:82:df:a5:fb:ec:13:85:b4:78:9c:a1: d1:4f:1f:cc:ce:07:e4:8a:36:a6:01:bf:0e:7e:96: e7:e6:6f:14:11:87:99:83:25:5d:34:a0:68:87:fe: dd:e3:d2:3f:78:5b:c7:da:b5:35:bc:1c:0b:4e:5f: 03:77:a2:eb:b4:c5:b1:1b:82:8b:e8:2f:05:df:ba: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:AB:29:5F:90:FB:00:EC:19:0D:2C:C6:A3:88:0F:C4:95:92:C3 X509v3 Authority Key Identifier: keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:a1:23:4f:51:2d:cf:2d:18:f9:f3:99:17:f2:4d:9a:89: 3e:25:29:dd:b8:41:aa:b0:22:b6:bd:a7:2b:0d:55:0e:14:92: 0c:2f:4e:ba:c1:1a:72:10:ca:cb:45:77:1d:68:e6:1f:5a:40: 1e:04:95:2d:88:e2:e9:be:7c:eb:e4:24:8d:c1:7c:24:e4:8e: 73:d5:4e:e7:07:fc:42:9b:a9:28:ba:46:66:f3:c1:59:cc:df: f5:63:e9:e5:37:45:44:38:f2:c7:a5:eb:3f:cf:53:a4:c8:cc: 8c:69:9e:36:37:06:fd:60:95:3e:33:22:88:98:c0:ce:c4:4f: 51:ec:c7:7c:04:b4:c8:af:23:1c:d9:2d:01:82:74:98:81:3e: 96:ed:11:3e:04:a9:3a:cd:68:e0:9b:7c:9c:74:d2:a1:a6:c9: db:39:c8:bc:88:08:2e:e6:6d:b4:79:08:75:a2:2a:8f:1c:02: 0c:f7:79:57:da:51:12:c8:ba:8d:52:18:b8:00:cc:e6:e0:82: b0:72:94:01:34:36:80:c3:82:6f:1c:47:34:6b:4a:56:7a:63: e1:3f:79:97:47:b4:12:63:0a:36:5b:fd:8f:8e:e6:ca:32:33: 25:ac:9a:6a:1e:56:e1:d4:ed:e0:7e:80:be:02:cb:ad:4d:8d: 0e:55:2e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG QzAxNDg1NEMwHhcNMjQxMTIzMDM1NDI3WhcNMjQxMTMwMDM1NDI3WjAYMRYwFAYD VQQDEw02NzQxNTFmMy01Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mlsBtJupANTNaMMcGSjZyGRG27V91DcbTW7PB66q+SUR3mCf3JpMHjT0Vec elFLUHEVHC6g4AO98pUce8POmVhMQ5f3IEZOdorlXU33vhx64bWP70bKO2eGzCw0 3381uT9tyRJvcaF/G8SxlHh4InfbqWF4tu4b8tLGXVJ7rY4WlXy9rl/ekaFf9h9L INBd+3aX6c6MZ3lYr/5RaaOFBj9kvDxJMdS+2rDOZO4YTELWg2yg/+zGgt+l++wT hbR4nKHRTx/MzgfkijamAb8Ofpbn5m8UEYeZgyVdNKBoh/7d49I/eFvH2rU1vBwL Tl8Dd6LrtMWxG4KL6C8F37plcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEUqylf kPsA7BkNLMajiA/ElZLDMB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjkxNi83NEVDMzk3RTdEM0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4 OFZwMTgxRmtQN2Y4QVVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ0qEjT1Etzy0Y+fOZF/JNmok+JSnduEGqsCK2vacrDVUOFJIML066 wRpyEMrLRXcdaOYfWkAeBJUtiOLpvnzr5CSNwXwk5I5z1U7nB/xCm6koukZm88FZ zN/1Y+nlN0VEOPLHpes/z1OkyMyMaZ42Nwb9YJU+MyKImMDOxE9R7Md8BLTIryMc 2S0BgnSYgT6W7RE+BKk6zWjgm3ycdNKhpsnbOci8iAgu5m20eQh1oiqPHAIM93lX 2lESyLqNUhi4AMzm4IKwcpQBNDaAw4JvHEc0a0pWemPhP3mXR7QSYwo2W/2PjubK MjMlrJpqHlbh1O3gfoC+AsutTY0OVS5m -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org