$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: tsCwV2PwYFlPKxDfxYhzJS0/G/QgbJqOJdi0fEZuBnk= Subject key identifier: 13:22:67:86:7C:84:7A:6D:29:EA:BC:A2:4F:C1:92:B1:EA:4B:9E:8C Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 0257 Signing time: Sat 23 Nov 2024 01:16:54 +0000 Manifest this update: Sat 23 Nov 2024 01:16:53 +0000 Manifest next update: Sat 30 Nov 2024 01:16:53 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: Z9MF4Bz8HfmyVcbRmeqekkcYF+f7sXco5uG56OqGyKY=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Nov 23 01:16:53 2024 GMT Not After : Nov 30 01:16:53 2024 GMT Subject: CN=67412d06-74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:a6:45:3a:f1:f4:f0:93:9f:90:ff:cd:f8: 3e:ad:7f:60:a7:d9:95:da:f1:69:e4:12:13:73:ef: aa:cd:7b:a7:d8:dc:e2:36:b7:ab:2b:7b:aa:78:00: ce:de:57:eb:1b:76:02:42:69:9f:a5:92:87:d9:5d: bd:c2:e8:ca:89:08:c6:f7:96:c5:8c:38:0c:a1:d5: 32:6c:56:49:9e:fa:0b:cc:6b:60:b6:3d:bf:e9:ac: 0a:a2:c7:09:0f:f2:ff:aa:41:36:72:ee:10:41:0e: 03:46:e9:cf:75:a0:35:37:5a:be:d4:f9:60:53:df: c4:86:5a:12:e2:3c:cc:ae:72:de:5c:b2:df:c8:6d: 0e:0a:05:a5:3b:c2:59:a7:e9:6a:c7:17:50:7c:1b: 32:a4:b4:e2:76:1f:b1:72:8d:8b:e8:16:4b:77:cb: bc:34:2b:a7:63:bd:b8:8f:59:b8:8c:a6:4d:81:d9: 37:e5:6c:65:af:37:9c:75:a0:a3:7a:bd:ae:97:bc: 71:31:fb:37:de:7b:6c:77:39:7b:a1:34:e6:54:a3: 45:c6:35:50:3d:fd:75:a5:9b:ec:e1:01:76:ca:93: bf:c2:04:8f:33:59:95:58:21:31:35:39:cf:82:23: dd:da:c5:28:ff:87:fa:7b:8e:6d:b7:00:d4:68:13: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:67:86:7C:84:7A:6D:29:EA:BC:A2:4F:C1:92:B1:EA:4B:9E:8C X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b9:7b:23:50:fd:ee:2c:be:54:1f:19:ad:0d:60:a7:0e:be: 54:ed:33:b6:1c:72:5a:16:e4:e0:24:1e:bd:4b:eb:f4:db:f9: ad:9a:af:fb:77:6a:aa:51:50:99:a2:00:e0:bf:81:ab:88:fd: b1:9d:71:46:a9:14:8b:6a:2b:41:6d:44:4f:17:cd:2c:9c:40: f1:64:de:6d:6d:72:85:ec:e1:9e:1c:db:9d:71:47:1b:71:78: bb:49:79:c5:e4:e7:34:4e:60:af:5a:30:1e:f9:13:2d:cb:f9: ea:06:b9:84:ab:26:07:34:07:bb:4e:e5:78:8b:48:a0:61:72: 12:a2:44:ef:0e:4a:66:64:11:f9:e8:8f:61:b3:33:6a:be:07: 94:80:d6:86:d3:9c:bf:35:e0:61:1d:bf:4d:0f:2c:d6:d2:1f: 4b:bd:e6:ca:5b:e8:03:2e:55:db:c5:9d:3e:22:21:f7:88:dd: 4f:62:ba:30:81:f7:4f:ee:c9:b8:4b:1b:fb:77:10:5e:aa:3e: 23:31:cc:80:37:ec:ab:08:81:67:ed:d4:a7:b1:fc:11:10:2a: f8:fc:68:53:74:d5:14:47:02:5b:d4:0c:f0:ad:9c:b3:bc:67: b7:2d:97:ba:e7:94:88:d6:ef:fc:65:92:3a:c2:f8:b0:4d:9c: 9d:05:e0:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjQxMTIzMDExNjUzWhcNMjQxMTMwMDExNjUzWjAYMRYwFAYD VQQDEw02NzQxMmQwNi03NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv46mRTrx9PCTn5D/zfg+rX9gp9mV2vFp5BITc++qzXun2NziNrerK3uqeADO 3lfrG3YCQmmfpZKH2V29wujKiQjG95bFjDgModUybFZJnvoLzGtgtj2/6awKoscJ D/L/qkE2cu4QQQ4DRunPdaA1N1q+1PlgU9/EhloS4jzMrnLeXLLfyG0OCgWlO8JZ p+lqxxdQfBsypLTidh+xco2L6BZLd8u8NCunY724j1m4jKZNgdk35WxlrzecdaCj er2ul7xxMfs33ntsdzl7oTTmVKNFxjVQPf11pZvs4QF2ypO/wgSPM1mVWCExNTnP giPd2sUo/4f6e45ttwDUaBOqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMiZ4Z8 hHptKeq8ok/BkrHqS56MMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUuXsjUP3uLL5UHxmtDWCnDr5U7TO2HHJaFuTgJB69S+v02/mtmq/7 d2qqUVCZogDgv4GriP2xnXFGqRSLaitBbURPF80snEDxZN5tbXKF7OGeHNudcUcb cXi7SXnF5Oc0TmCvWjAe+RMty/nqBrmEqyYHNAe7TuV4i0igYXISokTvDkpmZBH5 6I9hszNqvgeUgNaG05y/NeBhHb9NDyzW0h9LvebKW+gDLlXbxZ0+IiH3iN1PYrow gfdP7sm4Sxv7dxBeqj4jMcyAN+yrCIFn7dSnsfwRECr4/GhTdNUURwJb1AzwrZyz vGe3LZe655SI1u/8ZZI6wviwTZydBeAi -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org