$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: CuqEMBkpYG12QldsCPqQh0yDymLsl6xpMZcYjhiEM9g= Subject key identifier: 32:5B:8C:D7:22:46:EA:44:4F:DF:F3:74:22:9D:26:74:9D:C8:B6:00 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 3452 Signing time: Fri 22 Nov 2024 14:24:39 +0000 Manifest this update: Fri 22 Nov 2024 14:24:39 +0000 Manifest next update: Fri 29 Nov 2024 14:24:39 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: FhXBR6A+YU6QxElzchzzl72XFYMdYKuShRjAetSAY7c=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: v1rV53WzZWmrMzI/ovzC6ZtIEqJ492pcfJCtFraz0gM=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: gjp3o9tIm4VyqLrJwyLfxpBmtpdyfXJMbbExRvAW/uQ=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 7gvulhymoo0memfRg/UTkfWV5Oiq5ExIUWNThD1MND8=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: UPMMI0z9dONYJVSXshhS5irNO5vzpt7XsxFcM7ezWkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Nov 22 14:24:39 2024 GMT Not After : Nov 29 14:24:39 2024 GMT Subject: CN=67409427-378f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:3c:1c:9b:52:7b:9a:87:aa:17:4c:bf:7f: f6:1f:b5:49:71:cd:c0:c0:ec:66:d8:75:31:e8:9b: 34:32:9c:8e:f0:b4:36:90:1c:ba:be:cd:bf:00:4a: 23:f3:64:04:b3:14:e2:cb:75:53:ba:d6:fc:e4:ae: e3:97:bc:dc:2d:f4:02:2b:d8:51:fe:b1:f3:ac:11: 39:a5:e6:8b:a9:fa:7a:14:94:4c:4e:8d:80:62:5d: f8:1d:13:ff:51:f3:72:cc:f5:2d:31:fc:75:ab:98: 73:22:56:12:e6:c7:df:3d:d3:ac:12:2d:9d:44:6a: e3:33:34:bd:04:21:c3:2b:1f:94:4e:58:81:12:3f: 8e:32:f8:26:39:47:84:45:13:f1:b8:9c:76:2f:ea: 5b:12:82:03:39:b5:bd:53:8d:a4:76:8a:f4:03:b8: cc:58:8d:8e:b3:06:56:06:6f:31:89:67:9e:52:6c: 27:55:c9:9a:3a:a2:36:96:f4:19:9a:ed:3c:f0:ae: cd:86:52:37:61:5b:66:5b:23:03:a0:94:6d:2a:5e: 5c:50:25:18:3d:7e:82:64:92:80:ae:e9:72:07:7a: 6e:bd:fc:b4:c7:aa:f7:ce:a3:cc:cf:48:bb:b8:d6: 56:2a:c2:39:24:b1:fd:87:51:b5:ce:e2:6d:e4:ed: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:8C:D7:22:46:EA:44:4F:DF:F3:74:22:9D:26:74:9D:C8:B6:00 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ed:25:bf:2f:6c:85:95:12:12:a3:1b:b4:1c:8d:fd:4e:d4: 8d:c3:91:ae:cc:fd:8c:c1:ad:b2:57:d8:4a:81:aa:ec:be:f9: 01:f9:99:fa:57:5a:b4:2c:9a:a5:2a:53:86:9e:6d:c2:c9:e3: ac:44:49:29:c9:51:e4:74:0b:bf:39:1e:e3:df:a0:24:14:90: 83:cd:9f:24:89:06:c3:4f:cd:8d:11:1f:e3:a6:60:e7:56:f4: 6d:13:02:29:4b:68:0f:a7:ee:9a:6d:c2:c6:18:82:eb:da:23: 23:35:dc:f5:7e:3e:1b:1e:10:c7:6c:2d:f5:92:8f:d5:64:64: 48:44:11:6c:7b:80:6d:93:7a:de:b7:43:8c:c3:7e:7e:f3:a5: 94:50:91:78:84:3a:ef:6f:27:33:e1:fd:72:ac:44:4e:40:a7: 26:c1:fa:3b:c1:54:db:55:bf:59:8e:e9:b8:dc:a2:4b:71:d0: 7e:07:33:ee:ef:4c:2f:d2:42:ae:55:d9:ba:b1:b6:ac:02:dc: 47:65:fd:01:bc:e7:69:42:70:2b:a3:a7:88:0f:95:c1:05:d7: 46:3e:4f:8e:28:0a:11:d0:e9:b9:b5:04:ed:f3:41:61:69:8b: bd:22:73:60:48:cf:74:27:f2:75:63:68:c8:fd:76:77:2e:a8: 93:cc:40:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjQxMTIyMTQyNDM5WhcNMjQxMTI5MTQyNDM5WjAYMRYwFAYD VQQDEw02NzQwOTQyNy0zNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArug8HJtSe5qHqhdMv3/2H7VJcc3AwOxm2HUx6Js0MpyO8LQ2kBy6vs2/AEoj 82QEsxTiy3VTutb85K7jl7zcLfQCK9hR/rHzrBE5peaLqfp6FJRMTo2AYl34HRP/ UfNyzPUtMfx1q5hzIlYS5sffPdOsEi2dRGrjMzS9BCHDKx+UTliBEj+OMvgmOUeE RRPxuJx2L+pbEoIDObW9U42kdor0A7jMWI2OswZWBm8xiWeeUmwnVcmaOqI2lvQZ mu088K7NhlI3YVtmWyMDoJRtKl5cUCUYPX6CZJKArulyB3puvfy0x6r3zqPMz0i7 uNZWKsI5JLH9h1G1zuJt5O1KuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJbjNci RupET9/zdCKdJnSdyLYAMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7SW/L2yFlRISoxu0HI39TtSNw5GuzP2Mwa2yV9hKgarsvvkB+Zn6 V1q0LJqlKlOGnm3CyeOsREkpyVHkdAu/OR7j36AkFJCDzZ8kiQbDT82NER/jpmDn VvRtEwIpS2gPp+6abcLGGILr2iMjNdz1fj4bHhDHbC31ko/VZGRIRBFse4Btk3re t0OMw35+86WUUJF4hDrvbycz4f1yrEROQKcmwfo7wVTbVb9Zjum43KJLcdB+BzPu 70wv0kKuVdm6sbasAtxHZf0BvOdpQnAro6eID5XBBddGPk+OKAoR0Om5tQTt80Fh aYu9InNgSM90J/J1Y2jI/XZ3LqiTzEAO -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org