$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json) Hash identifier: AyKWfbH7E3BYXZf+y+oat4OQTB1nwdswKN2AmcH+NYw= Subject key identifier: 2A:5B:B3:CE:3B:1D:2B:2C:81:EE:7B:69:B1:E1:E4:02:F6:3F:27:25 Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft Manifest number: 086F Signing time: Fri 22 Nov 2024 20:23:21 +0000 Manifest this update: Fri 22 Nov 2024 20:23:20 +0000 Manifest next update: Fri 29 Nov 2024 20:23:20 +0000 Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: Dys0ePtYgj7yOXbCXkWm3KfOFMfgksCTyt/9Azgc1KM=) 2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: jroL0ZvUDyTize3CkMVvGz2K6eDlEEl11xRsB3XJVSM=) 3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: V9elMt4mtakfJ0YTHY94DFYKDGmWTd90QDlgS5t/Q2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Validity Not Before: Nov 22 20:23:20 2024 GMT Not After : Nov 29 20:23:20 2024 GMT Subject: CN=6740e838-4f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:3e:33:c7:30:91:52:cd:61:17:a2:eb:83: 3a:05:ff:d8:ee:6a:ac:91:80:47:4d:60:9c:0b:f4: aa:04:6f:86:fb:8c:8d:9c:f0:62:94:b1:02:59:9e: 2b:cc:81:6e:00:e8:e3:5a:93:3c:fe:31:ac:41:aa: 74:29:72:13:23:79:c9:7d:28:63:e2:53:f9:64:ec: 4c:e8:be:56:12:0d:e7:e2:34:60:89:30:4b:f6:a5: a4:d7:7c:62:9e:3b:d6:ea:23:3f:c1:c9:b6:cd:86: 80:87:0f:3b:91:96:a6:74:1f:5e:75:c7:26:53:78: 08:60:04:43:b5:ac:84:85:63:b9:fa:20:b2:af:c2: 15:1c:57:dc:e6:ac:75:d2:68:df:6f:d0:6a:70:85: 2e:3c:62:1b:38:b9:27:9a:57:23:a9:58:07:4e:6b: 33:a2:e5:7f:82:71:62:36:c2:bf:59:b2:8b:35:d6: 4a:bd:af:35:b1:39:54:85:7d:12:b5:f1:2c:55:67: 8b:f7:90:8a:59:cf:4b:80:d5:c7:14:94:22:cc:b2: 77:20:7a:16:a9:46:08:cf:77:7c:e2:df:42:44:9e: 76:d9:12:33:e0:d7:a6:cf:35:04:6b:30:25:47:52: 63:b0:0e:9c:05:b4:48:63:49:1b:38:b3:7d:ca:bc: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:B3:CE:3B:1D:2B:2C:81:EE:7B:69:B1:E1:E4:02:F6:3F:27:25 X509v3 Authority Key Identifier: keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:0a:1c:58:67:1b:46:1d:de:ef:3c:6a:16:73:c5:01:26:e5: be:f2:b6:45:0e:c2:cb:64:9a:34:38:b8:b2:bc:9e:01:66:c6: 50:67:f8:ed:bd:0b:83:a8:64:d8:4e:62:82:40:e0:ed:18:d4: 83:0d:bb:e4:b2:86:70:55:d5:ed:6c:98:68:46:f3:86:e9:09: 16:58:86:ed:3a:91:a6:d9:08:55:b3:f4:20:0a:1c:3c:c9:af: 11:ed:f9:d2:b8:95:e3:11:e6:b4:42:e4:76:6b:76:92:7f:29: c5:6e:3e:38:aa:db:3c:d5:99:0f:a1:12:2e:e8:50:fb:ed:24: 40:eb:1c:72:61:5f:b2:f7:4b:fe:ca:21:d0:b9:04:85:41:51: c0:de:a5:cd:29:51:8c:d2:6c:9e:4a:39:0c:01:a5:9d:01:a0: f1:e5:27:03:da:33:4b:e9:a1:36:81:c4:a2:32:2f:67:26:8b: 84:f6:d5:d5:01:bb:14:4c:77:ac:21:b6:6b:fd:e2:ab:8c:4b: a8:6f:be:68:57:86:c3:f5:12:11:5c:56:8d:e0:fa:fa:b7:ed: 07:27:4f:26:16:3d:ec:4f:6a:4b:ee:1e:e1:82:68:62:72:53: 42:4d:cf:28:dd:b1:2f:9d:20:98:07:6f:18:01:dc:33:ec:9c: d4:ad:bf:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx OUFGQThGRDUwHhcNMjQxMTIyMjAyMzIwWhcNMjQxMTI5MjAyMzIwWjAYMRYwFAYD VQQDEw02NzQwZTgzOC00ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y8+M8cwkVLNYRei64M6Bf/Y7mqskYBHTWCcC/SqBG+G+4yNnPBilLECWZ4r zIFuAOjjWpM8/jGsQap0KXITI3nJfShj4lP5ZOxM6L5WEg3n4jRgiTBL9qWk13xi njvW6iM/wcm2zYaAhw87kZamdB9edccmU3gIYARDtayEhWO5+iCyr8IVHFfc5qx1 0mjfb9BqcIUuPGIbOLknmlcjqVgHTmszouV/gnFiNsK/WbKLNdZKva81sTlUhX0S tfEsVWeL95CKWc9LgNXHFJQizLJ3IHoWqUYIz3d84t9CRJ522RIz4NemzzUEazAl R1JjsA6cBbRIY0kbOLN9yrzBkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpbs847 HSssge57abHh5AL2PyclMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw V1NrWGFhQm5BM01acjZqOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvChxYZxtGHd7vPGoWc8UBJuW+8rZFDsLLZJo0OLiyvJ4BZsZQZ/jt vQuDqGTYTmKCQODtGNSDDbvksoZwVdXtbJhoRvOG6QkWWIbtOpGm2QhVs/QgChw8 ya8R7fnSuJXjEea0QuR2a3aSfynFbj44qts81ZkPoRIu6FD77SRA6xxyYV+y90v+ yiHQuQSFQVHA3qXNKVGM0myeSjkMAaWdAaDx5ScD2jNL6aE2gcSiMi9nJouE9tXV AbsUTHesIbZr/eKrjEuob75oV4bD9RIRXFaN4Pr6t+0HJ08mFj3sT2pL7h7hgmhi clNCTc8o3bEvnSCYB28YAdwz7JzUrb8T -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org