$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json) Hash identifier: mofY5zsNsPEMI6PygPgLj3GxNUMwqUh4UatUdRa3uB4= Subject key identifier: AA:74:2A:82:EC:DD:1F:D2:5B:C1:90:BC:57:1B:00:3E:E0:3C:24:40 Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft Manifest number: 0A9C Signing time: Fri 22 Nov 2024 19:18:08 +0000 Manifest this update: Fri 22 Nov 2024 19:18:08 +0000 Manifest next update: Fri 29 Nov 2024 19:18:08 +0000 Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: TAZjGRfhzwbqebBRupLcQAi5/RGglXIYwTZEmXPStoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Validity Not Before: Nov 22 19:18:08 2024 GMT Not After : Nov 29 19:18:08 2024 GMT Subject: CN=6740d8f0-3973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e4:9a:ec:1e:7b:5b:b7:a9:97:00:e2:3f:3f: 56:89:30:9a:d6:15:9e:08:98:c0:ce:b7:07:7a:ee: 30:ae:7c:9e:54:7b:89:f2:55:6f:8e:7a:cc:a8:97: d4:6a:3e:b4:7b:c2:28:94:32:2c:3a:3f:1c:76:b4: 3d:ba:42:42:b6:28:60:d6:a3:77:61:cc:13:17:87: 7a:8a:d8:54:17:c5:74:ef:11:58:0d:30:c2:39:5c: 45:b9:af:56:9b:bf:4d:43:10:d7:d5:e5:c9:e6:c5: 73:c5:e0:b9:b2:9c:bf:da:26:b8:d7:ab:22:39:89: f6:ee:94:9b:14:0b:e1:ef:5e:eb:4e:a3:2c:6f:1b: ed:7a:dd:4f:9c:76:0c:e7:94:17:9d:82:7c:30:7d: b8:bf:53:1a:74:30:ea:89:13:f5:9f:50:39:0d:09: 5e:9c:47:ca:01:2b:c0:14:73:e6:fb:c7:f8:d7:5b: b0:43:cc:38:14:33:44:13:59:a9:06:0d:c5:28:df: 10:b3:e6:77:7f:98:06:98:dd:f4:c5:3c:c1:6e:cc: 47:dc:93:c6:71:b5:06:09:2f:8f:88:3e:0f:cd:82: 51:4b:1c:4d:4b:0b:20:41:a7:5a:f8:ec:1a:3c:24: ab:7c:6e:1a:58:c6:a8:21:0e:59:09:db:12:d9:65: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:2A:82:EC:DD:1F:D2:5B:C1:90:BC:57:1B:00:3E:E0:3C:24:40 X509v3 Authority Key Identifier: keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b4:fd:63:5a:b6:fc:31:0f:39:a3:d1:1a:4a:97:d3:b8:15: 10:ee:d3:5e:22:82:91:e0:66:f2:4e:3d:bd:fe:e7:7f:5e:ac: ba:ee:17:aa:b9:8b:8c:ac:30:40:7a:72:2e:7a:5c:a1:b2:74: f3:c6:01:bc:77:d8:8a:84:9a:95:4e:3c:8b:57:83:b4:05:f1: 88:57:66:1b:17:b8:f8:0a:d7:1a:68:5d:cf:68:4f:d0:0c:bd: d5:0f:25:ea:c9:bf:26:70:7f:11:3a:4e:0a:74:a8:17:a1:63: af:2f:83:2f:1e:38:42:4b:9c:ce:a1:4c:83:c9:fc:1c:2d:ad: d3:a5:00:62:fe:38:39:9e:4f:e3:d1:d8:4f:0c:c6:c7:ee:1d: b1:fb:de:e4:4d:34:e9:48:83:f0:17:b3:33:be:54:0e:8d:71: e7:4d:d5:b0:44:7e:04:ea:3d:b5:57:cc:1a:6f:5b:7e:f7:82: 2c:3a:65:ce:9c:4b:c2:b6:7c:6f:35:e2:51:06:c3:d7:9f:48: dc:a5:48:22:ec:ba:4c:fb:02:1f:92:eb:63:38:df:19:c0:8c: a2:a7:9d:03:c3:4a:20:be:34:52:55:9c:e4:fe:bb:74:07:51: c1:20:cf:cc:49:2a:70:83:b5:b5:99:f5:a2:c4:44:16:6c:14: 95:3b:c4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1 QjRBRDU5OUQwHhcNMjQxMTIyMTkxODA4WhcNMjQxMTI5MTkxODA4WjAYMRYwFAYD VQQDEw02NzQwZDhmMC0zOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+Sa7B57W7eplwDiPz9WiTCa1hWeCJjAzrcHeu4wrnyeVHuJ8lVvjnrMqJfU aj60e8IolDIsOj8cdrQ9ukJCtihg1qN3YcwTF4d6ithUF8V07xFYDTDCOVxFua9W m79NQxDX1eXJ5sVzxeC5spy/2ia416siOYn27pSbFAvh717rTqMsbxvtet1PnHYM 55QXnYJ8MH24v1MadDDqiRP1n1A5DQlenEfKASvAFHPm+8f411uwQ8w4FDNEE1mp Bg3FKN8Qs+Z3f5gGmN30xTzBbsxH3JPGcbUGCS+PiD4PzYJRSxxNSwsgQada+Owa PCSrfG4aWMaoIQ5ZCdsS2WUStwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp0KoLs 3R/SW8GQvFcbAD7gPCRAMB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0tP1jWrb8MQ85o9EaSpfTuBUQ7tNeIoKR4GbyTj29/ud/Xqy67heq uYuMrDBAenIuelyhsnTzxgG8d9iKhJqVTjyLV4O0BfGIV2YbF7j4CtcaaF3PaE/Q DL3VDyXqyb8mcH8ROk4KdKgXoWOvL4MvHjhCS5zOoUyDyfwcLa3TpQBi/jg5nk/j 0dhPDMbH7h2x+97kTTTpSIPwF7MzvlQOjXHnTdWwRH4E6j21V8wab1t+94IsOmXO nEvCtnxvNeJRBsPXn0jcpUgi7LpM+wIfkutjON8ZwIyip50Dw0ogvjRSVZzk/rt0 B1HBIM/MSSpwg7W1mfWixEQWbBSVO8Rp -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org