$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json) Hash identifier: 2AinV0TxP9p53Pb4ZHoRpR7EV+oIgwFEKw0u/6TU5y0= Subject key identifier: 30:5E:85:33:D2:93:2A:90:14:67:5B:1F:64:30:74:41:12:CB:05:9C Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft Manifest number: 0828 Signing time: Wed 20 Nov 2024 20:27:47 +0000 Manifest this update: Wed 20 Nov 2024 20:27:46 +0000 Manifest next update: Wed 27 Nov 2024 20:27:46 +0000 Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: QqhKFSZ+ubePJZwN0RVBMOXIWsfindhhc38iCAnk9pg=) 2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: DuiwpTOQ+46YBE83w0bBmQr9D587PUkTi9Qcefln7w8=) 3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: MNcUqPXfQ3T7UPwRoUK7X0hW547D3dFI8SMQm2Rhlgo=) 4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: wFdzUcR7oncBOhkt6Qq97Sk0B7MxmE0B0n56PLJLLfc=) 5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: qcQxgCc6f6DKvBXXPV7Z6QbMISYQ+I0+B+jlVDj3umU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Validity Not Before: Nov 20 20:27:46 2024 GMT Not After : Nov 27 20:27:46 2024 GMT Subject: CN=673e4643-82d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:04:ee:2b:64:91:88:f6:79:ce:61:56:32:47: d0:92:cb:a2:15:0c:b3:8a:d7:95:52:d1:1a:20:19: ad:c4:f3:86:31:f7:9c:b4:8c:94:4c:e4:3b:9e:01: 59:ba:64:60:32:f2:7c:df:59:ba:54:e7:f8:80:d5: 93:b4:50:f3:13:5f:f7:ce:d7:fb:48:8b:37:04:00: b4:28:a3:9b:9d:03:d5:88:be:6f:47:4a:ef:f1:93: 0e:4f:b5:1c:f6:57:14:19:94:1a:5b:bf:10:fc:b7: 6b:6a:fb:99:46:66:43:97:f2:67:b2:6d:fb:9d:d2: 6c:af:03:bd:17:35:f6:e4:93:89:05:1c:fd:66:16: c6:2b:15:ac:60:d6:dd:6d:63:48:53:74:cc:ae:54: 37:e3:ae:72:09:50:51:c6:95:6d:68:c4:ab:28:72: 64:bc:04:58:7e:9b:3f:52:e5:d4:c4:be:78:85:9f: f2:ae:38:65:59:77:1a:b3:2c:04:92:76:1f:58:db: ff:5b:52:21:40:87:f5:86:b6:6f:37:04:26:56:31: 48:1b:97:bf:91:e7:56:19:68:49:48:36:44:8b:35: d7:72:43:d0:dc:81:ff:49:8e:2e:96:fa:c5:3e:63: 1e:95:15:14:50:96:b9:23:ad:aa:e6:1e:09:09:bc: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:85:33:D2:93:2A:90:14:67:5B:1F:64:30:74:41:12:CB:05:9C X509v3 Authority Key Identifier: keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:97:1f:dd:e5:45:6f:66:92:b7:1b:74:bd:02:eb:46:55: 2b:90:57:28:06:dd:7d:1e:65:95:1a:ce:92:a4:ce:a0:e0:be: 90:b3:17:da:0c:9d:e0:e0:85:40:3f:fc:3b:95:0a:2b:08:49: ea:0b:8a:fe:e6:4d:88:32:2c:48:39:29:4c:df:46:e2:50:04: d0:bd:a2:73:5f:95:a0:49:d4:8c:19:b0:3f:79:de:40:9d:23: 08:fc:56:b3:17:a2:41:3e:25:84:35:5d:d5:5d:da:e7:b0:2e: 7e:db:76:76:33:25:06:de:18:f3:f6:7b:a8:11:88:1b:26:96: 04:cc:01:cc:83:85:dc:e6:eb:7b:62:8c:5a:e7:37:2f:40:c2: e3:cc:b2:c8:b9:f4:f3:b1:b9:0d:6b:4f:51:bf:34:f2:94:b4: 3a:80:59:b4:a7:fb:da:f6:72:6a:58:5e:3e:82:4f:e8:01:b4: a8:c4:94:56:a4:3d:71:95:80:e2:ad:a2:4e:5a:c8:42:7c:f4: f1:26:7c:5e:8c:71:74:04:f0:01:ce:f3:e3:c6:9f:89:87:54: c7:82:76:da:55:64:7a:3f:35:3b:eb:f4:f8:1d:28:36:e6:d6: d9:44:a3:51:e5:af:12:3a:0c:31:77:a6:7d:d2:f8:8d:61:27: 7f:a8:0b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1 NTQyMkIxOEUwHhcNMjQxMTIwMjAyNzQ2WhcNMjQxMTI3MjAyNzQ2WjAYMRYwFAYD VQQDEw02NzNlNDY0My04MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+wTuK2SRiPZ5zmFWMkfQksuiFQyziteVUtEaIBmtxPOGMfectIyUTOQ7ngFZ umRgMvJ831m6VOf4gNWTtFDzE1/3ztf7SIs3BAC0KKObnQPViL5vR0rv8ZMOT7Uc 9lcUGZQaW78Q/LdravuZRmZDl/Jnsm37ndJsrwO9FzX25JOJBRz9ZhbGKxWsYNbd bWNIU3TMrlQ3465yCVBRxpVtaMSrKHJkvARYfps/UuXUxL54hZ/yrjhlWXcasywE knYfWNv/W1IhQIf1hrZvNwQmVjFIG5e/kedWGWhJSDZEizXXckPQ3IH/SY4ulvrF PmMelRUUUJa5I62q5h4JCbx8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBehTPS kyqQFGdbH2QwdEESywWcMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F OFdnYWlTeEhNaUZWUWlzWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzspcf3eVFb2aStxt0vQLrRlUrkFcoBt19HmWVGs6SpM6g4L6Qsxfa DJ3g4IVAP/w7lQorCEnqC4r+5k2IMixIOSlM30biUATQvaJzX5WgSdSMGbA/ed5A nSMI/FazF6JBPiWENV3VXdrnsC5+23Z2MyUG3hjz9nuoEYgbJpYEzAHMg4Xc5ut7 Yoxa5zcvQMLjzLLIufTzsbkNa09RvzTylLQ6gFm0p/va9nJqWF4+gk/oAbSoxJRW pD1xlYDiraJOWshCfPTxJnxejHF0BPABzvPjxp+Jh1THgnbaVWR6PzU76/T4HSg2 5tbZRKNR5a8SOgwxd6Z90viNYSd/qAuM -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:44 2024 by rpki-client on console-ams.rpki-client.org