$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: 6I4A1vc52Q2irpftSNe7cqWFWlDKcGvB5UZyzdv2JDY= Subject key identifier: 57:77:71:1C:68:4D:61:9C:8A:91:EB:C6:DF:52:94:1C:ED:51:DE:80 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 08C1 Signing time: Fri 22 Nov 2024 20:15:47 +0000 Manifest this update: Fri 22 Nov 2024 20:15:47 +0000 Manifest next update: Fri 29 Nov 2024 20:15:47 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: P35lMjNESWQTOuzaQpQ3n0+9y28YDq3a2i1cIJ/OLy8=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: OA6Ay1bXyUAJq+KfCYl3CuSq1KvT2rPbVpCqhvkc99A=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: Cf3w2+/kQFFdBNp0nOAXgGT+JLVmdNCHNGijos8QA7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Nov 22 20:15:47 2024 GMT Not After : Nov 29 20:15:47 2024 GMT Subject: CN=6740e673-87bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:68:f3:6a:ca:f2:c9:2e:b4:e3:c1:eb:5e: 79:8c:3e:df:ba:41:bb:d5:3d:c9:97:61:eb:f2:26: c6:82:d3:a0:1d:d0:02:c0:2f:dc:10:02:5a:93:38: b0:db:f5:01:10:a3:a4:d1:73:cf:9e:4a:d8:cb:bb: 59:fe:95:25:24:fe:b8:fa:b6:1e:86:71:2e:8a:8d: 80:bc:36:ff:7d:fb:b7:dc:7f:49:6f:e2:0c:d7:07: e9:bb:3f:da:c9:15:98:34:a0:1b:b9:ca:b4:ab:ca: da:e8:6c:07:53:ab:e2:12:91:b5:06:c8:a3:3a:c8: 89:f1:98:10:f5:eb:f0:60:a4:ec:1e:62:be:58:08: 15:b9:a8:8c:e0:63:4c:74:7f:8f:53:a8:2e:b5:4a: d9:78:2d:1b:3b:33:ee:cd:b9:40:23:cf:0d:95:9f: c7:93:99:56:ee:b1:1c:55:17:68:3e:7b:e4:82:d1: 07:53:18:d6:53:b5:2d:08:b3:d0:ed:d1:d5:af:6c: e6:7d:bf:75:dd:9b:99:7a:97:77:f9:c9:25:79:b6: d1:a4:e3:45:ef:71:cb:e7:ba:f8:34:9a:2f:81:5c: dc:71:0f:02:88:0a:e3:72:14:1c:7a:f8:93:31:08: 4e:0b:7d:c6:63:42:5a:f1:38:21:3c:b7:90:28:5f: 6d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:77:71:1C:68:4D:61:9C:8A:91:EB:C6:DF:52:94:1C:ED:51:DE:80 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1b:64:d0:3c:1a:17:46:c4:93:01:2b:ad:5f:4e:e1:57:ac: fa:01:1a:ac:d7:62:a5:ff:22:f8:d6:5a:50:f2:71:e7:90:47: 02:97:47:80:04:c5:e6:98:95:b6:90:a9:aa:36:79:e2:4a:89: 1d:02:09:ed:d0:84:c2:9f:c3:0f:c7:a1:73:c9:17:48:07:88: bc:f9:df:df:a1:7c:c4:0b:11:46:c7:17:86:8f:3b:30:dc:4e: 17:13:d5:66:3f:a7:26:2a:3a:c8:db:f1:19:71:5a:bb:fa:86: 3c:10:4f:18:f2:e7:7e:15:1d:46:b0:6b:22:b5:2a:2b:56:3e: 11:5b:67:16:37:18:e3:34:c8:96:33:09:f7:b7:49:ee:22:00: f3:ba:37:d5:2a:3d:21:63:89:cd:9d:41:8c:87:bf:6c:9b:8c: 07:96:d3:fe:ea:4b:0e:15:ef:cd:ba:d0:d1:e4:5a:b3:7c:71: a6:e8:2b:a0:f4:03:80:c1:65:9a:bb:06:5e:d8:b6:49:1e:de: 79:30:e3:2e:d7:1d:0e:ca:22:87:ac:60:9a:6b:e6:4d:26:1c: 15:e6:24:77:f3:81:8a:c5:51:b5:47:d7:91:3f:1f:9d:cd:d6: 38:58:52:88:fb:84:42:6f:d8:c1:d5:21:7c:5c:07:ef:f8:85: 33:c8:44:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjQxMTIyMjAxNTQ3WhcNMjQxMTI5MjAxNTQ3WjAYMRYwFAYD VQQDEw02NzQwZTY3My04N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRho82rK8skutOPB6155jD7fukG71T3Jl2Hr8ibGgtOgHdACwC/cEAJakziw 2/UBEKOk0XPPnkrYy7tZ/pUlJP64+rYehnEuio2AvDb/ffu33H9Jb+IM1wfpuz/a yRWYNKAbucq0q8ra6GwHU6viEpG1BsijOsiJ8ZgQ9evwYKTsHmK+WAgVuaiM4GNM dH+PU6gutUrZeC0bOzPuzblAI88NlZ/Hk5lW7rEcVRdoPnvkgtEHUxjWU7UtCLPQ 7dHVr2zmfb913ZuZepd3+cklebbRpONF73HL57r4NJovgVzccQ8CiArjchQceviT MQhOC33GY0Ja8TghPLeQKF9ttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd3cRxo TWGcipHrxt9SlBztUd6AMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzG2TQPBoXRsSTASutX07hV6z6ARqs12Kl/yL41lpQ8nHnkEcCl0eA BMXmmJW2kKmqNnniSokdAgnt0ITCn8MPx6FzyRdIB4i8+d/foXzECxFGxxeGjzsw 3E4XE9VmP6cmKjrI2/EZcVq7+oY8EE8Y8ud+FR1GsGsitSorVj4RW2cWNxjjNMiW Mwn3t0nuIgDzujfVKj0hY4nNnUGMh79sm4wHltP+6ksOFe/NutDR5FqzfHGm6Cug 9AOAwWWauwZe2LZJHt55MOMu1x0OyiKHrGCaa+ZNJhwV5iR384GKxVG1R9eRPx+d zdY4WFKI+4RCb9jB1SF8XAfv+IUzyEQ4 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org