$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft (raw, json) Hash identifier: cYYCtzeMZOko2u8Oe425dE0qf8N150m1KpIIhMd8QiA= Subject key identifier: B4:63:2C:7A:C8:28:48:CE:99:C4:0B:B5:21:47:F3:18:0E:11:14:9E Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft Manifest number: E2 Signing time: Sat 23 Nov 2024 03:50:30 +0000 Manifest this update: Sat 23 Nov 2024 03:50:29 +0000 Manifest next update: Sat 30 Nov 2024 03:50:29 +0000 Files and hashes: 1: QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl (hash: 9/o58kMM7j2T3PMDk1aHwRdgJ3k1i1bzf+5UUTfuOuc=) 2: 437375BC7F5111EFB8735348C4F9AE02.roa (hash: ntU5A+HLeVovcRHLXCxsmuQ1WJafor08JAoFk5ZmBCg=) 3: E8B6593E38D611EF9B2A0B1CC4F9AE02.roa (hash: 5rUspi1ZMp7o9y755G4Ny7Y5XFHiGTiO4CSn7vG0JJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Validity Not Before: Nov 23 03:50:29 2024 GMT Not After : Nov 30 03:50:29 2024 GMT Subject: CN=67415106-da19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:db:36:79:c9:4a:47:07:d0:a5:3c:39:e5: ab:b8:81:86:06:01:32:85:aa:b1:23:81:6d:2f:61: 90:46:4b:60:2a:cc:60:fd:f7:36:39:cf:16:c8:da: a2:9d:c3:8e:ed:bb:5d:b1:a1:be:7c:58:74:65:e1: 87:6c:3a:60:f5:43:8b:f1:a2:a9:41:19:45:99:81: fd:42:1b:32:67:0f:04:7f:f7:2f:18:39:da:0d:50: 15:7e:4c:10:1e:08:3a:e7:1b:75:29:4b:4e:2e:89: 8f:1b:a9:6d:31:6e:79:9a:03:2c:a3:a9:e3:41:98: 07:1c:d0:26:c8:bb:40:93:4a:d6:37:13:ef:b5:59: 12:d8:bb:67:d7:a8:9d:f3:9c:36:b1:d6:74:af:31: 14:dd:a3:56:2d:e1:48:1e:ed:0d:10:4c:ee:35:51: 00:10:d4:bf:c5:f7:bf:a0:62:9d:3c:86:17:41:b0: 45:44:99:26:60:62:6a:d4:ee:7c:4c:02:15:7e:4e: 5f:31:1d:a7:b1:5b:7b:ff:d2:2d:fc:71:7d:d0:47: b3:fb:7b:55:ff:ed:be:87:04:af:74:7f:14:15:59: 11:b9:05:03:03:4a:e1:fc:42:e5:8d:a7:b6:24:53: 78:e4:b1:a2:00:1e:85:3b:db:8f:a7:a0:84:a8:6d: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:63:2C:7A:C8:28:48:CE:99:C4:0B:B5:21:47:F3:18:0E:11:14:9E X509v3 Authority Key Identifier: keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f7:f0:ff:f5:54:dc:95:39:de:b0:d5:d2:6d:96:41:91:e6: 3c:7d:c2:66:05:fe:33:be:db:34:71:41:56:d0:9a:a1:1e:56: 9c:a7:d3:ef:3c:ce:1a:6e:0a:77:1c:29:d1:e0:ec:c7:c5:53: 9a:fc:ff:ff:72:67:ec:ac:d8:e4:58:2b:b4:a7:90:39:24:ec: 91:78:c1:bb:c6:95:89:7b:81:48:08:ed:48:8e:11:6c:4a:c3: ad:b1:df:90:71:40:c5:d3:2c:87:ef:01:c7:c3:4a:3f:a3:ac: 87:86:86:76:76:3d:d5:42:d6:42:6c:f9:5b:64:a3:ab:7b:15: 26:b8:19:be:3b:9f:60:07:bf:52:00:3c:a7:7a:d0:fb:bc:86: 27:fd:fa:4b:04:9a:e4:4d:d6:d8:62:6b:5d:35:90:8a:48:c2: 2b:bd:92:0c:09:3c:5a:23:d3:83:0d:9c:f4:19:b6:36:ae:2a: b2:68:66:a9:6a:f0:ed:3a:19:33:ce:a0:ff:9d:d0:6f:7f:c7: ae:8c:79:fa:17:ec:c1:9e:67:5d:d9:3c:ef:cf:11:c0:2f:34: 10:96:81:1d:15:4e:c5:16:3e:1b:ca:1c:37:15:f9:9d:93:08: 50:49:46:9d:7e:70:43:0a:00:a1:66:4a:a7:74:f0:dc:7d:68: 84:1e:91:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5 NURBQjM0RTEwHhcNMjQxMTIzMDM1MDI5WhcNMjQxMTMwMDM1MDI5WjAYMRYwFAYD VQQDEw02NzQxNTEwNi1kYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HrbNnnJSkcH0KU8OeWruIGGBgEyhaqxI4FtL2GQRktgKsxg/fc2Oc8WyNqi ncOO7btdsaG+fFh0ZeGHbDpg9UOL8aKpQRlFmYH9QhsyZw8Ef/cvGDnaDVAVfkwQ Hgg65xt1KUtOLomPG6ltMW55mgMso6njQZgHHNAmyLtAk0rWNxPvtVkS2Ltn16id 85w2sdZ0rzEU3aNWLeFIHu0NEEzuNVEAENS/xfe/oGKdPIYXQbBFRJkmYGJq1O58 TAIVfk5fMR2nsVt7/9It/HF90Eez+3tV/+2+hwSvdH8UFVkRuQUDA0rh/ELljae2 JFN45LGiAB6FO9uPp6CEqG3zVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRjLHrI KEjOmcQLtSFH8xgOERSeMB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUIxNy81OTY2REQyNjcyQTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9I MS13UXRwOGw2ZTZWMnJOT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf9/D/9VTclTnesNXSbZZBkeY8fcJmBf4zvts0cUFW0JqhHlacp9Pv PM4abgp3HCnR4OzHxVOa/P//cmfsrNjkWCu0p5A5JOyReMG7xpWJe4FICO1IjhFs SsOtsd+QcUDF0yyH7wHHw0o/o6yHhoZ2dj3VQtZCbPlbZKOrexUmuBm+O59gB79S ADynetD7vIYn/fpLBJrkTdbYYmtdNZCKSMIrvZIMCTxaI9ODDZz0GbY2riqyaGap avDtOhkzzqD/ndBvf8eujHn6F+zBnmdd2TzvzxHALzQQloEdFU7FFj4byhw3Ffmd kwhQSUadfnBDCgChZkqndPDcfWiEHpG5 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org