$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: S2aEJqkocpIuYH/evjViG6LiGBWiKqKKMtghZYnl2/g= Subject key identifier: 86:AB:E0:88:FE:13:45:5E:82:02:61:1F:7A:48:D3:6B:0A:77:B4:60 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 11F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 11DD Signing time: Fri 22 Nov 2024 17:35:27 +0000 Manifest this update: Fri 22 Nov 2024 17:35:27 +0000 Manifest next update: Fri 29 Nov 2024 17:35:27 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: LEri2R2yNN5I5Eoqpf+y7Lw9VAQ0zJB3re1Jcp448nQ=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: CV1olrwVOu2rPavDvmtRQ4rOYA7xZ/cCM53DbJ5ttg4=) 3: F126D5322A4211EF9FAC5285C4F9AE02.roa (hash: mB7h/GHqBgvKSCztlCgc84T0ajVIKusJDa2wURepanU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4597 (0x11f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Nov 22 17:35:27 2024 GMT Not After : Nov 29 17:35:27 2024 GMT Subject: CN=6740c0df-67d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:5e:b0:1e:17:c3:91:68:4a:09:73:68:48: e0:2b:eb:bc:db:4c:90:e2:76:3c:41:9d:53:cc:76: 4b:50:9d:b9:7b:f7:3e:7d:71:1c:57:7f:7e:31:de: 29:88:5d:92:72:69:34:76:c5:84:73:ec:f5:0f:63: 8d:ff:56:e6:da:21:ef:37:d0:60:87:44:c4:89:e8: c5:79:2d:01:4d:7e:de:74:4d:9a:79:be:12:0e:54: 05:4e:41:8d:7d:61:99:07:4e:43:e2:e8:3c:e4:ed: 2f:35:ba:5a:d6:b8:d6:46:37:28:fb:34:d7:6e:ad: 72:2d:0a:d2:59:7b:ea:de:d2:30:96:24:6e:ef:f1: 1c:30:71:89:45:4f:c6:24:0b:54:bb:99:1d:89:47: e6:3a:fd:7d:d4:d5:23:d4:d5:1c:48:d1:37:b5:49: dc:21:2a:42:91:9c:ae:57:3d:02:d1:81:72:b8:0c: 8d:11:ae:a8:71:c6:71:4e:7b:fa:da:60:1a:b4:9d: 16:98:0c:02:36:72:cf:e2:26:4c:84:fa:91:62:bb: 99:7e:0b:d6:79:48:68:6c:7f:ee:c6:0e:5f:50:f4: b9:9b:d0:f9:20:b5:e0:2f:79:b5:f7:ee:7f:bf:09: 58:9a:01:f4:b1:ae:33:10:ea:32:a8:c8:0c:57:2c: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:E0:88:FE:13:45:5E:82:02:61:1F:7A:48:D3:6B:0A:77:B4:60 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b1:7d:c2:5a:75:bc:00:08:32:a7:7b:7f:34:c1:7a:25:8b: e0:d2:30:95:2a:44:84:69:1c:07:fc:9f:2c:ab:19:45:ac:27: b1:e9:89:cb:65:a9:69:12:03:88:c6:b6:61:92:33:36:57:00: dc:26:54:da:66:4e:d5:61:f5:c1:ba:d4:50:58:22:36:68:b3: 5a:fd:9b:fd:e3:d6:11:9c:0c:66:a2:58:0e:07:d7:08:1a:e9: d4:9f:91:54:e7:36:4b:af:c1:63:8b:e3:c2:0d:0f:ea:00:ed: 51:c2:df:f9:ed:0f:a4:cc:89:2a:d7:c9:55:ca:1d:ac:7d:34: b6:d7:01:a8:c1:0e:8c:03:79:a5:49:bf:70:cd:26:71:8d:e5: 85:10:23:2b:02:05:d1:a9:40:43:3d:cd:b2:5a:7a:43:a9:2d: 99:c1:f8:31:e3:ad:8e:3f:32:df:43:a3:d3:45:60:bd:f1:d9: dc:e9:30:8f:e4:b4:61:36:be:1a:b2:4d:83:cf:4d:fc:f0:5a: fb:6a:85:9e:63:5a:9f:1b:d9:df:05:f7:ec:3b:bd:87:49:f3: f9:7b:b9:2c:3f:24:e9:6c:a7:69:4d:e7:28:fc:9c:17:93:f1: ef:3e:ff:1f:c1:f8:21:dc:82:ff:d1:55:14:2d:b2:e3:33:f3: 1a:b6:49:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjQxMTIyMTczNTI3WhcNMjQxMTI5MTczNTI3WjAYMRYwFAYD VQQDEw02NzQwYzBkZi02N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g9esB4Xw5FoSglzaEjgK+u820yQ4nY8QZ1TzHZLUJ25e/c+fXEcV39+Md4p iF2Scmk0dsWEc+z1D2ON/1bm2iHvN9Bgh0TEiejFeS0BTX7edE2aeb4SDlQFTkGN fWGZB05D4ug85O0vNbpa1rjWRjco+zTXbq1yLQrSWXvq3tIwliRu7/EcMHGJRU/G JAtUu5kdiUfmOv191NUj1NUcSNE3tUncISpCkZyuVz0C0YFyuAyNEa6occZxTnv6 2mAatJ0WmAwCNnLP4iZMhPqRYruZfgvWeUhobH/uxg5fUPS5m9D5ILXgL3m19+5/ vwlYmgH0sa4zEOoyqMgMVyySTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIar4Ij+ E0VeggJhH3pI02sKd7RgMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATsX3CWnW8AAgyp3t/NMF6JYvg0jCVKkSEaRwH/J8sqxlFrCex6YnL ZalpEgOIxrZhkjM2VwDcJlTaZk7VYfXButRQWCI2aLNa/Zv949YRnAxmolgOB9cI GunUn5FU5zZLr8Fji+PCDQ/qAO1Rwt/57Q+kzIkq18lVyh2sfTS21wGowQ6MA3ml Sb9wzSZxjeWFECMrAgXRqUBDPc2yWnpDqS2Zwfgx462OPzLfQ6PTRWC98dnc6TCP 5LRhNr4ask2Dz0388Fr7aoWeY1qfG9nfBffsO72HSfP5e7ksPyTpbKdpTeco/JwX k/HvPv8fwfgh3IL/0VUULbLjM/MatkmP -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org