$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: 2fMbGfkuGFqK0iqmo38ULWKHtZrC6/R1jdSX9n5O+q8= Subject key identifier: 91:53:9F:FA:37:88:F3:5C:07:6C:E9:06:BF:CA:A5:5A:84:B4:F2:1D Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0B8E Signing time: Mon 25 Nov 2024 03:28:08 +0000 Manifest this update: Mon 25 Nov 2024 03:28:07 +0000 Manifest next update: Mon 02 Dec 2024 03:28:07 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: OhCtbFhfqlaIH/eNoCCNaCl4/J6BKhUS72fiz0Ky7Rk=) 2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=) 3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=) 4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=) 5: 51E0E8F6705F11EF97D9604FC4F9AE02.roa (hash: r8ER7MZWjqI9rg+ZmaWCcejrQuZoRi4E7E1k6EKhYpY=) 6: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=) 7: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=) 8: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=) 9: 520A518289FF11EFB5BFD43DC4F9AE02.roa (hash: 09VrRpN4i2Rv5vWslU97N8KrVjGGh0wQUP7c6kOhtdw=) 10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=) 11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=) 12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=) 13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=) 14: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=) 15: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=) 16: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=) 17: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=) 18: D0B10316030C11EF89EB2145C4F9AE02.roa (hash: PhzXlVkBrcWFjlbU535lKzJC+7r4kf8GECsoiMyE1lo=) 19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=) 20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=) 21: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=) 22: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=) 23: C1A5D38289D111EFAE1BBE09C4F9AE02.roa (hash: adNQDqxVotJqZPv81MPLyjvZbm+EvAgcsFsBDH2FNVE=) 24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3130 (0xc3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 25 03:28:07 2024 GMT Not After : Dec 2 03:28:07 2024 GMT Subject: CN=6743eec8-18f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:72:69:9a:b6:f4:62:b0:58:32:a6:5f:e5: a0:8b:ac:c4:51:7d:aa:5a:cb:81:79:64:78:ce:e3: 93:ec:50:91:24:c8:91:88:89:d3:9c:0f:c3:d1:11: 6b:b8:2c:1b:90:94:e6:f3:5f:78:be:df:5f:16:f9: 56:ad:df:c1:e6:d1:85:e2:e5:10:1b:82:48:d7:df: 0e:ca:5b:60:0d:1a:dc:8f:c6:27:82:2c:38:ff:1e: 33:d4:79:21:ff:09:19:32:d9:da:f8:c7:c1:03:9d: d9:8e:24:e1:11:b5:71:a0:b9:c4:94:b4:55:2f:a4: 81:f2:07:5e:76:c0:75:e0:f4:d4:de:51:44:d4:bf: df:f1:f1:84:08:1c:3e:b1:f0:f0:af:bc:5d:61:21: ef:7e:c6:db:22:e0:c7:78:0f:b9:54:ec:93:dc:ba: 78:f9:38:cb:5d:2c:4f:ff:10:c9:74:da:ac:2a:ce: 9e:19:15:0c:8d:a7:fa:47:67:39:31:ce:6d:15:06: 26:69:61:4d:82:49:b9:88:53:fc:d2:b5:a2:2f:48: a6:8d:e7:32:8d:14:16:8d:77:9e:30:c0:65:39:15: 3a:f2:69:12:d8:51:e4:75:b2:09:48:de:21:a9:f0: 7f:5e:56:09:af:df:27:6b:f6:fc:6f:3b:02:2e:30: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:53:9F:FA:37:88:F3:5C:07:6C:E9:06:BF:CA:A5:5A:84:B4:F2:1D X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:bb:77:63:6b:c8:e1:b9:47:f6:ff:81:e1:15:94:22:5b:e9: 57:31:50:70:e9:d8:69:29:6b:be:13:0a:0b:0d:69:44:55:78: fe:ac:a1:e4:cd:5d:45:b0:14:8c:45:20:e8:a9:53:25:89:cd: a5:4a:a1:d1:a4:b9:67:7c:42:52:72:dd:7e:10:9c:a9:9d:e4: 3d:39:69:09:5d:55:a0:32:19:f5:b0:bc:8c:e4:ca:bc:24:a3: d6:bc:16:76:a6:4a:8a:d7:c9:bc:b1:76:f5:db:ec:9d:01:eb: 8d:2b:52:97:00:1a:94:3a:ca:4c:70:0e:eb:e5:fd:39:50:2b: 80:61:b8:65:e2:82:8b:82:c3:70:b4:c1:86:0f:39:c5:35:1e: 9d:ba:8b:17:fd:28:0c:af:3c:1e:f1:24:94:08:65:37:54:c4: a4:fd:98:61:4c:24:40:c8:e0:ea:ee:67:91:84:d1:e6:cf:7a: e4:ab:f5:24:98:cf:7a:8b:27:ec:db:d8:98:84:fd:2b:a4:2e: 37:55:38:16:af:31:f3:64:b8:24:9d:51:c3:ca:82:66:e0:b5: 09:3b:ab:17:8f:03:09:18:b0:d7:7f:65:a5:d3:1e:80:29:4b: 97:02:99:1d:a0:ac:cb:ac:d8:9a:53:d1:bf:96:f8:ee:6d:6c: a9:ab:56:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTI1MDMyODA3WhcNMjQxMjAyMDMyODA3WjAYMRYwFAYD VQQDEw02NzQzZWVjOC0xOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLZyaZq29GKwWDKmX+Wgi6zEUX2qWsuBeWR4zuOT7FCRJMiRiInTnA/D0RFr uCwbkJTm8194vt9fFvlWrd/B5tGF4uUQG4JI198OyltgDRrcj8Yngiw4/x4z1Hkh /wkZMtna+MfBA53ZjiThEbVxoLnElLRVL6SB8gdedsB14PTU3lFE1L/f8fGECBw+ sfDwr7xdYSHvfsbbIuDHeA+5VOyT3Lp4+TjLXSxP/xDJdNqsKs6eGRUMjaf6R2c5 Mc5tFQYmaWFNgkm5iFP80rWiL0imjecyjRQWjXeeMMBlORU68mkS2FHkdbIJSN4h qfB/XlYJr98na/b8bzsCLjBDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFTn/o3 iPNcB2zpBr/KpVqEtPIdMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFu3dja8jhuUf2/4HhFZQiW+lXMVBw6dhpKWu+EwoLDWlEVXj+rKHk zV1FsBSMRSDoqVMlic2lSqHRpLlnfEJSct1+EJypneQ9OWkJXVWgMhn1sLyM5Mq8 JKPWvBZ2pkqK18m8sXb12+ydAeuNK1KXABqUOspMcA7r5f05UCuAYbhl4oKLgsNw tMGGDznFNR6duosX/SgMrzwe8SSUCGU3VMSk/ZhhTCRAyODq7meRhNHmz3rkq/Uk mM96iyfs29iYhP0rpC43VTgWrzHzZLgknVHDyoJm4LUJO6sXjwMJGLDXf2Wl0x6A KUuXApkdoKzLrNiaU9G/lvjubWypq1Z2 -----END CERTIFICATE-----Generated at Mon Nov 25 04:43:50 2024 by rpki-client on console-ams.rpki-client.org