$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: bLXC/Rd4YHK9ujsFsjfScjlcne0pXCzyasJVfVY/9no= Subject key identifier: 7C:46:2C:BA:82:8A:FA:C6:20:40:46:F5:66:71:5C:9B:81:24:27:01 Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: 014A Signing time: Thu 21 Nov 2024 02:43:07 +0000 Manifest this update: Thu 21 Nov 2024 02:43:07 +0000 Manifest next update: Thu 28 Nov 2024 02:43:07 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: R+ZXz1jPm9C7yhtvsxbNJne5Eu3A+N/PLNJsEOEHM9E=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: li4OxnhOQgQRujPF67sN5Xz793LOnzHpSZGFaFwRWYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: Nov 21 02:43:07 2024 GMT Not After : Nov 28 02:43:07 2024 GMT Subject: CN=673e9e3b-6f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:33:49:e8:ac:b4:d9:bb:ec:87:89:9c:00: 89:17:dd:3d:92:b2:4d:3f:10:73:6d:6e:f2:f9:cd: 9c:0d:60:cf:d9:8f:ef:10:82:1a:0c:62:28:42:68: a6:3c:ac:c9:a2:8a:1e:75:de:6d:8d:42:be:03:65: b1:dd:5b:73:7e:c6:a4:ea:8b:8a:c0:ae:49:ce:d6: 92:88:12:06:77:bd:dc:aa:5d:eb:a7:57:02:f2:6c: 70:fd:2c:c5:59:d1:63:27:d0:4e:d5:ce:f4:fb:c6: 21:09:29:bf:4f:5e:77:59:97:8d:16:c0:e4:96:0a: 11:d6:b4:03:48:85:8c:8a:83:28:49:7a:1a:0d:0f: 36:a0:3a:67:48:fe:14:8f:0e:86:a6:06:24:ca:57: 67:af:ac:a2:92:a0:e1:e9:2e:3e:a4:43:fb:be:70: 47:5d:60:e8:e0:fe:60:53:37:18:dd:13:ab:0a:7b: ea:de:fd:5d:0a:5f:e3:62:b4:4e:74:86:b6:74:92: ba:2b:5f:c8:a1:8e:79:38:a7:e3:1a:87:4a:b9:ab: 27:94:81:05:f7:62:06:c5:75:48:17:ee:d5:f2:a3: d1:43:c7:fb:5c:79:84:4f:09:36:f3:45:e7:d7:03: 69:42:a6:58:dc:b2:0d:3f:42:de:f4:dc:06:c7:95: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:2C:BA:82:8A:FA:C6:20:40:46:F5:66:71:5C:9B:81:24:27:01 X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ee:ea:bf:58:b1:69:d8:19:2e:4e:df:a6:7e:b4:71:ae:54: 17:6f:e6:78:f9:5b:2b:15:9b:a1:62:ee:39:23:10:0c:6f:6e: 67:86:f0:87:89:18:28:aa:18:d7:f7:97:97:13:91:04:c1:a4: 24:39:7a:31:61:11:2d:00:a6:d5:48:49:9a:0d:64:5c:72:91: 3e:aa:bb:c8:a4:d2:d0:54:7b:4b:a8:9a:fd:b3:db:b8:6f:08: 12:79:3c:a6:15:fc:fe:df:0d:46:99:85:f7:96:93:0f:bf:79: 11:92:d1:c9:cd:50:d5:e5:1a:bb:50:4e:b0:2c:00:63:f7:61: f4:ea:43:92:b9:0d:34:7b:b9:b3:ca:3e:8f:41:63:84:a7:36: 38:02:a4:bc:a5:97:b4:4f:fe:09:83:08:49:7d:e3:93:9d:5a: c7:db:14:b9:e2:35:b3:32:ae:a0:0a:bc:a6:cb:91:21:eb:3e: af:c0:45:cd:2f:80:1a:17:6f:38:0c:59:9d:27:f2:45:d0:a2: 3a:ea:fb:90:bb:0e:6f:af:89:0d:96:a1:db:75:75:aa:0d:7a: dc:65:a0:ea:6c:09:a6:3f:72:78:0b:9f:dd:e6:d2:61:ec:b6: d7:e0:f4:dd:6a:75:1c:91:81:4e:b0:c5:50:f7:51:eb:23:b1: b3:b4:43:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjQxMTIxMDI0MzA3WhcNMjQxMTI4MDI0MzA3WjAYMRYwFAYD VQQDEw02NzNlOWUzYi02ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXczSeistNm77IeJnACJF909krJNPxBzbW7y+c2cDWDP2Y/vEIIaDGIoQmim PKzJoooedd5tjUK+A2Wx3Vtzfsak6ouKwK5JztaSiBIGd73cql3rp1cC8mxw/SzF WdFjJ9BO1c70+8YhCSm/T153WZeNFsDklgoR1rQDSIWMioMoSXoaDQ82oDpnSP4U jw6GpgYkyldnr6yikqDh6S4+pEP7vnBHXWDo4P5gUzcY3ROrCnvq3v1dCl/jYrRO dIa2dJK6K1/IoY55OKfjGodKuasnlIEF92IGxXVIF+7V8qPRQ8f7XHmETwk280Xn 1wNpQqZY3LINP0Le9NwGx5WOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxGLLqC ivrGIEBG9WZxXJuBJCcBMB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv7uq/WLFp2BkuTt+mfrRxrlQXb+Z4+VsrFZuhYu45IxAMb25nhvCH iRgoqhjX95eXE5EEwaQkOXoxYREtAKbVSEmaDWRccpE+qrvIpNLQVHtLqJr9s9u4 bwgSeTymFfz+3w1GmYX3lpMPv3kRktHJzVDV5Rq7UE6wLABj92H06kOSuQ00e7mz yj6PQWOEpzY4AqS8pZe0T/4JgwhJfeOTnVrH2xS54jWzMq6gCrymy5Eh6z6vwEXN L4AaF284DFmdJ/JF0KI66vuQuw5vr4kNlqHbdXWqDXrcZaDqbAmmP3J4C5/d5tJh 7LbX4PTdanUckYFOsMVQ91HrI7GztEOm -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org