$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: RpbOs/bB5ws8MrCAjf7VRUUhd6Mu7lgYJV/oTiXz1zo= Subject key identifier: 5D:9F:7D:5A:42:06:C7:DA:A2:CC:76:6D:D7:A8:DA:7A:76:7E:10:03 Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0A6E Signing time: Fri 22 Nov 2024 19:24:00 +0000 Manifest this update: Fri 22 Nov 2024 19:24:00 +0000 Manifest next update: Fri 29 Nov 2024 19:24:00 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: 5mskCZI9G5BCLS+7VwCF8Dlo0nJt9K3P88OdmNHVuSs=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: r+qFQ3fN+c4Grex+TON5FzY+8r6Nkc1WSkFRkqt8yC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: Nov 22 19:24:00 2024 GMT Not After : Nov 29 19:24:00 2024 GMT Subject: CN=6740da50-043c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:0e:64:63:2c:52:23:5e:bd:16:b8:f7:9b: ca:3e:81:9b:0e:2d:40:ab:68:63:c5:fb:5b:3b:0b: 7a:91:20:24:1b:30:74:b0:7e:02:79:e6:12:71:b4: db:b2:9a:a7:45:9c:a1:ed:30:b9:5c:49:32:ba:c5: b5:65:55:b5:2c:47:70:ca:4b:dc:99:36:1e:b1:8b: ea:00:22:b6:d7:f6:04:b1:08:d5:38:73:53:8f:94: c1:bd:af:8c:b7:04:c8:c6:d6:d7:ab:7e:27:34:3c: 19:2a:fd:4c:7a:bc:36:70:7b:9b:b0:14:81:4b:19: ec:78:13:dc:ce:de:bc:5d:8e:eb:6f:96:a4:72:26: 70:cc:08:78:27:ac:63:d8:9c:5c:ba:52:3a:00:c7: 90:20:0d:38:cf:39:4b:06:6f:01:e0:e5:5a:36:02: 07:98:fc:aa:06:cc:db:80:3c:b8:03:51:e6:98:24: 02:60:f5:77:f0:cc:69:df:dc:85:26:6c:41:b1:1f: 55:c1:89:ff:ba:1c:46:96:6f:2e:7b:06:f1:6e:b2: ca:13:e7:b3:fc:e8:f8:cd:2e:8a:0b:a5:39:7a:27: 48:d9:7a:6a:b8:6d:68:76:eb:e7:4a:cd:fa:a7:09: 87:2d:6a:29:bd:b5:c7:63:17:c9:8b:5e:05:76:0f: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:7D:5A:42:06:C7:DA:A2:CC:76:6D:D7:A8:DA:7A:76:7E:10:03 X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:15:ac:68:35:9c:09:8c:70:16:a7:26:aa:73:e1:65:31:73: 03:0d:3f:5b:77:2b:68:88:84:20:10:5e:01:ec:5a:36:a4:8e: 2d:a6:ed:f4:4f:aa:23:d3:24:5a:5a:26:7a:b4:64:53:45:9d: f5:12:f1:b5:23:d6:a4:71:ef:2f:24:86:25:76:62:5a:7a:b7: 33:10:78:9a:6f:85:a9:a6:65:9a:e4:5b:0f:c5:0b:95:12:86: 48:69:20:c4:db:7e:00:ba:b0:73:bf:9e:9e:5f:17:58:35:68: 17:35:57:16:ed:d9:dc:17:78:71:1a:c7:8a:e5:6a:19:df:2f: a5:3b:5f:25:8c:90:a4:a8:9c:a7:08:c6:8e:14:de:2f:b3:21: 23:1c:78:a0:7c:29:27:12:58:b6:75:bd:f4:fc:cb:c5:f2:00: 29:5e:5e:91:4c:18:96:54:9b:55:a4:94:ec:90:70:e2:0f:6c: a5:7f:fc:48:1a:8f:a1:ee:1f:08:13:1c:98:4b:53:80:be:ef: 79:7d:4b:91:37:d3:e1:3e:f4:12:f4:69:50:c1:b2:01:1f:0e: 7f:48:91:74:eb:1c:9d:45:ac:48:3a:05:1b:ad:56:fa:a1:57: 16:90:14:3a:cd:5c:6b:71:e2:e1:28:b0:d3:9a:b2:37:d9:ee: 53:29:77:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjQxMTIyMTkyNDAwWhcNMjQxMTI5MTkyNDAwWjAYMRYwFAYD VQQDEw02NzQwZGE1MC0wNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/4OZGMsUiNevRa495vKPoGbDi1Aq2hjxftbOwt6kSAkGzB0sH4CeeYScbTb spqnRZyh7TC5XEkyusW1ZVW1LEdwykvcmTYesYvqACK21/YEsQjVOHNTj5TBva+M twTIxtbXq34nNDwZKv1Merw2cHubsBSBSxnseBPczt68XY7rb5akciZwzAh4J6xj 2JxculI6AMeQIA04zzlLBm8B4OVaNgIHmPyqBszbgDy4A1HmmCQCYPV38Mxp39yF JmxBsR9VwYn/uhxGlm8uewbxbrLKE+ez/Oj4zS6KC6U5eidI2XpquG1oduvnSs36 pwmHLWopvbXHYxfJi14Fdg/tnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2ffVpC Bsfaosx2bdeo2np2fhADMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPFaxoNZwJjHAWpyaqc+FlMXMDDT9bdytoiIQgEF4B7Fo2pI4tpu30 T6oj0yRaWiZ6tGRTRZ31EvG1I9akce8vJIYldmJaerczEHiab4WppmWa5FsPxQuV EoZIaSDE234AurBzv56eXxdYNWgXNVcW7dncF3hxGseK5WoZ3y+lO18ljJCkqJyn CMaOFN4vsyEjHHigfCknEli2db30/MvF8gApXl6RTBiWVJtVpJTskHDiD2ylf/xI Go+h7h8IExyYS1OAvu95fUuRN9PhPvQS9GlQwbIBHw5/SJF06xydRaxIOgUbrVb6 oVcWkBQ6zVxrceLhKLDTmrI32e5TKXf2 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org