$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: NVMZ2lP4b032Kpkd+eNzYVLJgDgrjoIRfinW8cbWDvo= Subject key identifier: 35:0F:C4:11:D0:E2:D9:8C:2E:AC:05:62:70:68:6E:2F:A5:C0:0D:2A Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 06C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 06AA Signing time: Wed 20 Nov 2024 21:48:29 +0000 Manifest this update: Wed 20 Nov 2024 21:48:29 +0000 Manifest next update: Wed 27 Nov 2024 21:48:29 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: F1/YrUzhWu6SOumThzVFpJVy4ICjxJ8IVatD8zcJlTc=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Nov 20 21:48:29 2024 GMT Not After : Nov 27 21:48:29 2024 GMT Subject: CN=673e592d-95af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:b2:f4:98:85:3b:28:1c:ad:99:19:3d:96: 1f:96:e7:8d:44:a4:7c:e4:22:81:e9:fc:94:58:35: 37:ca:93:a8:9a:85:3e:a1:51:54:8d:ad:dc:8d:c9: 67:a8:1e:57:9e:96:aa:9b:1e:f9:8c:52:09:6c:d8: 25:8c:55:bd:2c:a6:5a:a7:ab:3a:b3:38:e1:09:d5: 65:5e:2f:d5:96:64:7e:de:81:3a:b5:15:41:ca:41: 0b:8f:ce:d6:5e:5e:9c:17:30:c9:ab:76:13:ed:fc: 9a:92:31:82:0a:5c:1e:8e:c9:90:24:a4:aa:36:84: 7f:8c:47:ad:9a:6b:1c:17:4e:4e:37:21:b0:a2:74: a6:39:96:0e:36:89:1f:1e:6e:2a:7e:98:f6:7f:c6: 8a:08:af:7a:e8:76:57:1e:2e:2f:fd:5a:e9:5c:fe: 6e:18:a8:a8:4f:bd:12:4b:92:fb:a1:50:77:b9:71: 3f:ea:42:c4:f8:be:79:fb:14:dd:8c:98:ab:09:dc: ec:b5:92:39:fb:89:5b:f2:fc:14:12:a1:b6:dd:20: b9:db:02:20:60:3b:88:d9:4e:0b:c2:5a:e6:b5:9f: 87:df:ae:49:64:a6:80:16:3b:79:67:01:50:e6:a5: 82:97:bd:50:c9:fe:b8:80:83:cb:1a:cf:e7:3f:d6: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:C4:11:D0:E2:D9:8C:2E:AC:05:62:70:68:6E:2F:A5:C0:0D:2A X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fe:be:34:7e:a2:a6:c3:24:0e:48:e4:eb:cd:ea:41:5e:d2: d4:4c:fc:73:55:3b:0c:8f:7b:79:f8:c9:ae:80:af:47:a4:d3: 2c:ba:c4:06:79:d7:5d:28:af:63:76:d4:14:3e:6e:53:87:46: e1:ed:7a:94:bb:98:42:e5:01:66:b4:ce:77:36:19:81:18:32: e1:fb:c4:88:e3:35:0e:bd:9d:25:c2:05:3e:54:78:5b:3c:f4: ae:79:8d:b2:7b:2c:6b:29:97:af:9d:ab:5f:d0:d4:0a:7a:c0: 41:72:b9:8d:7e:5f:07:b7:4a:40:b6:c9:28:77:e8:3a:0b:8b: de:bb:37:c4:7c:44:63:21:85:06:ff:27:29:eb:7c:4e:df:04: 48:6b:92:01:9a:16:70:46:bd:43:e7:68:d6:bd:e9:f4:c7:a6: a9:ca:4f:c5:93:45:5f:45:54:20:aa:b4:e1:3e:70:75:3a:57: 22:05:31:23:d2:a1:61:5c:a0:44:f0:bd:6e:58:0d:c2:8d:e8: 36:ad:34:8d:21:ef:29:c2:aa:36:37:e6:3a:69:b0:d1:35:1e: e2:0c:17:50:2e:ba:d9:53:62:eb:d2:c1:a8:b5:50:3f:5f:5f: 2d:a3:e6:85:91:0b:79:8c:35:cd:7a:8a:8d:b8:66:c4:98:2d: d6:52:73:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjQxMTIwMjE0ODI5WhcNMjQxMTI3MjE0ODI5WjAYMRYwFAYD VQQDEw02NzNlNTkyZC05NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3ay9JiFOygcrZkZPZYflueNRKR85CKB6fyUWDU3ypOomoU+oVFUja3cjcln qB5Xnpaqmx75jFIJbNgljFW9LKZap6s6szjhCdVlXi/VlmR+3oE6tRVBykELj87W Xl6cFzDJq3YT7fyakjGCClwejsmQJKSqNoR/jEetmmscF05ONyGwonSmOZYONokf Hm4qfpj2f8aKCK966HZXHi4v/VrpXP5uGKioT70SS5L7oVB3uXE/6kLE+L55+xTd jJirCdzstZI5+4lb8vwUEqG23SC52wIgYDuI2U4LwlrmtZ+H365JZKaAFjt5ZwFQ 5qWCl71Qyf64gIPLGs/nP9YGXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUPxBHQ 4tmMLqwFYnBobi+lwA0qMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/r40fqKmwyQOSOTrzepBXtLUTPxzVTsMj3t5+MmugK9HpNMsusQG edddKK9jdtQUPm5Th0bh7XqUu5hC5QFmtM53NhmBGDLh+8SI4zUOvZ0lwgU+VHhb PPSueY2yeyxrKZevnatf0NQKesBBcrmNfl8Ht0pAtskod+g6C4veuzfEfERjIYUG /ycp63xO3wRIa5IBmhZwRr1D52jWven0x6apyk/Fk0VfRVQgqrThPnB1OlciBTEj 0qFhXKBE8L1uWA3Cjeg2rTSNIe8pwqo2N+Y6abDRNR7iDBdQLrrZU2Lr0sGotVA/ X18to+aFkQt5jDXNeoqNuGbEmC3WUnMk -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org