$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: OctCxL1DcfQ79uSifrr+xi5++QliogJuw3QAIHudTcg= Subject key identifier: D5:88:47:06:6D:7C:73:D0:1D:96:39:22:B5:81:F8:41:C8:37:B2:44 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 06BC Signing time: Wed 20 Nov 2024 19:32:18 +0000 Manifest this update: Wed 20 Nov 2024 19:32:17 +0000 Manifest next update: Wed 27 Nov 2024 19:32:17 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: BXJgrGe0rKkdojncYj0Sb/UI69rOFDpcQf/RwC9PBIo=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: wuKDqTU6tn7/5jHE2t79EVQ5kpnRehQRwOUq9/41axU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Nov 20 19:32:17 2024 GMT Not After : Nov 27 19:32:17 2024 GMT Subject: CN=673e3942-4875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:ce:4d:70:74:57:76:ad:ee:e7:bf:aa:b5: e8:14:aa:0e:3c:a4:87:18:ac:f3:c2:ba:48:86:6d: ee:d4:ce:b6:ab:08:30:89:97:85:27:cf:3f:e5:88: 6a:c7:ff:8b:12:ed:ae:43:a8:1a:51:04:54:ed:83: 40:c0:dc:48:48:d5:a4:b3:8a:b1:24:41:8e:69:98: 73:2e:a2:30:1a:4b:4d:b4:69:17:c6:39:2b:3d:f6: de:79:fb:b9:2e:f7:a0:e0:df:2d:fc:66:88:5b:3e: 72:0a:7d:c0:61:3f:08:70:eb:3e:ae:b8:09:de:2a: c2:48:5a:64:8f:56:b2:01:10:7e:84:b4:2e:a0:d8: 24:c8:de:42:4e:22:3f:d8:0d:e9:4a:37:61:0c:31: 28:9b:1c:32:5a:a5:36:07:2e:89:4b:a4:f2:fe:ff: c9:96:a1:86:cb:c5:40:7a:84:b9:15:3f:7c:8b:99: 15:3f:1b:2d:bd:ee:67:b7:44:14:5b:79:09:af:77: 6e:79:7c:f2:24:5f:8e:5e:7b:4f:6c:34:6c:0b:ad: 3a:85:b2:d0:b7:85:2f:26:6a:17:34:b7:3d:0e:b7: 60:4f:de:f6:03:b7:3f:ad:ef:97:89:7d:68:5f:21: fd:81:9a:ab:9b:c8:5c:54:bf:44:ef:5c:8d:79:cd: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:47:06:6D:7C:73:D0:1D:96:39:22:B5:81:F8:41:C8:37:B2:44 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ba:19:0d:7e:1e:38:0b:17:b5:1f:1f:c1:36:d5:83:a7:b2: fe:3b:fc:3f:9d:7c:75:7d:22:27:69:53:64:b9:51:5e:d2:53: 13:c8:9d:39:78:8f:c3:15:c3:e0:c4:12:25:86:95:96:b1:ae: 11:40:d3:7f:45:fc:0b:7e:78:e2:ab:40:51:fe:39:7b:8d:14: 16:23:8e:e3:f7:d1:59:f6:3a:df:f2:7f:1e:98:fe:4c:f3:27: ea:3f:4a:fe:a8:0b:bd:5a:c3:f0:b1:52:06:0e:50:ce:3b:aa: a5:89:81:8e:a7:16:d8:00:10:c9:ae:6a:3d:82:36:ec:5c:a3: 04:2f:ad:0e:df:1e:26:72:8c:28:7c:bc:7e:b4:1f:30:df:05: 06:73:79:12:f8:f8:78:9d:c1:e2:d5:a5:93:55:e2:85:d9:85: de:72:ea:54:c9:de:02:31:02:15:a3:88:e8:4b:8e:85:32:54: 73:56:f1:be:03:d2:98:b2:0e:ee:31:03:0e:7b:54:80:dc:e4: a3:3f:3d:96:f7:9e:4a:f3:17:a2:d7:f7:9e:8c:65:3f:13:c5: 31:f1:06:c3:89:cd:8d:6f:67:f4:eb:51:f4:76:45:47:b8:26: 91:7b:99:35:f5:40:b2:8d:54:4c:62:13:26:73:ee:2c:38:74: a9:1d:fd:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjQxMTIwMTkzMjE3WhcNMjQxMTI3MTkzMjE3WjAYMRYwFAYD VQQDEw02NzNlMzk0Mi00ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4XOTXB0V3at7ue/qrXoFKoOPKSHGKzzwrpIhm3u1M62qwgwiZeFJ88/5Yhq x/+LEu2uQ6gaUQRU7YNAwNxISNWks4qxJEGOaZhzLqIwGktNtGkXxjkrPfbeefu5 Lveg4N8t/GaIWz5yCn3AYT8IcOs+rrgJ3irCSFpkj1ayARB+hLQuoNgkyN5CTiI/ 2A3pSjdhDDEomxwyWqU2By6JS6Ty/v/JlqGGy8VAeoS5FT98i5kVPxstve5nt0QU W3kJr3dueXzyJF+OXntPbDRsC606hbLQt4UvJmoXNLc9DrdgT972A7c/re+XiX1o XyH9gZqrm8hcVL9E71yNec0lHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWIRwZt fHPQHZY5IrWB+EHIN7JEMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBuhkNfh44Cxe1Hx/BNtWDp7L+O/w/nXx1fSInaVNkuVFe0lMTyJ05 eI/DFcPgxBIlhpWWsa4RQNN/RfwLfnjiq0BR/jl7jRQWI47j99FZ9jrf8n8emP5M 8yfqP0r+qAu9WsPwsVIGDlDOO6qliYGOpxbYABDJrmo9gjbsXKMEL60O3x4mcowo fLx+tB8w3wUGc3kS+Ph4ncHi1aWTVeKF2YXecupUyd4CMQIVo4joS46FMlRzVvG+ A9KYsg7uMQMOe1SA3OSjPz2W955K8xei1/eejGU/E8Ux8QbDic2Nb2f061H0dkVH uCaRe5k19UCyjVRMYhMmc+4sOHSpHf3o -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org