$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: aazItW/fJH8xdN4VNdrcBOCFIe52uY5hNpLBP4h/0kE= Subject key identifier: 62:B8:7F:BF:93:3F:2D:A2:2A:32:AA:58:76:5E:63:0D:9A:B7:B6:71 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: E3 Signing time: Mon 25 Nov 2024 03:31:41 +0000 Manifest this update: Mon 25 Nov 2024 03:31:40 +0000 Manifest next update: Mon 02 Dec 2024 03:31:40 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: q2YPTAvDh6pYVgG0KA1AZJ23IDU1hNin/2UnpS/fEZs=) 2: 120AADD0A9F311EE9164C011C4F9AE02.roa (hash: HVuTVns1e8wBtoQnqsTE5ZrbPTMWGo3YfzeHEh0BOxo=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Nov 25 03:31:40 2024 GMT Not After : Dec 2 03:31:40 2024 GMT Subject: CN=6743ef9c-728e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:d0:ec:c4:56:c1:26:a6:7d:fc:9c:87:fa: da:de:b8:8f:cf:70:00:7c:f1:40:03:d6:97:e0:0a: 2d:fb:78:04:eb:c7:f5:e9:13:97:74:8f:52:8c:8e: fa:4d:42:1e:fc:ea:a4:a5:e2:1a:27:d3:7e:d8:3c: cd:5f:c1:03:87:ca:71:68:5c:70:68:f6:d3:9f:ff: 7c:4c:e9:0a:6d:38:f1:9a:e4:93:a8:33:0c:c0:26: 69:00:f8:e5:07:e4:08:83:24:19:2a:4c:2c:49:07: 85:03:c4:e9:ca:cf:90:70:4e:14:04:5b:24:2e:2a: 92:3e:3f:e5:fb:6c:75:b1:d6:f1:5f:22:21:f2:47: 36:28:05:16:36:6d:8d:ed:83:04:bf:1a:a4:07:60: 26:1c:74:7d:9f:e9:78:55:ec:e5:3c:9c:dd:e0:18: 78:5d:af:04:6c:70:1e:3c:03:79:ca:f6:44:9a:f5: 7a:e8:10:71:f1:7a:9e:3a:e1:47:a8:6e:61:2b:7b: c2:e2:74:ce:97:9f:3f:af:08:e6:cc:9d:68:65:38: 30:63:ca:db:70:a2:14:8d:12:bc:82:a3:98:29:7f: 37:76:03:61:21:e4:39:e7:fa:86:50:70:f7:1e:be: da:be:e3:83:25:31:00:d8:63:08:54:4d:53:12:de: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:7F:BF:93:3F:2D:A2:2A:32:AA:58:76:5E:63:0D:9A:B7:B6:71 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:24:3d:94:bb:27:af:66:0c:7d:e2:00:d2:ec:3d:27:6d:62: 8b:e8:10:6d:54:c8:af:87:c5:c0:89:45:01:c2:ef:9b:01:7a: 03:7b:3a:f0:b1:2c:db:18:06:d9:4b:98:77:9c:eb:01:4c:d8: c0:9d:a0:e8:52:19:94:d1:59:ac:5b:d0:31:d6:7c:86:58:09: a2:99:7e:6a:e5:b1:54:d3:38:a1:44:8a:50:df:a2:4e:e9:44: cf:3d:37:6b:97:8d:d7:c4:55:74:fa:fd:18:9e:58:43:a2:ec: fb:b0:77:59:41:86:0d:54:0f:62:3a:80:76:da:a8:f1:b3:5b: 9f:64:74:07:60:df:08:ca:39:82:e8:d9:6e:22:36:d5:7c:92: 47:9f:4b:00:80:70:b5:6a:7a:1f:9e:02:7e:6d:d3:f2:e7:36: 71:68:80:47:95:8a:d3:84:fc:53:13:ec:a8:32:06:3a:5f:38: 39:e3:d6:68:b6:a1:94:da:a1:87:7f:3e:3d:7c:31:10:48:93: 62:71:d9:1c:ec:14:6c:b9:6f:34:42:ab:0c:df:5a:30:76:0f: 39:50:04:77:61:89:60:33:99:82:b4:77:a5:c6:b1:43:9e:19: 72:35:c4:00:0b:9b:1c:01:59:3b:31:aa:94:c3:e9:5d:e3:34: 77:d4:53:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjQxMTI1MDMzMTQwWhcNMjQxMjAyMDMzMTQwWjAYMRYwFAYD VQQDEw02NzQzZWY5Yy03MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YLQ7MRWwSamffych/ra3riPz3AAfPFAA9aX4Aot+3gE68f16ROXdI9SjI76 TUIe/OqkpeIaJ9N+2DzNX8EDh8pxaFxwaPbTn/98TOkKbTjxmuSTqDMMwCZpAPjl B+QIgyQZKkwsSQeFA8Tpys+QcE4UBFskLiqSPj/l+2x1sdbxXyIh8kc2KAUWNm2N 7YMEvxqkB2AmHHR9n+l4VezlPJzd4Bh4Xa8EbHAePAN5yvZEmvV66BBx8XqeOuFH qG5hK3vC4nTOl58/rwjmzJ1oZTgwY8rbcKIUjRK8gqOYKX83dgNhIeQ55/qGUHD3 Hr7avuODJTEA2GMIVE1TEt6EhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK4f7+T Py2iKjKqWHZeYw2at7ZxMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4JD2UuyevZgx94gDS7D0nbWKL6BBtVMivh8XAiUUBwu+bAXoDezrw sSzbGAbZS5h3nOsBTNjAnaDoUhmU0VmsW9Ax1nyGWAmimX5q5bFU0zihRIpQ36JO 6UTPPTdrl43XxFV0+v0YnlhDouz7sHdZQYYNVA9iOoB22qjxs1ufZHQHYN8IyjmC 6NluIjbVfJJHn0sAgHC1anofngJ+bdPy5zZxaIBHlYrThPxTE+yoMgY6Xzg549Zo tqGU2qGHfz49fDEQSJNicdkc7BRsuW80QqsM31owdg85UAR3YYlgM5mCtHelxrFD nhlyNcQAC5scAVk7MaqUw+ld4zR31FNN -----END CERTIFICATE-----Generated at Mon Nov 25 04:43:52 2024 by rpki-client on console-ams.rpki-client.org