$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: k4GdRs6Iuh6msNkmtbWGcFPN9wY42Z20xxJoY5t2xmY= Subject key identifier: D0:7B:F4:6C:F3:38:36:B4:C6:99:01:82:A3:15:1D:FF:AE:5B:60:12 Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: 0A Signing time: Thu 21 Nov 2024 06:11:42 +0000 Manifest this update: Thu 21 Nov 2024 06:11:41 +0000 Manifest next update: Thu 28 Nov 2024 06:11:41 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: 2HSPZS2Q6Sv17WsPu/MD5qB0WhAAa5jllcnOsBsMn0Q=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: xVXEBqNGZO/ZZnI7W9UjDyYax3N6maC/JTY4vWV0zlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Nov 21 06:11:41 2024 GMT Not After : Nov 28 06:11:41 2024 GMT Subject: CN=673ecf1e-4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:f8:bb:d1:c0:b8:7d:2f:19:60:e8:45:da: 2e:d8:68:43:c8:c1:86:8d:55:8b:17:cf:cf:d5:b4: 84:85:12:3f:6c:a7:bb:39:fc:13:f4:7a:0e:6b:68: 15:9b:29:f8:e2:e2:63:49:57:4d:6b:33:f1:74:7b: a9:49:ec:16:fe:d2:90:6e:91:e3:7b:4d:ce:7b:bf: c1:f0:18:c5:af:d1:ce:38:c6:59:4a:8d:86:6b:82: 82:fe:f4:83:ad:8d:ad:3b:f5:d5:6c:62:86:c1:7c: 96:fc:85:c1:9f:32:a5:15:70:68:06:5c:0c:f7:30: ad:b4:2f:a5:60:e2:0a:94:18:ac:bf:8c:a2:db:47: 25:69:64:e2:9e:3c:60:f1:5b:1c:9e:45:be:14:fb: 4d:6e:cd:96:37:37:6d:57:e7:a1:98:e7:90:e0:f5: c6:f8:a4:85:cd:2f:53:ec:0c:28:d7:9b:b8:31:71: f2:cb:61:e4:ae:e8:6d:e5:67:b4:b3:14:eb:c3:fe: b4:3a:80:d9:7d:40:75:d4:0e:d4:ee:7e:34:d0:1c: 37:b2:1b:8a:fd:04:5a:63:73:72:02:8b:4a:de:08: 2c:fa:27:a9:0e:b5:aa:3b:98:9f:26:e1:f8:7b:43: b2:14:0f:39:e4:14:08:8e:e7:39:53:9f:0e:62:a2: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:F4:6C:F3:38:36:B4:C6:99:01:82:A3:15:1D:FF:AE:5B:60:12 X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:65:1d:7d:33:7f:aa:87:bd:c6:67:56:2e:05:e6:0c:2e:5c: 04:20:07:6f:0a:d9:30:ab:cc:80:a8:7f:4c:1c:9e:11:ba:bf: 4f:b6:7b:67:72:88:6c:5d:99:74:b8:85:5e:cf:6e:93:3e:11: eb:09:62:6b:6f:e6:d6:c8:44:83:d3:fa:b7:46:f6:41:1b:93: 8f:f2:b3:3d:b3:cb:4e:c4:a8:cc:0f:22:c1:99:8b:9e:da:a3: 47:c2:2f:7a:4d:f8:07:da:3a:65:90:21:5b:e6:ea:aa:2f:04: dd:4f:2f:27:31:24:a6:2e:72:e4:95:a0:5c:98:62:b7:37:ad: 28:05:2b:3f:7d:05:0e:10:cb:8c:17:2b:96:ad:bd:be:c8:50: ed:bc:f4:9a:20:b2:dd:1f:10:ba:81:3a:b8:c9:f3:29:67:e2: ff:d2:89:e2:8e:04:a5:9c:c2:46:fb:60:71:46:d2:3f:28:47: c0:bc:7a:38:d1:f8:5b:1b:56:a3:d9:28:cd:d9:f5:fb:ee:7d: c9:6d:ad:6d:33:97:5f:e4:db:12:c7:64:d9:f9:cf:4c:27:14: ca:2e:ab:6e:b5:f1:92:fe:f2:f9:7c:a4:1d:41:95:bd:c2:e7: 72:65:5e:72:c9:d2:71:8d:f5:89:d9:e2:bc:15:a1:25:6d:43: 8d:11:9c:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoQUFFNTc1OUE3RTk4QUE3NDU4NTk4REUzQzE5QUExNzk3 RjAwRjVGNTAeFw0yNDExMjEwNjExNDFaFw0yNDExMjgwNjExNDFaMBgxFjAUBgNV BAMTDTY3M2VjZjFlLTRlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS9vi70cC4fS8ZYOhF2i7YaEPIwYaNVYsXz8/VtISFEj9sp7s5/BP0eg5raBWb Kfji4mNJV01rM/F0e6lJ7Bb+0pBukeN7Tc57v8HwGMWv0c44xllKjYZrgoL+9IOt ja079dVsYobBfJb8hcGfMqUVcGgGXAz3MK20L6Vg4gqUGKy/jKLbRyVpZOKePGDx WxyeRb4U+01uzZY3N21X56GY55Dg9cb4pIXNL1PsDCjXm7gxcfLLYeSu6G3lZ7Sz FOvD/rQ6gNl9QHXUDtTufjTQHDeyG4r9BFpjc3ICi0reCCz6J6kOtao7mJ8m4fh7 Q7IUDznkFAiO5zlTnw5iojANAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0Hv0bPM4 NrTGmQGCoxUd/65bYBIwHwYDVR0jBBgwFoAUquV1mn6YqnRYWY3jwZqheX8A9fUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzNBM0YyODM2OUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVWMW1uNllxblJZV1kzandacWhlWDhBOWZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzNBM0YyODM2OUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5S WVdZM2p3WnFoZVg4QTlmVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALZlHX0zf6qHvcZnVi4F5gwuXAQgB28K2TCrzICof0wcnhG6v0+2e2dy iGxdmXS4hV7PbpM+EesJYmtv5tbIRIPT+rdG9kEbk4/ysz2zy07EqMwPIsGZi57a o0fCL3pN+AfaOmWQIVvm6qovBN1PLycxJKYucuSVoFyYYrc3rSgFKz99BQ4Qy4wX K5atvb7IUO289Jogst0fELqBOrjJ8yln4v/SieKOBKWcwkb7YHFG0j8oR8C8ejjR +FsbVqPZKM3Z9fvufcltrW0zl1/k2xLHZNn5z0wnFMouq2618ZL+8vl8pB1Blb3C 53JlXnLJ0nGN9YnZ4rwVoSVtQ40RnDs= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org