$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: GWd4mGWeJMvnpoSuBhOGsfMVc9owrRgjgc/sTdliGyg= Subject key identifier: 95:FA:EB:6C:58:13:D4:4B:93:46:4D:63:84:0A:30:6E:A5:D2:4F:6F Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: 77 Signing time: Thu 21 Nov 2024 04:55:37 +0000 Manifest this update: Thu 21 Nov 2024 04:55:37 +0000 Manifest next update: Thu 28 Nov 2024 04:55:37 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: S5YM1OEN09T5bRCaLFoIIZmYuDVmCq0KD2p0I0Agymw=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: ey0oQHiSGpH4+EnFGwizJ9b66lbUXNoAkMqUMUf/z8g=) 3: 138E2452F89011EE8B2FC42AC4F9AE02.roa (hash: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Nov 21 04:55:37 2024 GMT Not After : Nov 28 04:55:37 2024 GMT Subject: CN=673ebd49-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:95:dc:92:7d:94:07:e3:a5:80:d3:bd:b9: 4f:c6:d3:fa:d5:1d:fc:80:0e:70:0a:2e:0c:e0:05: a9:d2:4a:af:cb:36:c6:bf:8f:7c:80:eb:4f:d2:87: 57:c0:58:5a:c7:45:85:20:b1:6a:4e:1f:99:30:a4: 3e:e1:02:44:69:e8:fb:e6:72:04:11:10:32:87:74: 4e:4b:a9:8b:a9:31:f9:7a:e5:a5:08:fe:66:51:8a: 04:77:33:06:2e:cb:df:e4:9f:bb:42:60:f3:ac:9d: fb:14:27:a3:dd:66:ab:fc:65:07:f5:fd:53:04:9a: fa:c3:a3:8d:45:fc:a0:6b:d5:ed:7a:9c:17:38:11: c2:46:a5:e9:69:3f:bc:7f:30:06:98:88:98:63:c7: 16:f6:5a:aa:7f:ad:59:cf:c2:0a:cc:ef:9a:b1:aa: 0d:ad:0d:a4:7e:2a:41:40:74:18:1f:19:15:0f:8b: 03:c0:93:77:05:a8:08:c7:92:f8:de:50:d1:75:8f: bc:62:31:e7:df:a7:e0:36:8c:83:30:20:ae:be:6b: cf:31:c5:d4:a7:17:44:c5:c5:81:cf:04:e3:73:72: d6:e0:e8:4d:8d:3d:b9:85:1f:f7:7a:c1:f2:0d:7c: ab:20:b5:95:a0:ec:0e:e9:13:a7:c8:fd:e2:73:ce: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FA:EB:6C:58:13:D4:4B:93:46:4D:63:84:0A:30:6E:A5:D2:4F:6F X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:04:ae:38:ce:a4:b6:64:68:47:6b:b1:bb:ea:8b:ea:f4:45: f4:6a:bb:0a:3e:a8:df:c8:1b:f1:0e:04:f6:a6:ed:00:ba:86: 45:41:51:da:ed:e9:45:58:01:bf:0c:ac:9f:e1:fe:63:ab:8a: 14:86:41:59:82:a5:7c:94:2e:24:c5:f0:a9:11:ec:3c:aa:48: 7a:57:cd:fd:18:45:c0:d6:18:b1:bf:61:ad:25:8a:e1:28:2d: 98:fd:62:c0:e7:bd:b0:88:6a:e0:2f:73:99:77:ca:ba:96:44: a7:7a:55:79:d0:a5:40:58:82:86:46:e7:47:cd:12:70:48:b1: 82:c0:81:9d:c6:23:98:cc:0c:20:48:f0:ab:5d:0b:41:98:1e: de:92:8e:5c:b7:00:da:fc:f3:0c:c9:19:43:72:9d:e5:fc:b8: 87:dc:e6:98:59:23:4b:b3:ff:53:bb:8f:80:2d:3f:e6:15:0c: 2b:75:d8:b2:85:4c:ff:27:ba:19:c9:c2:e7:dd:bb:92:69:0a: d2:f7:99:3a:0b:72:8b:fe:11:ce:f6:45:97:f3:5a:d0:0b:47: 1d:8f:cc:7c:b3:ec:f9:fe:9f:ac:23:94:99:51:b2:12:9b:29: 34:7e:b0:63:6f:92:c3:1a:c3:ed:06:05:f0:86:e9:7d:23:cf: 00:0f:dc:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTI0QjExMC8GA1UEBRMoNDI3OTJDRjQzREZEQjQ4NkFEN0EwN0IxMjNDQjJBNjFB MzNFMjNFMzAeFw0yNDExMjEwNDU1MzdaFw0yNDExMjgwNDU1MzdaMBgxFjAUBgNV BAMTDTY3M2ViZDQ5LTk5YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKHJXckn2UB+OlgNO9uU/G0/rVHfyADnAKLgzgBanSSq/LNsa/j3yA60/Sh1fA WFrHRYUgsWpOH5kwpD7hAkRp6PvmcgQREDKHdE5LqYupMfl65aUI/mZRigR3MwYu y9/kn7tCYPOsnfsUJ6PdZqv8ZQf1/VMEmvrDo41F/KBr1e16nBc4EcJGpelpP7x/ MAaYiJhjxxb2Wqp/rVnPwgrM75qxqg2tDaR+KkFAdBgfGRUPiwPAk3cFqAjHkvje UNF1j7xiMeffp+A2jIMwIK6+a88xxdSnF0TFxYHPBONzctbg6E2NPbmFH/d6wfIN fKsgtZWg7A7pE6fI/eJzzpaTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlfrrbFgT 1EuTRk1jhAowbqXST28wHwYDVR0jBBgwFoAUQnks9D39tIategexI8sqYaM+I+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MjRCL0I1MTAyMkQ2Rjg4 RjExRUU5NzZDMUUyQUM0RjlBRTAyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUkt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5rczlEMzl0SWF0ZWdleEk4c3FZYU0tSS1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MjRCL0I1MTAyMkQ2Rjg4RjExRUU5NzZDMUUyQUM0RjlBRTAyL1Fua3M5RDM5dElh dGVnZXhJOHNxWWFNLUktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANoErjjOpLZkaEdrsbvqi+r0RfRquwo+qN/IG/EOBPam7QC6hkVBUdrt 6UVYAb8MrJ/h/mOrihSGQVmCpXyULiTF8KkR7DyqSHpXzf0YRcDWGLG/Ya0liuEo LZj9YsDnvbCIauAvc5l3yrqWRKd6VXnQpUBYgoZG50fNEnBIsYLAgZ3GI5jMDCBI 8KtdC0GYHt6Sjly3ANr88wzJGUNyneX8uIfc5phZI0uz/1O7j4AtP+YVDCt12LKF TP8nuhnJwufdu5JpCtL3mToLcov+Ec72RZfzWtALRx2PzHyz7Pn+n6wjlJlRshKb KTR+sGNvksMaw+0GBfCG6X0jzwAP3LM= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org