$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: 94uJ0ZcTHg/uVw9sWWfF72Dob/1cIXX49QFBunrpc8s= Subject key identifier: A6:7C:D0:2B:A0:CA:FE:52:7E:71:7C:1F:32:01:44:84:7E:74:B5:95 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 01C4 Signing time: Sat 23 Nov 2024 01:46:44 +0000 Manifest this update: Sat 23 Nov 2024 01:46:44 +0000 Manifest next update: Sat 30 Nov 2024 01:46:44 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: CznHO9n6sHfKNS27xzk9wLzoySRhZ1Evnwqj1ZQLUMQ=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Nov 23 01:46:44 2024 GMT Not After : Nov 30 01:46:44 2024 GMT Subject: CN=67413404-58e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:67:ac:d2:53:97:8e:95:3a:c7:0d:cb:0c: a8:b1:e0:2d:88:97:37:49:64:db:c5:94:15:0e:72: e0:e9:c1:de:05:fa:17:22:ad:20:49:bd:92:1b:84: 74:55:7c:de:e4:5b:36:f7:68:c9:4d:72:49:22:9e: 36:d3:4f:35:fb:52:0c:22:aa:ee:c2:74:d3:f9:e6: 9c:a0:68:6e:f4:b3:eb:9c:92:5d:6e:7b:eb:3c:14: fa:14:8b:d0:ed:db:08:fd:61:b1:17:01:02:85:e1: 45:df:7f:0e:33:f2:c7:48:6f:11:05:f0:54:ec:a6: 53:51:38:26:d5:45:9e:b6:e6:69:29:f0:ac:d4:df: 5c:50:40:c6:bb:e2:74:7c:48:57:ed:76:07:27:fa: 96:32:ee:c8:90:bd:b2:30:c2:70:ad:aa:04:1f:bc: 1c:55:b3:8c:af:b1:9b:e7:74:58:ba:b6:95:e9:9a: 76:b5:8e:7a:f7:64:2e:5a:59:8c:00:c4:86:ab:51: 78:b9:df:e4:54:20:e3:c3:bb:b1:44:48:84:bb:96: 2c:e9:f5:d5:6a:e0:46:db:fb:6d:5c:77:26:14:65: 1f:c2:03:72:9a:6b:85:d2:26:ed:78:2f:02:b3:79: aa:cb:ca:5d:95:91:c7:c4:87:75:25:06:25:a7:3c: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7C:D0:2B:A0:CA:FE:52:7E:71:7C:1F:32:01:44:84:7E:74:B5:95 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:84:51:d0:f5:bd:2c:e1:34:50:11:e0:da:68:dd:38:03:07: 87:5a:1b:78:e5:59:87:74:b3:c7:33:43:ac:22:a1:f2:e1:5e: 2c:bd:8b:79:7d:b5:1b:62:de:e2:82:0e:9c:e2:8f:7d:33:80: de:bc:e9:d4:a2:e3:30:ad:f7:16:87:5d:d0:16:7c:69:a7:bd: 51:35:ab:63:12:8f:4d:c3:57:48:f3:84:24:da:c3:1a:dd:37: 10:6d:42:86:80:5a:78:2e:d4:cb:b6:fb:70:0e:2b:f1:00:34: 38:d2:f8:26:c8:37:f1:b0:b9:69:d8:49:2b:70:c5:c8:23:ab: 9e:c2:a0:08:6f:a8:4d:06:f1:f5:e0:21:ec:10:e0:2d:7e:fe: 3c:ea:c1:ed:3d:27:d3:4f:ad:33:44:b0:c0:e2:6b:af:7d:e0: 1e:f4:06:53:74:6e:02:29:f3:6a:ec:79:92:e5:23:f7:01:a4: 73:fb:2a:87:8d:b9:8e:15:b6:ad:22:eb:5b:b5:98:48:2e:f5: b3:df:0e:ae:ba:ce:ec:0d:44:4c:62:af:88:cf:d3:67:18:ed: 5c:91:1b:64:12:4e:53:fc:70:58:ac:4f:fd:df:52:01:03:e0: 01:2a:32:2f:0e:8d:df:cc:e0:c2:c7:14:77:54:00:61:54:73: 32:ef:08:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjQxMTIzMDE0NjQ0WhcNMjQxMTMwMDE0NjQ0WjAYMRYwFAYD VQQDEw02NzQxMzQwNC01OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2JnrNJTl46VOscNywyoseAtiJc3SWTbxZQVDnLg6cHeBfoXIq0gSb2SG4R0 VXze5Fs292jJTXJJIp420081+1IMIqruwnTT+eacoGhu9LPrnJJdbnvrPBT6FIvQ 7dsI/WGxFwECheFF338OM/LHSG8RBfBU7KZTUTgm1UWetuZpKfCs1N9cUEDGu+J0 fEhX7XYHJ/qWMu7IkL2yMMJwraoEH7wcVbOMr7Gb53RYuraV6Zp2tY5692QuWlmM AMSGq1F4ud/kVCDjw7uxREiEu5Ys6fXVauBG2/ttXHcmFGUfwgNymmuF0ibteC8C s3mqy8pdlZHHxId1JQYlpzx0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ80Cug yv5SfnF8HzIBRIR+dLWVMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADhFHQ9b0s4TRQEeDaaN04AweHWht45VmHdLPHM0OsIqHy4V4svYt5 fbUbYt7igg6c4o99M4DevOnUouMwrfcWh13QFnxpp71RNatjEo9Nw1dI84Qk2sMa 3TcQbUKGgFp4LtTLtvtwDivxADQ40vgmyDfxsLlp2EkrcMXII6uewqAIb6hNBvH1 4CHsEOAtfv486sHtPSfTT60zRLDA4muvfeAe9AZTdG4CKfNq7HmS5SP3AaRz+yqH jbmOFbatIutbtZhILvWz3w6uus7sDURMYq+Iz9NnGO1ckRtkEk5T/HBYrE/931IB A+ABKjIvDo3fzODCxxR3VABhVHMy7wj/ -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org