$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft File: RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json) Hash identifier: VJvTaqDLKwUELd4dq1MfbJH/31PCb7NIhMTcstI4fKc= Subject key identifier: 28:5D:A0:2C:77:54:2E:E8:A3:F7:87:6A:91:46:C9:C4:B7:20:86:2E Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 Certificate issuer: /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft Manifest number: 1C87 Signing time: Fri 22 Nov 2024 16:50:51 +0000 Manifest this update: Fri 22 Nov 2024 16:50:50 +0000 Manifest next update: Fri 29 Nov 2024 16:50:50 +0000 Files and hashes: 1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: gM2rh4q642VLA0JF1ya4UzuYQmVnHEmSoBnv9vAlRzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Validity Not Before: Nov 22 16:50:50 2024 GMT Not After : Nov 29 16:50:50 2024 GMT Subject: CN=6740b66b-38f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:39:72:4f:ef:42:81:1d:81:4e:c4:78:61: 2c:54:31:85:fd:7c:5c:e2:20:47:5b:54:58:6c:48: 59:91:24:21:88:81:22:94:df:a6:9b:a8:ae:0f:54: bd:bb:29:bd:a4:ff:f9:c7:04:66:b8:e3:c5:f4:b6: 63:69:0a:5f:6d:14:06:a4:03:70:c8:9d:21:20:4c: 21:e3:7f:85:60:b4:75:55:ae:3a:00:1d:8d:e5:12: 80:45:ed:b3:91:ed:16:94:19:34:9d:2e:ec:eb:0b: a5:a1:0c:3a:c5:79:12:8e:fe:63:28:59:e0:a1:66: cd:0c:2f:a6:cc:31:62:6c:63:4b:5e:27:01:7f:ed: 05:a0:32:03:88:1d:d1:b5:b5:b7:8e:ee:74:8e:b2: 1a:97:d9:8d:d4:a7:d3:96:55:cd:51:3f:c6:96:b0: 1a:6b:9a:59:98:58:eb:47:71:3f:dc:a2:a6:c5:3a: 44:0b:f1:ad:af:3c:2f:c8:c0:b5:92:84:3d:8f:e9: 1a:64:68:e1:0f:b2:80:22:94:40:34:65:27:48:d8: 05:bd:ca:69:81:52:58:5b:6f:79:08:92:b6:20:9f: 83:09:90:d5:a9:14:41:47:ce:5e:fa:8a:6d:3d:a2: 54:0f:bc:40:be:45:8b:43:32:81:3a:35:52:d8:67: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5D:A0:2C:77:54:2E:E8:A3:F7:87:6A:91:46:C9:C4:B7:20:86:2E X509v3 Authority Key Identifier: keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:28:db:22:30:62:c9:69:3e:7c:24:d0:fd:00:81:61:c9:6f: dc:c6:bc:1d:cd:30:ea:50:5d:40:53:17:b0:1a:6f:77:d0:1c: aa:57:d5:86:a4:49:43:db:99:87:95:44:58:88:f9:82:cc:ca: 99:7e:45:28:53:ef:6f:90:f3:bf:81:d9:83:f2:59:c2:26:03: 82:f3:39:4d:98:d0:aa:53:aa:ce:97:ec:2a:23:ac:6d:b4:dd: 92:ac:ce:6e:2a:46:21:7a:6b:e5:f9:f3:da:58:c5:27:b8:ee: 58:30:ec:f8:c0:7f:c7:ec:54:84:0e:1c:63:f3:ce:00:0f:31: db:ff:df:a4:ba:8e:3b:32:bb:85:5a:a9:3c:b0:2c:42:05:d6: 10:33:01:d7:b7:53:8c:54:46:1f:78:de:83:17:ca:72:e3:95: 25:d4:34:8d:d1:ef:3b:74:a0:47:b8:31:ad:d6:ce:d2:66:e3: cb:aa:1d:67:21:f2:17:68:90:83:53:80:2e:4e:07:ac:08:11: 12:1f:5f:40:9a:54:41:53:4b:02:ee:f9:c9:9d:84:26:c0:d1: 89:dc:eb:14:51:1c:cf:d2:72:15:b6:a0:3a:53:29:da:d1:bc: 0b:74:9d:2f:97:0c:22:7c:b1:44:8f:c5:d6:43:5f:4a:99:71: e4:3f:15:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDQ1MDk2ODk5NjZEMzc5Mjc1NjlDRjJDQkI0NEZGRTkz QUNBOEU2ODEwHhcNMjQxMTIyMTY1MDUwWhcNMjQxMTI5MTY1MDUwWjAYMRYwFAYD VQQDEw02NzQwYjY2Yi0zOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GA5ck/vQoEdgU7EeGEsVDGF/Xxc4iBHW1RYbEhZkSQhiIEilN+mm6iuD1S9 uym9pP/5xwRmuOPF9LZjaQpfbRQGpANwyJ0hIEwh43+FYLR1Va46AB2N5RKARe2z ke0WlBk0nS7s6wuloQw6xXkSjv5jKFngoWbNDC+mzDFibGNLXicBf+0FoDIDiB3R tbW3ju50jrIal9mN1KfTllXNUT/GlrAaa5pZmFjrR3E/3KKmxTpEC/GtrzwvyMC1 koQ9j+kaZGjhD7KAIpRANGUnSNgFvcppgVJYW295CJK2IJ+DCZDVqRRBR85e+opt PaJUD7xAvkWLQzKBOjVS2GdPXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChdoCx3 VC7oo/eHapFGycS3IIYuMB8GA1UdIwQYMBaAFEUJaJlm03knVpzyy7RP/pOsqOaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVTZFduUExMdEVfLWs2eW81 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JRbG9tV2JUZVNkV25QTEx0RV8tazZ5bzVvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVT ZFduUExMdEVfLWs2eW81b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClKNsiMGLJaT58JND9AIFhyW/cxrwdzTDqUF1AUxewGm930ByqV9WG pElD25mHlURYiPmCzMqZfkUoU+9vkPO/gdmD8lnCJgOC8zlNmNCqU6rOl+wqI6xt tN2SrM5uKkYhemvl+fPaWMUnuO5YMOz4wH/H7FSEDhxj884ADzHb/9+kuo47MruF Wqk8sCxCBdYQMwHXt1OMVEYfeN6DF8py45Ul1DSN0e87dKBHuDGt1s7SZuPLqh1n IfIXaJCDU4AuTgesCBESH19AmlRBU0sC7vnJnYQmwNGJ3OsUURzP0nIVtqA6Uyna 0bwLdJ0vlwwifLFEj8XWQ19KmXHkPxWx -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org