$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: GjMj50fIPRJk30qTxcIdBMgxXEVttUq4+L3Vg6TQnFw= Subject key identifier: 7C:1E:DA:4B:C7:23:6E:79:33:AF:BD:91:EC:8C:FB:9F:5E:74:28:D3 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: A8 Signing time: Thu 21 Nov 2024 04:18:52 +0000 Manifest this update: Thu 21 Nov 2024 04:18:51 +0000 Manifest next update: Thu 28 Nov 2024 04:18:51 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: BiY5UzxDMuYiVtYGtYQncvKV9mg5841aW842S6TiCEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Nov 21 04:18:51 2024 GMT Not After : Nov 28 04:18:51 2024 GMT Subject: CN=673eb4ac-1709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:93:f8:c6:02:64:a4:86:f8:56:6f:70:ec: 85:4d:f2:0f:b0:f8:92:a2:3a:1b:29:47:28:84:42: 9b:c5:1b:55:16:d8:23:78:66:3d:77:1b:63:26:bd: 6e:29:27:e0:d4:fe:55:61:77:c1:8d:7e:d5:c5:94: e4:db:26:2b:1d:a3:54:71:dc:94:dc:d8:76:5d:23: 83:79:9b:e7:87:34:7a:fc:88:26:ee:9c:14:dd:d7: 04:a5:e3:3b:bf:6e:9d:93:b4:3d:ea:c9:eb:c9:46: 87:2d:cd:11:bf:fb:69:15:dd:76:a3:ad:f8:59:96: 9c:38:3c:3d:8e:e2:26:3e:a5:1d:2f:f3:16:ac:b4: b1:64:88:d4:5a:ff:db:39:9a:f6:7f:49:2b:21:62: 4c:af:83:25:b4:fc:cd:ac:1b:d3:6d:6a:8e:ab:3c: 7c:b9:28:92:ac:9d:bb:19:4e:f0:82:b4:04:c9:cc: b5:0c:40:53:65:a6:10:8a:64:3f:06:7f:64:3b:cf: 4c:03:f1:56:9d:6c:fa:de:e4:17:02:33:78:d4:7b: 23:5f:94:d0:2c:27:ba:e1:03:ac:c8:49:20:13:c1: 72:11:8d:6e:14:da:79:a2:53:56:4f:7e:27:60:8e: bc:0e:79:5b:92:bd:e9:c6:0f:61:8e:fa:9d:f9:ae: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:DA:4B:C7:23:6E:79:33:AF:BD:91:EC:8C:FB:9F:5E:74:28:D3 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:30:83:1a:18:c6:01:02:d5:2b:99:03:34:df:f9:6c:1e:07: 8d:2f:76:a7:a7:1e:30:4d:2e:1b:d1:fd:fa:5e:b3:86:2f:3b: 80:39:d9:b7:43:9a:88:58:fd:51:12:14:aa:80:ea:3b:23:71: b4:f9:0c:88:da:28:63:f2:a6:eb:b3:37:79:70:ee:af:32:f1: bc:22:63:ef:fe:94:5e:86:72:4f:14:08:db:50:06:79:5a:cd: 1d:82:0f:5b:b4:3b:5f:18:21:bd:a9:2b:04:91:fc:a7:c1:cc: 3c:ac:87:3c:66:ad:66:f8:2a:4d:ac:57:be:c2:f9:90:c4:b1: 24:27:b0:ac:3d:db:95:cb:70:f5:3e:99:48:6c:4b:16:44:51: 30:71:c6:7e:26:82:06:54:25:b3:d0:8f:38:7d:84:34:57:94: ed:98:91:a5:8d:6d:43:64:ec:71:a1:62:e1:05:7c:ad:2e:c0: a6:5a:68:76:fa:60:00:06:50:c9:7e:2c:eb:fa:50:eb:f5:01: 37:cf:1b:32:8e:13:ac:b1:7a:4a:eb:f8:f0:26:b3:c1:35:04: ad:0d:cb:df:f3:c9:34:86:95:a4:d3:78:b8:9b:5a:d3:12:85: a8:ea:a8:c8:a5:16:00:83:6c:69:6f:bf:df:21:a2:cc:25:c6: 7e:37:22:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjQxMTIxMDQxODUxWhcNMjQxMTI4MDQxODUxWjAYMRYwFAYD VQQDEw02NzNlYjRhYy0xNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hWT+MYCZKSG+FZvcOyFTfIPsPiSojobKUcohEKbxRtVFtgjeGY9dxtjJr1u KSfg1P5VYXfBjX7VxZTk2yYrHaNUcdyU3Nh2XSODeZvnhzR6/Igm7pwU3dcEpeM7 v26dk7Q96snryUaHLc0Rv/tpFd12o634WZacODw9juImPqUdL/MWrLSxZIjUWv/b OZr2f0krIWJMr4MltPzNrBvTbWqOqzx8uSiSrJ27GU7wgrQEycy1DEBTZaYQimQ/ Bn9kO89MA/FWnWz63uQXAjN41HsjX5TQLCe64QOsyEkgE8FyEY1uFNp5olNWT34n YI68Dnlbkr3pxg9hjvqd+a5t5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwe2kvH I255M6+9keyM+59edCjTMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyMIMaGMYBAtUrmQM03/lsHgeNL3anpx4wTS4b0f36XrOGLzuAOdm3 Q5qIWP1REhSqgOo7I3G0+QyI2ihj8qbrszd5cO6vMvG8ImPv/pRehnJPFAjbUAZ5 Ws0dgg9btDtfGCG9qSsEkfynwcw8rIc8Zq1m+CpNrFe+wvmQxLEkJ7CsPduVy3D1 PplIbEsWRFEwccZ+JoIGVCWz0I84fYQ0V5TtmJGljW1DZOxxoWLhBXytLsCmWmh2 +mAABlDJfizr+lDr9QE3zxsyjhOssXpK6/jwJrPBNQStDcvf88k0hpWk03i4m1rT EoWo6qjIpRYAg2xpb7/fIaLMJcZ+NyLm -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org