$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: 2MsxhVB7LjhZ3GdFHymrXyCRvXo9SnUqkNGKFZ4ranM= Subject key identifier: 13:73:1B:F9:EA:D3:92:84:F0:A3:CF:BF:09:5D:0B:57:0E:43:5C:30 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1A42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1A2F Signing time: Sun 24 Nov 2024 15:35:38 +0000 Manifest this update: Sun 24 Nov 2024 15:35:37 +0000 Manifest next update: Sun 01 Dec 2024 15:35:37 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: 9Rio+4A4TBWq4IVkjObXq1TXqnxQYCZXSJV1cxasw90=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: uUlOQpzZO3P5eVMM621nQ4qWEKEyn8v2Q1jC2RCuf4E=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: InP2ZGCygpqo7jQ5/iXnWywhtU95neHUOm+r+LrIH0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6722 (0x1a42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Nov 24 15:35:37 2024 GMT Not After : Dec 1 15:35:37 2024 GMT Subject: CN=674347c9-5ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:f2:1f:5f:89:32:f7:01:bd:2e:7a:a4:a9: 7c:a3:aa:dd:ae:02:fa:0a:88:6c:51:0d:c4:89:54: 7d:45:eb:92:47:0c:50:5a:d3:a1:f4:96:6b:c9:5c: a8:e6:5a:d3:20:e5:a0:fe:27:65:c4:03:2e:6c:9e: 78:f7:ba:70:e4:6b:47:e8:65:cf:2b:79:b1:2f:01: f9:4d:85:89:7e:fb:93:62:f2:7b:28:5b:f6:c2:15: 20:a8:7c:de:42:12:09:48:e4:86:7c:61:42:71:e2: 6c:b2:80:23:87:a2:76:53:75:28:38:08:13:6d:53: c2:95:1d:96:67:e8:80:09:d9:42:cc:57:c4:9c:8d: 94:30:40:ac:0d:e4:9f:a3:05:7d:f7:1b:73:c0:1d: bb:f3:1b:50:62:7e:6e:58:cc:f3:d5:2a:7b:e2:62: 6b:b8:5b:f5:e3:ac:19:45:69:e4:31:e9:00:7d:d9: 69:16:e7:48:27:ef:38:7b:45:d0:34:95:6d:e2:03: 2f:08:b1:45:ac:ed:40:15:74:8c:a9:bf:ca:fc:b8: 55:bd:2a:76:93:5e:b2:25:03:be:38:58:4d:af:cb: df:13:14:e2:c0:58:db:12:4b:f0:0f:e4:8f:68:e1: 0c:9c:1c:7d:d6:57:67:72:16:89:7b:15:03:01:fd: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:1B:F9:EA:D3:92:84:F0:A3:CF:BF:09:5D:0B:57:0E:43:5C:30 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:59:28:59:8b:88:4c:e0:c9:18:64:6d:71:d3:62:3b:45:f3: 93:22:13:8d:3f:11:e3:0a:82:26:76:9d:1d:24:a8:3a:1d:59: ee:45:3b:41:36:9e:95:81:ad:8d:7f:86:6f:d3:af:04:d8:96: 0c:7c:08:c3:4a:42:bb:98:3d:ee:cd:8f:00:93:98:b5:12:fc: 5a:63:ea:72:ce:02:6a:33:0c:81:03:20:ee:54:48:cd:dd:a2: c9:72:f3:eb:89:51:98:ae:d0:83:d2:66:fe:15:4d:9d:f5:c4: ff:82:b7:e0:e1:ba:58:c5:19:26:dd:f3:73:d8:18:eb:c1:c1: 6e:87:4b:47:07:a7:4d:ae:21:b7:32:f2:70:fb:43:7d:00:ff: 4a:eb:43:48:7e:5c:20:80:d5:40:c5:46:03:9b:11:77:d4:eb: 3f:b3:cb:37:18:0b:37:ae:a5:1f:95:8c:64:36:06:18:b3:03: 4c:a8:9e:74:11:3f:7e:d5:3c:93:8d:a9:2f:fb:f3:ea:4a:9a: e2:0b:de:ea:74:83:1c:03:aa:3b:17:5b:a5:2c:25:40:2d:c5: 38:a4:44:ee:9d:4e:92:04:45:10:36:b0:07:23:76:9c:cc:c1: 5b:40:6c:a5:cb:c0:1e:d8:7a:62:ae:d4:7c:8e:a0:bd:7b:bc: bb:fb:b5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjQxMTI0MTUzNTM3WhcNMjQxMjAxMTUzNTM3WjAYMRYwFAYD VQQDEw02NzQzNDdjOS01YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I/yH1+JMvcBvS56pKl8o6rdrgL6CohsUQ3EiVR9ReuSRwxQWtOh9JZryVyo 5lrTIOWg/idlxAMubJ5497pw5GtH6GXPK3mxLwH5TYWJfvuTYvJ7KFv2whUgqHze QhIJSOSGfGFCceJssoAjh6J2U3UoOAgTbVPClR2WZ+iACdlCzFfEnI2UMECsDeSf owV99xtzwB278xtQYn5uWMzz1Sp74mJruFv146wZRWnkMekAfdlpFudIJ+84e0XQ NJVt4gMvCLFFrO1AFXSMqb/K/LhVvSp2k16yJQO+OFhNr8vfExTiwFjbEkvwD+SP aOEMnBx91ldnchaJexUDAf3tOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNzG/nq 05KE8KPPvwldC1cOQ1wwMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADWShZi4hM4MkYZG1x02I7RfOTIhONPxHjCoImdp0dJKg6HVnuRTtB Np6Vga2Nf4Zv068E2JYMfAjDSkK7mD3uzY8Ak5i1EvxaY+pyzgJqMwyBAyDuVEjN 3aLJcvPriVGYrtCD0mb+FU2d9cT/grfg4bpYxRkm3fNz2BjrwcFuh0tHB6dNriG3 MvJw+0N9AP9K60NIflwggNVAxUYDmxF31Os/s8s3GAs3rqUflYxkNgYYswNMqJ50 ET9+1TyTjakv+/PqSpriC97qdIMcA6o7F1ulLCVALcU4pETunU6SBEUQNrAHI3ac zMFbQGyly8Ae2HpirtR8jqC9e7y7+7Xc -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:11 2024 by rpki-client on console-ams.rpki-client.org