$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: nJwnJy+d9E8dw9xHb+EmQRu7zkOH+qzP1Gu47Yl5xWk= Subject key identifier: 66:D5:FA:79:52:A9:47:75:F1:07:DD:32:88:23:D9:E7:2C:15:9A:BC Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2D95 Signing time: Sun 24 Nov 2024 15:26:12 +0000 Manifest this update: Sun 24 Nov 2024 15:26:11 +0000 Manifest next update: Sun 01 Dec 2024 15:26:11 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: G9i8uyxkrs1WMnEKS96vRkddSPG4rKI1BMx4jCNGM4w=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: 4qg1E+TnIoenTzgBqqm/HlPUXooGymJJP0y02zxoY1Q=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: 2dhOoogqsGMcb3UWzSv3/UObiADQhWvZAnQF3lZBRxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11680 (0x2da0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Nov 24 15:26:11 2024 GMT Not After : Dec 1 15:26:11 2024 GMT Subject: CN=67434594-e230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:42:c1:57:11:42:c8:cf:ce:2e:cd:2f:e5: f8:6e:23:d8:77:1b:06:30:5f:c2:4b:64:1c:a5:d7: 34:91:36:09:58:c8:70:5b:22:6f:2e:70:ed:18:1c: 4c:14:cd:d9:79:66:ad:72:e5:c5:30:9e:81:44:40: d9:f6:47:39:b3:cd:4d:03:31:e2:e9:8b:68:2a:13: d7:1a:b0:c3:95:d3:31:1f:b9:f7:b0:77:43:6f:b9: bc:29:3e:e6:8c:b4:b1:52:9c:1b:25:91:b6:77:0c: d4:24:2e:d1:f6:cc:40:3d:21:71:e3:9d:26:b4:62: 63:1b:c4:06:2b:ca:ec:97:30:f6:df:d2:1c:24:19: dd:60:d6:1a:e5:da:9a:a6:41:fd:f5:92:54:f3:97: 30:fe:38:78:a1:f6:9c:d2:3f:7a:2f:93:86:e0:77: 9b:ba:c8:73:29:73:31:da:4b:5e:62:fd:3d:97:1e: 70:47:80:4c:e0:3b:b7:15:96:57:3e:ca:36:8f:bf: 68:e7:a5:f3:71:38:4d:19:eb:a6:ac:2a:8f:67:00: 74:d8:67:f6:c1:4c:5d:4b:53:8d:7e:2f:bd:e3:a0: 8b:e9:a9:e7:06:93:cd:13:1c:85:59:e5:31:f7:22: 71:7a:73:ab:42:1f:26:3b:e2:37:1a:20:69:b6:94: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D5:FA:79:52:A9:47:75:F1:07:DD:32:88:23:D9:E7:2C:15:9A:BC X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:29:54:03:a7:2e:98:3a:f0:ab:29:dd:e9:04:df:c6:93:43: 9d:61:81:04:8c:43:cf:2f:9b:80:5e:5e:63:11:a1:ed:34:30: 4e:ec:c1:6e:54:63:a8:9a:aa:d0:36:32:d9:d0:b7:27:a5:af: 9e:82:2b:6f:41:ee:d0:40:95:dd:98:96:da:a3:fa:8c:b5:89: d0:73:e9:93:1a:86:0e:79:49:a0:8b:99:59:bc:6f:e3:1c:2d: 1a:12:12:09:b9:b7:78:49:fa:44:c6:c0:f0:d6:6b:de:45:5d: 60:86:45:3f:e0:0a:8f:f4:5d:0f:b2:72:ae:33:6e:96:0a:39: 19:74:3c:5c:16:a8:ee:82:60:5a:b9:59:a2:f6:2f:c2:1b:08: 60:aa:25:fb:e5:83:58:6b:83:28:f9:23:15:62:c2:26:17:f3: 83:e1:f3:ef:1a:fa:4a:fd:56:ba:de:51:84:c6:e8:96:26:d6: 7d:c0:90:0f:a5:e6:47:55:45:6f:d9:31:4f:85:34:f4:fc:46: 74:d4:26:1f:cb:d6:fb:3c:7e:d2:ab:b7:6c:06:00:78:48:ac: 54:5b:b5:b3:6e:cd:d4:7e:8b:18:ff:94:b0:fc:5f:6d:c2:40: 0b:20:bf:39:d1:21:1c:f3:ed:4b:6f:c7:48:33:c2:b1:64:4e: fa:b4:29:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjQxMTI0MTUyNjExWhcNMjQxMjAxMTUyNjExWjAYMRYwFAYD VQQDEw02NzQzNDU5NC1lMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbtCwVcRQsjPzi7NL+X4biPYdxsGMF/CS2Qcpdc0kTYJWMhwWyJvLnDtGBxM FM3ZeWatcuXFMJ6BREDZ9kc5s81NAzHi6YtoKhPXGrDDldMxH7n3sHdDb7m8KT7m jLSxUpwbJZG2dwzUJC7R9sxAPSFx450mtGJjG8QGK8rslzD239IcJBndYNYa5dqa pkH99ZJU85cw/jh4ofac0j96L5OG4HebushzKXMx2kteYv09lx5wR4BM4Du3FZZX Pso2j79o56XzcThNGeumrCqPZwB02Gf2wUxdS1ONfi+946CL6annBpPNExyFWeUx 9yJxenOrQh8mO+I3GiBptpRDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbV+nlS qUd18QfdMogj2ecsFZq8MB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiKVQDpy6YOvCrKd3pBN/Gk0OdYYEEjEPPL5uAXl5jEaHtNDBO7MFu VGOomqrQNjLZ0Lcnpa+egitvQe7QQJXdmJbao/qMtYnQc+mTGoYOeUmgi5lZvG/j HC0aEhIJubd4SfpExsDw1mveRV1ghkU/4AqP9F0PsnKuM26WCjkZdDxcFqjugmBa uVmi9i/CGwhgqiX75YNYa4Mo+SMVYsImF/OD4fPvGvpK/Va63lGExuiWJtZ9wJAP peZHVUVv2TFPhTT0/EZ01CYfy9b7PH7Sq7dsBgB4SKxUW7Wzbs3UfosY/5Sw/F9t wkALIL850SEc8+1Lb8dIM8KxZE76tCkw -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:12 2024 by rpki-client on console-ams.rpki-client.org