$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: T6DZH+LUXk1C1gXxXBKOZo9tAj2bkKI1DGC1cjhpkuA= Subject key identifier: C2:C0:27:82:74:70:05:C5:D8:9B:E8:7C:93:D6:79:5B:08:02:A9:CB Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 066D Signing time: Fri 22 Nov 2024 22:35:35 +0000 Manifest this update: Fri 22 Nov 2024 22:35:35 +0000 Manifest next update: Fri 29 Nov 2024 22:35:35 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: iscKkxsJ71t9QcI2DfvQgX/AeroHqoek4hXHIW9YO5k=) 2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: E8TJXB5p3Bk6Mywr/JoQzqnkHpychLbxDlvay8pE/5g=) 3: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: fZ7YbOLBf50vE4wpQNz484RPKx1PFvg+UMgz178wqrg=) 4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=) 5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: HE9hhfjLbpoLmdYRqz2hD2rCJCRDbET7MCnv1VGXqgg=) 6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: L3oo3WwbXDM/suf25S9ZfGKmbEMta5yJxrHpRj7RBoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Nov 22 22:35:35 2024 GMT Not After : Nov 29 22:35:35 2024 GMT Subject: CN=67410737-2d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:a5:bb:f6:4c:12:6e:49:7d:75:46:f0:d3: 7a:d5:84:68:f6:70:21:6a:bd:5c:64:9a:40:a9:06: 9a:92:c4:9e:98:f2:d8:da:6e:80:85:99:66:41:82: a4:2b:8e:81:28:9a:3a:42:9e:d1:46:f0:8d:be:46: 30:99:16:3e:a6:29:e2:b7:88:71:96:7b:be:0f:6f: b9:d6:a7:3f:d2:28:d5:d3:af:cb:92:7e:fa:09:d7: b4:f5:a9:98:8d:81:75:0c:db:53:ba:d1:ec:22:17: 14:d0:03:62:75:1e:30:d7:ae:e1:b1:93:eb:71:50: 8b:f4:e5:35:96:e4:d8:c6:53:f0:49:a6:9d:7c:58: 08:06:e9:f4:c7:51:46:2d:2e:d1:50:f6:7d:7a:07: 7a:4b:a0:76:90:1e:f1:fb:b7:f1:13:c2:bd:5d:23: bd:8f:96:09:40:79:01:fb:f1:27:7a:9f:33:ee:9c: 1d:ec:58:7e:48:bc:f8:33:70:63:cb:cb:fb:09:56: f0:ff:37:3d:f0:b0:14:62:df:52:19:30:13:8a:aa: d0:3f:89:cb:f6:ca:e5:6c:0a:8c:18:fc:7a:65:8b: 42:a2:db:d2:af:9a:f3:d3:1e:01:6a:67:48:f0:5a: 58:6f:64:4e:6c:24:01:f2:f1:76:25:80:d5:ac:c3: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:27:82:74:70:05:C5:D8:9B:E8:7C:93:D6:79:5B:08:02:A9:CB X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ff:41:57:89:6f:91:2e:b1:35:1e:d0:d2:ab:d8:df:d8:6b: c3:5f:b6:f6:35:08:50:80:84:6f:37:0d:f7:22:9c:70:5a:50: 4e:b4:68:ca:f8:67:10:82:fd:e1:55:8c:e4:5f:c0:9f:f1:6a: 43:93:62:48:09:97:9d:7c:cf:b1:63:29:67:8e:ba:63:40:69: 0c:1c:77:e8:06:aa:c1:39:4d:82:dd:be:59:52:c5:63:65:cf: 0f:58:f5:b1:2e:02:d7:e3:97:77:50:f8:61:70:38:d8:d1:a6: 1d:3a:be:84:4f:a7:f0:20:dd:09:de:60:b1:11:40:b8:ad:c2: a2:15:1c:e1:40:c4:42:96:8f:87:d6:8c:8e:c5:4e:d5:b7:5c: 59:12:89:23:f2:25:e6:6b:9c:a8:36:c7:79:8a:27:1f:85:ee: 24:61:b3:3c:0b:6d:63:55:37:98:b6:1c:1e:ee:6a:b0:0d:4b: 6b:7c:9d:45:25:92:46:07:d6:68:f8:50:e0:b5:78:70:53:d4: 35:27:87:71:ba:98:61:a1:00:42:41:f0:1c:96:87:8e:a4:d6: 3d:15:f3:fd:9f:2f:b8:b6:e3:52:4e:35:02:e0:30:32:7e:b6: 56:00:41:c3:82:61:1e:b1:98:25:41:6a:a9:ab:06:e1:22:ec: d9:f9:ba:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQxMTIyMjIzNTM1WhcNMjQxMTI5MjIzNTM1WjAYMRYwFAYD VQQDEw02NzQxMDczNy0yZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a+lu/ZMEm5JfXVG8NN61YRo9nAhar1cZJpAqQaaksSemPLY2m6AhZlmQYKk K46BKJo6Qp7RRvCNvkYwmRY+pinit4hxlnu+D2+51qc/0ijV06/Lkn76Cde09amY jYF1DNtTutHsIhcU0ANidR4w167hsZPrcVCL9OU1luTYxlPwSaadfFgIBun0x1FG LS7RUPZ9egd6S6B2kB7x+7fxE8K9XSO9j5YJQHkB+/Enep8z7pwd7Fh+SLz4M3Bj y8v7CVbw/zc98LAUYt9SGTATiqrQP4nL9srlbAqMGPx6ZYtCotvSr5rz0x4BamdI 8FpYb2RObCQB8vF2JYDVrMOu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLAJ4J0 cAXF2JvofJPWeVsIAqnLMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/0FXiW+RLrE1HtDSq9jf2GvDX7b2NQhQgIRvNw33IpxwWlBOtGjK +GcQgv3hVYzkX8Cf8WpDk2JICZedfM+xYylnjrpjQGkMHHfoBqrBOU2C3b5ZUsVj Zc8PWPWxLgLX45d3UPhhcDjY0aYdOr6ET6fwIN0J3mCxEUC4rcKiFRzhQMRClo+H 1oyOxU7Vt1xZEokj8iXma5yoNsd5iicfhe4kYbM8C21jVTeYthwe7mqwDUtrfJ1F JZJGB9Zo+FDgtXhwU9Q1J4dxuphhoQBCQfAcloeOpNY9FfP9ny+4tuNSTjUC4DAy frZWAEHDgmEesZglQWqpqwbhIuzZ+br0 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org