$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: InmWEaEHvA51YhVJeoXDvcVLXGor6UC1bre0VjdX+gI= Subject key identifier: 3E:34:84:68:0A:76:BE:27:FD:93:F2:AF:CA:20:F9:2F:D2:BA:C4:08 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 0670 Signing time: Fri 22 Nov 2024 22:52:30 +0000 Manifest this update: Fri 22 Nov 2024 22:52:30 +0000 Manifest next update: Fri 29 Nov 2024 22:52:30 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: G9kVSeW2APZ6bQfXCLUYV16Ys/B4WK+xklM3jVgil2Q=) 2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: ppWQ47ohPMKp0HyRoR8MmA4QYcSHi56R4OtMRFr3ZMY=) 3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: j9p/vcA9o9VzipBj0MMgcHuMnlUR90tv7MO4kCKow5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: Nov 22 22:52:30 2024 GMT Not After : Nov 29 22:52:30 2024 GMT Subject: CN=67410b2e-71b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:91:f0:22:49:a5:95:93:21:00:9f:15:ce: 81:7d:60:77:6e:83:8d:20:b0:f3:0a:d7:c8:15:81: 91:e5:c8:69:75:d2:b8:a4:cb:9f:a1:99:4c:23:f5: bb:d0:28:8c:72:a2:87:8a:fc:69:2b:a9:9b:bf:de: 9b:d5:a0:bb:8d:6a:7c:9c:41:a0:69:1d:7e:20:64: e4:07:1a:10:96:08:53:25:95:de:db:c1:d8:2c:8b: c4:9b:50:f9:af:6e:5e:fa:79:d3:2c:a3:70:f5:4f: cd:66:d2:7f:66:20:02:79:17:35:53:08:53:8b:57: 1c:b6:6e:f3:aa:1e:93:1c:59:53:bf:c8:7e:66:33: 30:96:2c:24:42:4c:e5:d7:4d:14:21:2c:98:6d:c3: 7a:52:3f:52:fe:67:d8:76:f7:f6:f1:5d:47:77:51: 9b:2e:31:0c:ff:19:79:d3:37:ad:9f:fe:f2:0c:73: d5:7b:c0:50:f7:ad:3c:8f:57:08:9f:5a:f6:47:80: 3a:9c:38:63:7f:6b:5b:f1:8f:06:91:b4:94:12:04: 56:55:e0:99:78:39:81:b9:47:87:85:c8:bb:ad:bc: 4c:6e:ad:8e:3e:8f:25:ff:7b:24:99:6a:c4:50:93: 41:9a:e9:46:64:ce:b8:73:bf:66:00:b1:9e:8d:83: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:84:68:0A:76:BE:27:FD:93:F2:AF:CA:20:F9:2F:D2:BA:C4:08 X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:16:95:9c:2f:21:6f:db:f9:66:53:85:95:c7:9f:87:54:f1: 03:7d:aa:1b:45:cb:82:8c:ac:1e:cb:35:b2:94:e2:d5:68:6b: 76:0b:68:42:26:3e:10:0d:3c:0a:aa:bd:82:71:50:39:fb:ff: b8:7a:0f:04:e4:e7:7b:5b:d2:37:a3:7a:14:3a:3e:bf:7b:2b: f8:f7:53:5a:e8:ca:40:b3:e4:d9:ae:9c:03:dd:43:7d:93:82: f5:a8:21:cc:56:cf:2e:fb:02:4a:07:ee:63:8f:ea:68:f4:df: 82:13:55:a4:75:f8:cb:b3:fd:60:89:4b:92:dd:f7:12:3c:66: 06:69:13:d8:9b:fd:cd:0e:e1:ae:f3:9f:aa:8e:21:d9:62:43: d3:35:ed:0b:eb:56:58:2a:b4:dd:98:b6:f2:eb:37:6d:ed:8c: a9:49:de:d9:00:e5:3a:8a:21:39:47:ae:ef:fd:38:3f:ec:d7: 78:eb:9f:20:94:8e:9d:80:9d:9f:3f:e9:4b:3d:f4:ad:2d:54: b6:69:55:d2:9c:8d:84:d4:59:6a:af:b9:f1:1f:e3:06:28:90: ee:de:53:b0:58:f5:0a:89:59:fb:e4:d3:1f:02:df:9e:fe:7f: 31:ba:05:39:bd:07:19:6d:33:38:5e:0f:f1:c7:16:b2:6c:e6: 70:32:9b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjQxMTIyMjI1MjMwWhcNMjQxMTI5MjI1MjMwWjAYMRYwFAYD VQQDEw02NzQxMGIyZS03MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+mR8CJJpZWTIQCfFc6BfWB3boONILDzCtfIFYGR5chpddK4pMufoZlMI/W7 0CiMcqKHivxpK6mbv96b1aC7jWp8nEGgaR1+IGTkBxoQlghTJZXe28HYLIvEm1D5 r25e+nnTLKNw9U/NZtJ/ZiACeRc1UwhTi1cctm7zqh6THFlTv8h+ZjMwliwkQkzl 100UISyYbcN6Uj9S/mfYdvf28V1Hd1GbLjEM/xl50zetn/7yDHPVe8BQ9608j1cI n1r2R4A6nDhjf2tb8Y8GkbSUEgRWVeCZeDmBuUeHhci7rbxMbq2OPo8l/3skmWrE UJNBmulGZM64c79mALGejYOMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD40hGgK dr4n/ZPyr8og+S/SusQIMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8FpWcLyFv2/lmU4WVx5+HVPEDfaobRcuCjKweyzWylOLVaGt2C2hC Jj4QDTwKqr2CcVA5+/+4eg8E5Od7W9I3o3oUOj6/eyv491Na6MpAs+TZrpwD3UN9 k4L1qCHMVs8u+wJKB+5jj+po9N+CE1WkdfjLs/1giUuS3fcSPGYGaRPYm/3NDuGu 85+qjiHZYkPTNe0L61ZYKrTdmLby6zdt7YypSd7ZAOU6iiE5R67v/Tg/7Nd4658g lI6dgJ2fP+lLPfStLVS2aVXSnI2E1Flqr7nxH+MGKJDu3lOwWPUKiVn75NMfAt+e /n8xugU5vQcZbTM4Xg/xxxaybOZwMpvI -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org