$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: VptJgu501fFkjkEcGsRFvoRoEHg/kVOkIN4NUYlYXvM= Subject key identifier: 65:FF:32:06:A1:3B:93:4C:C2:AE:29:FC:19:B8:60:D7:8B:7F:DF:39 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 02E9 Signing time: Sat 23 Nov 2024 00:52:20 +0000 Manifest this update: Sat 23 Nov 2024 00:52:19 +0000 Manifest next update: Sat 30 Nov 2024 00:52:19 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: P9M2Da3ht7+rCVfai/GaAIqxIJ3N/INHlBWVrv1HZ3E=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: BTLl2ZQykfG+tipQAUgtzvqp3DpDHeGIHhFJsSIVOWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Nov 23 00:52:19 2024 GMT Not After : Nov 30 00:52:19 2024 GMT Subject: CN=67412744-ab57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:36:23:19:39:76:02:84:44:0c:bd:d9:82: e2:93:f1:00:e5:70:fb:60:27:5e:de:71:86:75:99: 42:07:41:8a:86:ce:63:b2:f0:6f:5d:b1:3e:f5:e8: 3a:c8:76:a5:7a:83:da:a7:54:e0:ad:7a:1e:07:7e: cc:0d:05:e4:3a:0a:69:e8:60:1d:67:aa:33:7d:1d: 82:7c:56:32:9a:7c:9b:1a:8f:b3:57:2e:31:a6:d2: 65:51:20:2b:bc:33:fb:de:fd:e7:fe:3e:38:8b:e2: 89:bd:06:26:54:7c:8a:1f:ba:dd:88:fd:54:4c:34: 5d:ce:83:85:1f:92:d6:05:4f:19:9b:90:2f:6d:f3: 73:d2:4e:16:c8:8d:13:17:92:72:29:e4:e8:80:be: 29:26:c3:43:0a:1a:90:56:80:71:54:94:6d:92:a5: a0:72:6c:12:d1:44:50:83:8b:ae:c7:03:ce:87:cd: 7d:3d:6d:c9:4d:a9:6f:25:25:11:df:fc:bf:8f:16: 34:66:2c:4e:9e:7a:75:55:a9:76:6f:60:5d:5f:fc: b5:63:d0:a7:c4:a1:ad:83:b0:7f:75:e8:1e:59:d0: 36:98:b1:3e:d1:e1:07:de:4c:8b:56:92:44:d1:0e: 52:d3:84:b9:29:a7:4b:d7:38:c0:4b:8c:20:45:42: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:32:06:A1:3B:93:4C:C2:AE:29:FC:19:B8:60:D7:8B:7F:DF:39 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:f4:dd:62:4a:83:8b:d6:ff:97:97:24:6d:d6:24:dc:86: 0f:47:b3:cb:4f:d5:05:ef:1b:1f:22:15:f4:cb:d1:21:ae:3c: ad:60:2a:72:df:6d:8c:5e:cf:98:f3:e5:d6:1a:05:eb:a0:82: 4f:db:f4:cf:19:7c:bc:48:4a:6d:f5:0c:e0:59:4f:53:90:e6: 6a:7a:9e:c1:e1:2b:8d:0a:05:79:03:34:51:0c:98:7d:d6:5c: de:e3:35:71:6b:21:17:9b:ea:97:b5:c4:06:e2:98:fe:c8:e0: f2:ec:da:11:35:fa:df:0b:9f:13:43:68:07:e1:07:e9:9e:ff: bc:bb:d5:66:b4:e0:22:2d:0e:31:75:dd:3b:41:27:c5:f6:33: 2b:65:0b:81:ca:63:fe:c1:93:b5:dc:7a:6b:6d:c4:0e:35:f5: 24:13:bd:a0:e9:51:6d:ca:fb:6c:ee:0a:16:3e:f8:25:56:50: bb:84:f5:bf:24:09:8e:0a:b3:e3:73:72:c5:23:45:49:ee:7b: 0d:de:46:d9:7b:b3:1f:8e:b8:bb:6d:93:4f:cc:72:9c:7f:99: a0:8a:2a:4d:94:b5:15:a5:07:a3:2a:55:78:16:96:42:23:99: 1b:7f:20:cd:26:f6:7f:8c:f8:73:ad:7a:8b:91:7b:ec:55:f0: a9:63:af:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjQxMTIzMDA1MjE5WhcNMjQxMTMwMDA1MjE5WjAYMRYwFAYD VQQDEw02NzQxMjc0NC1hYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1482Ixk5dgKERAy92YLik/EA5XD7YCde3nGGdZlCB0GKhs5jsvBvXbE+9eg6 yHaleoPap1TgrXoeB37MDQXkOgpp6GAdZ6ozfR2CfFYymnybGo+zVy4xptJlUSAr vDP73v3n/j44i+KJvQYmVHyKH7rdiP1UTDRdzoOFH5LWBU8Zm5AvbfNz0k4WyI0T F5JyKeTogL4pJsNDChqQVoBxVJRtkqWgcmwS0URQg4uuxwPOh819PW3JTalvJSUR 3/y/jxY0ZixOnnp1Val2b2BdX/y1Y9CnxKGtg7B/degeWdA2mLE+0eEH3kyLVpJE 0Q5S04S5KadL1zjAS4wgRUJokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX/Mgah O5NMwq4p/Bm4YNeLf985MB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6fTdYkqDi9b/l5ckbdYk3IYPR7PLT9UF7xsfIhX0y9EhrjytYCpy 322MXs+Y8+XWGgXroIJP2/TPGXy8SEpt9QzgWU9TkOZqep7B4SuNCgV5AzRRDJh9 1lze4zVxayEXm+qXtcQG4pj+yODy7NoRNfrfC58TQ2gH4Qfpnv+8u9VmtOAiLQ4x dd07QSfF9jMrZQuBymP+wZO13HprbcQONfUkE72g6VFtyvts7goWPvglVlC7hPW/ JAmOCrPjc3LFI0VJ7nsN3kbZe7Mfjri7bZNPzHKcf5mgiipNlLUVpQejKlV4FpZC I5kbfyDNJvZ/jPhzrXqLkXvsVfCpY6/O -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org