$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: 95zIxDgP+wX35ZtddLALPKclNepmVEcziJ6px29Rix8= Subject key identifier: 47:49:03:14:BA:FE:97:7B:09:B8:1E:7D:9E:21:9E:C7:AA:D5:B5:C8 Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0C0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0C03 Signing time: Fri 22 Nov 2024 18:18:21 +0000 Manifest this update: Fri 22 Nov 2024 18:18:20 +0000 Manifest next update: Fri 29 Nov 2024 18:18:20 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: vYlkO9Gr4Mg5HgXoPguM0rMIJ/4meHSEJky5V11+pXc=) 2: 0C8538A6FFA411E9BC2B6886C4F9AE02.roa (hash: NEC29ByjsDaKAhJRTSgfmFIrg80vHn1kxIxJlvWTYQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: Nov 22 18:18:20 2024 GMT Not After : Nov 29 18:18:20 2024 GMT Subject: CN=6740caec-ee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:64:ae:d5:de:14:21:fa:05:93:1b:5f:a1: b7:0f:b1:40:02:ae:96:dd:d7:19:aa:bc:ea:c3:f9: 2e:1f:f5:6a:be:fb:76:ff:15:49:3c:c6:13:ce:7f: 72:c2:e0:5a:63:4c:5d:59:5d:2e:8b:e9:10:83:df: 00:6d:3b:bd:15:b1:13:0e:a8:b5:d2:f6:5d:2c:16: 54:f8:fc:6e:56:8c:34:18:f5:9e:4a:1e:2a:b0:9e: e5:f8:d8:65:8c:9c:6b:5d:43:db:93:6f:fa:d5:96: d9:09:75:df:6c:8c:a4:6e:52:6a:89:cb:fb:6e:b7: dd:9e:9e:74:eb:0c:5e:02:ae:0f:ec:d4:8c:22:de: 80:f9:58:ef:fe:49:b0:4a:36:9f:df:ce:d7:81:6a: c9:7f:2b:fb:e6:f7:46:42:50:33:f5:82:80:5b:b5: 48:c9:a0:ae:c9:6f:7f:92:c1:df:a0:81:c2:c0:22: 31:61:ab:42:df:45:a9:a4:d4:8f:c6:13:4f:4c:2c: 1d:3e:78:65:e8:0b:70:5b:a9:63:54:bf:33:a5:b9: 53:d0:dd:f1:b3:3a:10:b5:2d:0f:46:d8:97:a0:8f: b5:f5:57:e9:44:63:3c:c8:a3:89:09:6a:f5:a5:9b: 8e:d3:6f:f0:56:06:c2:c8:c2:1b:27:3a:b0:29:4f: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:49:03:14:BA:FE:97:7B:09:B8:1E:7D:9E:21:9E:C7:AA:D5:B5:C8 X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a1:bd:1b:5d:0c:af:0e:36:df:3e:4c:9a:92:f3:3c:16:98: 5b:4e:09:5c:a3:4b:88:b3:f7:05:ac:bf:a9:8a:b1:c7:f8:ed: a3:38:e6:48:a8:98:c8:e9:7e:9f:06:5f:86:28:00:ac:09:ff: 12:59:3d:6b:08:ba:fb:0c:59:07:4b:89:6b:82:c1:a9:bb:2a: 96:60:25:4c:1e:51:d8:5d:83:33:42:0a:f8:68:25:8a:c7:ef: 38:47:d2:5b:29:20:10:21:d5:e8:42:7e:92:0c:e5:66:c4:1e: ab:06:0d:60:d0:1f:76:1c:dd:6b:18:2f:56:cb:95:85:da:32: 29:b4:ca:69:e4:e9:f6:90:08:f1:b6:9a:7b:99:2c:02:be:ca: f5:35:4c:1b:b4:c0:28:83:75:d2:81:86:2c:e5:99:61:b3:af: da:8a:b6:0a:9c:79:79:7a:e6:b1:b7:32:fa:83:ab:71:87:11: 4a:b7:f0:65:c6:42:a1:4d:7f:dc:ad:8b:05:32:24:03:78:c6: 19:f1:10:01:0b:83:6c:ae:37:ba:87:aa:f6:e1:79:e9:f2:b3: d8:3c:93:59:0a:a1:63:ae:ec:69:13:45:8b:82:fe:1b:a5:ca: 71:f3:c5:ff:de:24:54:67:53:fe:c9:cd:4d:0b:dd:cd:16:4c: a5:70:fb:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjQxMTIyMTgxODIwWhcNMjQxMTI5MTgxODIwWjAYMRYwFAYD VQQDEw02NzQwY2FlYy1lZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5hkrtXeFCH6BZMbX6G3D7FAAq6W3dcZqrzqw/kuH/Vqvvt2/xVJPMYTzn9y wuBaY0xdWV0ui+kQg98AbTu9FbETDqi10vZdLBZU+PxuVow0GPWeSh4qsJ7l+Nhl jJxrXUPbk2/61ZbZCXXfbIykblJqicv7brfdnp506wxeAq4P7NSMIt6A+Vjv/kmw Sjaf387XgWrJfyv75vdGQlAz9YKAW7VIyaCuyW9/ksHfoIHCwCIxYatC30WppNSP xhNPTCwdPnhl6AtwW6ljVL8zpblT0N3xszoQtS0PRtiXoI+19VfpRGM8yKOJCWr1 pZuO02/wVgbCyMIbJzqwKU+lIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdJAxS6 /pd7CbgefZ4hnseq1bXIMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaob0bXQyvDjbfPkyakvM8FphbTglco0uIs/cFrL+pirHH+O2jOOZI qJjI6X6fBl+GKACsCf8SWT1rCLr7DFkHS4lrgsGpuyqWYCVMHlHYXYMzQgr4aCWK x+84R9JbKSAQIdXoQn6SDOVmxB6rBg1g0B92HN1rGC9Wy5WF2jIptMpp5On2kAjx tpp7mSwCvsr1NUwbtMAog3XSgYYs5Zlhs6/airYKnHl5euaxtzL6g6txhxFKt/Bl xkKhTX/crYsFMiQDeMYZ8RABC4Nsrje6h6r24Xnp8rPYPJNZCqFjruxpE0WLgv4b pcpx88X/3iRUZ1P+yc1NC93NFkylcPu3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org