$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: m/T87DWj747Bm5uTcr4S5WjUjGUvzLtbZqX9DC01HPA= Subject key identifier: 3E:5A:F8:03:A9:6C:D4:2A:42:5D:22:F9:DE:42:25:9F:A2:AA:A8:79 Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: 30 Signing time: Thu 19 Sep 2024 05:56:58 +0000 Manifest this update: Thu 19 Sep 2024 05:56:58 +0000 Manifest next update: Thu 26 Sep 2024 05:56:58 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: cYXK/qftQW5ANSiXD1TWT4b3NZLuFqYsHQksL63M99Q=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Sep 19 05:56:58 2024 GMT Not After : Sep 26 05:56:58 2024 GMT Subject: CN=66ebbd2a-c52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:34:18:a8:fd:6f:ca:32:0c:20:a4:30:37: e0:f6:6f:c6:f6:1b:66:9b:d4:75:7a:de:c9:02:04: c0:e9:bb:89:31:4e:57:90:86:e0:73:71:20:3d:83: 4b:13:0d:30:8e:8a:2f:0c:a3:fb:9b:5b:16:52:69: c0:69:1b:3e:e8:91:16:55:f2:59:d4:47:74:84:c4: 00:5c:d5:fc:13:46:26:6f:30:7b:ae:69:0f:a1:69: 55:41:f0:a9:cd:64:fc:4e:bb:cc:31:0a:a6:e7:d3: 86:06:5e:48:ec:89:f4:c5:99:cd:6c:62:f7:79:0a: 99:68:b3:54:79:50:e4:64:1e:9d:14:8d:c2:29:a9: 3b:3c:50:2a:bb:3d:18:fa:00:78:44:1f:eb:b7:f0: fe:8c:7f:73:4b:dc:7b:6a:12:8e:11:6b:1c:95:df: b0:84:f5:c8:2b:04:34:8a:ff:01:b5:65:93:6c:7a: f0:74:e2:d8:07:37:a9:14:67:83:20:c6:00:5f:bf: b5:03:05:ed:54:49:fb:3a:77:f7:9b:ce:22:10:04: 11:3e:d0:31:92:7b:71:91:77:4d:ea:9c:31:63:cf: 57:68:62:a1:74:0a:d7:13:bd:d5:e1:3b:d4:99:ca: e0:35:e2:f6:7d:14:1e:1c:6a:a1:6a:0c:4b:82:45: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5A:F8:03:A9:6C:D4:2A:42:5D:22:F9:DE:42:25:9F:A2:AA:A8:79 X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9d:44:4b:f8:5a:19:d6:94:93:89:8c:e9:f6:6a:83:5a:e7: e7:f3:39:c1:7b:2f:f8:c1:a3:c6:67:d2:fa:72:43:a7:c3:4b: 75:49:45:e8:56:e6:62:b4:ef:79:1c:9d:da:99:27:b6:e3:63: eb:7a:1e:68:cb:3c:c8:df:98:f9:f7:7d:c8:b6:f0:b5:b6:10: 10:8f:2b:01:b2:cf:0c:0f:e2:f9:fb:51:00:96:f9:ac:5a:a0: f3:21:14:1d:a6:25:71:b8:47:da:30:15:23:97:0f:27:9d:38: c9:58:6a:a7:65:d1:f5:57:d0:4c:ff:13:cd:84:b3:e3:f4:8c: 95:25:d1:f7:11:d5:e3:cc:6b:00:6c:09:f5:a7:bd:88:18:6b: f7:5e:c3:01:82:b2:b1:76:44:c7:c1:a5:8e:1f:40:5b:c3:35: 64:94:1b:a4:55:be:58:81:e9:a4:02:44:59:6a:a7:10:22:c0: 0b:a1:98:98:3b:ac:d8:f1:e1:31:5f:bd:6d:c1:54:4e:e4:6d: 9f:13:02:9c:c8:45:4e:3c:ac:24:10:26:b4:41:95:90:02:ab: 6e:9a:3c:19:e5:62:30:34:42:e6:60:de:3b:74:6c:0b:f2:82: ad:d2:0e:b2:b1:d4:bd:bd:84:76:f8:5b:8d:93:9d:9d:82:74: fe:be:01:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzAwMzExMC8GA1UEBRMoQThGQzA2MzZFNjgxODY0NzU1NDg3OTREREZBNDY5MEJG RkQ0Q0NCNjAeFw0yNDA5MTkwNTU2NThaFw0yNDA5MjYwNTU2NThaMBgxFjAUBgNV BAMTDTY2ZWJiZDJhLWM1MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtizQYqP1vyjIMIKQwN+D2b8b2G2ab1HV63skCBMDpu4kxTleQhuBzcSA9g0sT DTCOii8Mo/ubWxZSacBpGz7okRZV8lnUR3SExABc1fwTRiZvMHuuaQ+haVVB8KnN ZPxOu8wxCqbn04YGXkjsifTFmc1sYvd5Cplos1R5UORkHp0UjcIpqTs8UCq7PRj6 AHhEH+u38P6Mf3NL3HtqEo4RaxyV37CE9cgrBDSK/wG1ZZNsevB04tgHN6kUZ4Mg xgBfv7UDBe1USfs6d/ebziIQBBE+0DGSe3GRd03qnDFjz1doYqF0CtcTvdXhO9SZ yuA14vZ9FB4caqFqDEuCRYFrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPlr4A6ls 1CpCXSL53kIln6KqqHkwHwYDVR0jBBgwFoAUqPwGNuaBhkdVSHlN36RpC//UzLYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MDAzLzI2QTZCMDU4MzJC QjExRUZBODNENjEyRkM0RjlBRTAyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpM WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcVB3R051YUJoa2RWU0hsTjM2UnBDX19VekxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 MDAzLzI2QTZCMDU4MzJCQjExRUZBODNENjEyRkM0RjlBRTAyL3FQd0dOdWFCaGtk VlNIbE4zNlJwQ19fVXpMWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEqdREv4WhnWlJOJjOn2aoNa5+fzOcF7L/jBo8Zn0vpyQ6fDS3VJRehW 5mK073kcndqZJ7bjY+t6HmjLPMjfmPn3fci28LW2EBCPKwGyzwwP4vn7UQCW+axa oPMhFB2mJXG4R9owFSOXDyedOMlYaqdl0fVX0Ez/E82Es+P0jJUl0fcR1ePMawBs CfWnvYgYa/dewwGCsrF2RMfBpY4fQFvDNWSUG6RVvliB6aQCRFlqpxAiwAuhmJg7 rNjx4TFfvW3BVE7kbZ8TApzIRU48rCQQJrRBlZACq26aPBnlYjA0QuZg3jt0bAvy gq3SDrKx1L29hHb4W42TnZ2CdP6+Af4= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:50 2024 by rpki-client on console-fra.rpki-client.org