$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: xliZlLhKhLmUa97vPBW5LT1FcX1feNjr0Nxwwpl4UqM= Subject key identifier: 31:C0:77:14:2F:A9:B0:01:E0:CC:BD:B0:94:E9:14:72:C0:0F:EB:3C Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 038E Signing time: Sat 23 Nov 2024 00:24:07 +0000 Manifest this update: Sat 23 Nov 2024 00:24:07 +0000 Manifest next update: Sat 30 Nov 2024 00:24:07 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: yGOA36icDNo0jj5moS+HPkDx7bJhbrJgzIwgUPz4JKE=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: kwP3M/ZQ5yOcD1RLsQkVeUylWIiSVXBYHMKArGAA98E=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: vXAV2SBkTLIbHNT/9VeFhe5uaUo3f7QWYs/PlYgCY+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Nov 23 00:24:07 2024 GMT Not After : Nov 30 00:24:07 2024 GMT Subject: CN=674120a7-00cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:6d:5c:36:38:cb:7b:7f:59:c0:f1:f7:f2: b4:46:35:26:86:e6:8c:7e:82:c1:4a:39:dc:a9:d1: a3:cd:98:f4:2b:16:4f:6c:8e:26:c8:6d:40:bf:70: 61:c6:92:f3:0a:bf:78:82:b1:31:a8:ff:17:58:56: 44:78:1f:b5:7a:32:b9:9a:58:36:d1:99:b6:a5:99: df:b2:e7:10:fc:ce:2a:03:2b:fc:ad:48:60:9f:07: 86:97:af:87:02:b2:0a:d8:98:5c:36:33:8a:96:c3: aa:89:00:d0:30:ee:27:1d:d3:b5:82:1d:7f:5e:fd: be:27:81:47:76:9d:b5:18:db:39:6b:8e:ce:eb:84: 11:43:91:40:32:38:ae:0e:00:fa:c4:04:cf:b7:cb: e0:87:ed:02:de:84:d8:be:a1:c9:2e:52:5f:ce:7f: 97:e8:ad:8d:80:87:32:88:be:ae:43:33:22:3b:33: 9f:88:01:52:7e:2b:ea:ac:d7:04:e0:f6:1d:e2:bb: 63:9a:46:b0:cc:79:39:c5:1b:2c:1f:f3:7f:b3:46: 42:af:97:b6:06:87:01:8e:29:73:fc:e9:9c:53:df: 27:0e:af:d6:b3:d0:00:ca:b7:60:36:37:74:2c:ec: 22:ac:e2:0c:1c:6b:71:c7:1e:9d:66:15:d7:d3:18: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:77:14:2F:A9:B0:01:E0:CC:BD:B0:94:E9:14:72:C0:0F:EB:3C X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:0e:81:99:8d:43:a0:18:d9:d0:97:2a:69:60:61:c4:21: cf:1e:5d:1a:d2:0d:bc:ed:fc:af:84:99:ad:d8:c2:d5:e1:d5: 73:e3:1c:2e:90:c8:d5:33:8e:4c:b5:70:aa:18:fb:93:00:fb: 41:8f:43:ff:b5:eb:9f:3f:a9:9f:d1:2f:db:75:0f:12:b7:00: 1d:e7:66:57:91:b2:03:4c:06:8a:26:00:17:b3:74:7e:39:4c: e7:30:8c:ef:2c:95:40:62:aa:63:a9:c0:33:54:07:f0:f9:85: 31:89:9f:cd:d0:46:51:40:fe:92:23:d5:66:0f:94:a8:fd:35: 15:b9:c3:36:3c:b6:68:47:ea:35:95:20:34:b2:ca:8a:a5:57: 45:af:18:36:53:35:5c:3d:d6:34:40:53:f4:63:f6:fb:6d:6d: 22:f4:c0:09:d5:f8:93:6f:b6:45:ce:eb:3c:c0:5c:a0:f0:4f: d9:64:49:5f:62:86:d6:b6:29:8b:73:dc:ed:5e:da:15:bd:62: a6:f9:a4:e0:38:12:03:c0:a4:da:ca:ea:85:11:1f:ec:4e:a2: db:eb:92:e7:76:37:3a:34:38:36:1e:70:77:b4:15:b6:97:17: 8e:cf:6b:e5:3c:05:2f:84:a9:51:c2:ca:0e:e7:74:b4:a9:00: be:1b:4c:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjQxMTIzMDAyNDA3WhcNMjQxMTMwMDAyNDA3WjAYMRYwFAYD VQQDEw02NzQxMjBhNy0wMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oVtXDY4y3t/WcDx9/K0RjUmhuaMfoLBSjncqdGjzZj0KxZPbI4myG1Av3Bh xpLzCr94grExqP8XWFZEeB+1ejK5mlg20Zm2pZnfsucQ/M4qAyv8rUhgnweGl6+H ArIK2JhcNjOKlsOqiQDQMO4nHdO1gh1/Xv2+J4FHdp21GNs5a47O64QRQ5FAMjiu DgD6xATPt8vgh+0C3oTYvqHJLlJfzn+X6K2NgIcyiL6uQzMiOzOfiAFSfivqrNcE 4PYd4rtjmkawzHk5xRssH/N/s0ZCr5e2BocBjilz/OmcU98nDq/Ws9AAyrdgNjd0 LOwirOIMHGtxxx6dZhXX0xgKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHAdxQv qbAB4My9sJTpFHLAD+s8MB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJgQ6BmY1DoBjZ0JcqaWBhxCHPHl0a0g287fyvhJmt2MLV4dVz4xwu kMjVM45MtXCqGPuTAPtBj0P/teufP6mf0S/bdQ8StwAd52ZXkbIDTAaKJgAXs3R+ OUznMIzvLJVAYqpjqcAzVAfw+YUxiZ/N0EZRQP6SI9VmD5So/TUVucM2PLZoR+o1 lSA0ssqKpVdFrxg2UzVcPdY0QFP0Y/b7bW0i9MAJ1fiTb7ZFzus8wFyg8E/ZZElf YobWtimLc9ztXtoVvWKm+aTgOBIDwKTayuqFER/sTqLb65Lndjc6NDg2HnB3tBW2 lxeOz2vlPAUvhKlRwsoO53S0qQC+G0y2 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org