$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: EPtM4vtEITNC6N1+DXQOTf5Hdwfxsy51Kvik89N4+dI= Subject key identifier: 68:9D:B5:FE:8A:CE:B5:65:79:5F:00:2F:34:FD:A0:A2:44:10:37:28 Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 0588 Signing time: Fri 22 Nov 2024 22:49:19 +0000 Manifest this update: Fri 22 Nov 2024 22:49:19 +0000 Manifest next update: Fri 29 Nov 2024 22:49:19 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: XCE4dLJ6eJoGj3E9ozYq66BE2Q/zSY40mHS/WDAWNro=) 2: 3A32764C9E8C11EFABFC2A54C4F9AE02.roa (hash: VFDwDUHmotxSYcWM5gTje5vELEKOiQb/SybdGX5Q6/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: Nov 22 22:49:19 2024 GMT Not After : Nov 29 22:49:19 2024 GMT Subject: CN=67410a6f-8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:6a:74:b4:de:a5:7f:e1:04:91:c1:06:be: 4c:dc:99:d3:a7:36:09:2e:f9:ae:b1:cb:73:96:c1: 2d:7c:19:a8:5a:e6:cc:33:99:1b:44:6b:fe:01:3c: d0:37:a5:ec:43:4c:e7:6d:c4:89:c7:7e:4c:49:25: 6e:bc:dd:86:e4:f7:03:a7:43:6c:61:44:d8:0d:ac: 17:94:ae:b3:ee:c2:fc:24:66:c0:74:87:38:19:99: 11:b6:45:36:60:55:2a:03:08:83:8f:d9:cf:ca:b2: 9c:9f:f6:ec:b0:f3:54:56:3f:e4:9f:a4:07:93:84: 4d:40:c3:75:93:65:35:33:60:09:8e:8c:25:e9:3a: 50:2e:30:98:e5:28:1a:05:58:8c:fb:d9:76:d6:92: 64:e1:f4:19:ac:93:c1:4f:39:3e:1a:34:11:cf:eb: 75:38:64:49:9f:39:d8:6a:04:46:53:9e:62:63:48: e4:ce:0b:ee:b1:c6:48:58:65:4c:2c:d1:19:d4:4d: 82:ea:a2:8c:e4:0b:1d:b3:de:d7:0e:ba:b5:79:35: 3f:cc:0c:00:c6:13:64:30:4b:8b:af:26:2d:fa:69: 91:1b:8a:23:ec:20:71:0a:43:ac:de:7a:1a:d8:7e: 79:24:52:43:7f:c8:77:77:57:7d:26:2c:27:dd:cb: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:B5:FE:8A:CE:B5:65:79:5F:00:2F:34:FD:A0:A2:44:10:37:28 X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5d:dd:dd:65:26:32:2a:fa:12:b9:ee:d1:5c:9a:b8:21:67: 5f:0a:55:02:89:41:59:f2:6d:f3:98:f5:42:4b:30:b3:82:a7: 51:27:0d:c6:b3:1e:60:40:67:1e:16:0c:b7:7a:98:45:24:99: ed:0c:5b:dc:b8:42:32:9e:31:a8:bb:bc:eb:57:a9:0c:88:2c: 9b:0e:61:aa:c0:0f:48:d7:83:31:3c:c4:06:b8:07:01:ff:2f: dc:52:90:84:de:12:ee:13:44:9f:b2:f2:ed:92:b7:1e:73:65: 1b:b9:33:20:c9:6c:9f:6b:01:d8:65:f2:a3:65:b0:92:9d:43: eb:c0:c1:69:22:1a:c1:e1:6e:d9:d0:04:af:47:58:60:fc:58: d2:11:b7:43:6d:58:c6:12:54:fc:78:ab:55:ff:27:d6:77:b8: 9e:6f:be:45:85:d5:1c:26:69:52:2b:a3:38:ca:6f:af:ed:d3: ab:1d:7f:f7:c2:47:97:f1:40:30:ab:5b:83:ba:4c:b4:0d:ed: a9:26:59:63:12:31:85:29:8e:69:65:1f:5b:86:32:97:0f:39: d6:6a:ba:94:29:6e:fe:65:8b:6a:91:4e:57:cd:ae:ae:05:2e: 2c:46:ff:19:a1:c7:33:83:6b:1b:cc:80:7d:50:b0:ee:1a:c9: ea:2b:e1:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjQxMTIyMjI0OTE5WhcNMjQxMTI5MjI0OTE5WjAYMRYwFAYD VQQDEw02NzQxMGE2Zi04MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoplqdLTepX/hBJHBBr5M3JnTpzYJLvmusctzlsEtfBmoWubMM5kbRGv+ATzQ N6XsQ0znbcSJx35MSSVuvN2G5PcDp0NsYUTYDawXlK6z7sL8JGbAdIc4GZkRtkU2 YFUqAwiDj9nPyrKcn/bssPNUVj/kn6QHk4RNQMN1k2U1M2AJjowl6TpQLjCY5Sga BViM+9l21pJk4fQZrJPBTzk+GjQRz+t1OGRJnznYagRGU55iY0jkzgvuscZIWGVM LNEZ1E2C6qKM5Asds97XDrq1eTU/zAwAxhNkMEuLryYt+mmRG4oj7CBxCkOs3noa 2H55JFJDf8h3d1d9Jiwn3cuWswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGidtf6K zrVleV8ALzT9oKJEEDcoMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Xd3dZSYyKvoSue7RXJq4IWdfClUCiUFZ8m3zmPVCSzCzgqdRJw3G sx5gQGceFgy3ephFJJntDFvcuEIynjGou7zrV6kMiCybDmGqwA9I14MxPMQGuAcB /y/cUpCE3hLuE0SfsvLtkrcec2UbuTMgyWyfawHYZfKjZbCSnUPrwMFpIhrB4W7Z 0ASvR1hg/FjSEbdDbVjGElT8eKtV/yfWd7ieb75FhdUcJmlSK6M4ym+v7dOrHX/3 wkeX8UAwq1uDuky0De2pJlljEjGFKY5pZR9bhjKXDznWarqUKW7+ZYtqkU5Xza6u BS4sRv8Zocczg2sbzIB9ULDuGsnqK+HD -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:42 2024 by rpki-client on console-ams.rpki-client.org