$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json) Hash identifier: VKcdaljoZGm05BBgUM8BsN3ll1mT2gMH5g6MgfjEvuI= Subject key identifier: 81:A4:71:94:C0:90:AF:8B:62:19:ED:61:89:96:8C:E6:EF:4D:AF:5F Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft Manifest number: 68 Signing time: Thu 21 Nov 2024 05:06:49 +0000 Manifest this update: Thu 21 Nov 2024 05:06:49 +0000 Manifest next update: Thu 28 Nov 2024 05:06:49 +0000 Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: kKOLY55ZOpUG002/zkM1MLo6kCDTy0+/QY2jAQGRiUk=) 2: 1E792ABE35F911EF9E12FD70C4F9AE02.roa (hash: SSrsMT+MsifXEZigg/3tEfQ8xvez6W91bst1f8XBmqU=) 3: 01935FDC35F911EFBF29CF70C4F9AE02.roa (hash: OIK0wz8AgNykEH5wxa89kT57n1qLZMAZrtTx9EHsCj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Nov 21 05:06:49 2024 GMT Not After : Nov 28 05:06:49 2024 GMT Subject: CN=673ebfe9-74ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:57:16:77:1f:c9:ab:71:c3:0b:3a:fe:7e: 5f:83:8e:23:3d:c6:e6:fd:6e:66:a8:0b:6e:d9:9e: 03:80:57:fc:77:2c:01:e8:ad:0f:d8:f8:72:16:71: 9e:81:48:40:b3:29:da:2c:2e:c1:b9:34:9e:e4:67: d4:49:d6:57:61:d0:9a:79:c3:97:bb:f2:d5:65:65: d0:ee:c8:c5:fa:8b:d4:0b:11:48:52:6d:7d:0a:1b: bc:34:99:75:44:10:d4:24:18:9d:3f:02:b0:72:8c: 92:be:f9:43:60:a7:e7:9b:66:4f:82:d0:8b:2b:5e: 93:f1:bc:61:5c:79:f7:e2:64:d4:e0:0a:0f:18:f8: 02:ae:d1:ff:7c:e3:2f:6c:68:81:45:ee:01:48:bf: e9:27:62:c1:c6:7d:b8:2c:0b:3d:20:3f:1b:5e:85: 7f:bd:d9:5d:6e:50:fb:b9:22:60:bb:60:ef:be:93: ad:59:c6:f2:0f:00:5a:87:2e:9b:2f:0c:aa:b2:a9: 54:6a:cd:ad:0b:48:42:e4:a0:10:30:37:cb:32:17: 85:db:16:32:a0:4b:8b:d0:b8:35:f3:c8:7e:9f:51: 8e:28:93:26:11:ce:bc:e2:d2:9a:58:b8:45:df:aa: 34:24:69:d4:08:67:f6:61:14:34:d6:11:35:28:29: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:71:94:C0:90:AF:8B:62:19:ED:61:89:96:8C:E6:EF:4D:AF:5F X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:af:60:c6:a4:a6:e2:97:b3:b8:b8:05:d2:23:0a:dc:62:f1: e4:a8:63:1a:61:36:b3:d7:61:1e:9b:52:06:a5:60:c3:d2:d9: a8:54:21:05:d8:5a:09:89:bc:78:17:0b:99:1e:d9:f3:fc:a2: 39:52:f9:c1:9d:b2:96:80:10:8c:64:8e:ef:bf:84:d3:f6:21: 8b:a9:a1:64:6c:5c:50:c7:03:10:eb:ad:4b:64:2f:2e:54:a4: a6:59:59:a9:ce:1f:5c:7c:29:4c:2f:b7:d2:95:da:3f:d7:46: 6b:a7:06:1d:ac:86:af:af:b8:20:a4:cd:c1:12:f4:e3:40:3c: 3b:27:72:f7:37:cd:57:1e:5b:b4:a1:0c:66:a7:75:4e:81:b4: f2:e8:bb:41:b7:b2:e5:31:53:9d:84:b1:fe:3e:16:58:40:d2: 83:e3:51:b0:b7:39:3d:25:a0:af:2d:a6:51:ae:7b:48:23:1d: 3d:df:1f:d8:d3:0a:00:4d:3a:9b:92:73:b4:c4:0d:50:96:6a: 2f:be:07:a5:f3:10:9f:bc:07:55:dd:5c:e3:b8:b7:41:a3:aa: 55:70:97:9b:76:cd:d8:26:21:45:04:b3:3e:ee:87:dd:41:11: b0:34:18:5e:3b:09:b1:5c:21:c2:b0:67:4c:78:71:14:44:11: f5:88:4e:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDVENzExMC8GA1UEBRMoQUE0NDA1QjFCRkE5NkM5QzY5QjAyOTAzM0VGNDgxRDhG NThBNzdFNTAeFw0yNDExMjEwNTA2NDlaFw0yNDExMjgwNTA2NDlaMBgxFjAUBgNV BAMTDTY3M2ViZmU5LTc0ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDuVcWdx/Jq3HDCzr+fl+DjiM9xub9bmaoC27ZngOAV/x3LAHorQ/Y+HIWcZ6B SECzKdosLsG5NJ7kZ9RJ1ldh0Jp5w5e78tVlZdDuyMX6i9QLEUhSbX0KG7w0mXVE ENQkGJ0/ArByjJK++UNgp+ebZk+C0IsrXpPxvGFceffiZNTgCg8Y+AKu0f984y9s aIFF7gFIv+knYsHGfbgsCz0gPxtehX+92V1uUPu5ImC7YO++k61ZxvIPAFqHLpsv DKqyqVRqza0LSELkoBAwN8syF4XbFjKgS4vQuDXzyH6fUY4okyYRzrzi0ppYuEXf qjQkadQIZ/ZhFDTWETUoKep9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgaRxlMCQ r4tiGe1hiZaM5u9Nr18wHwYDVR0jBBgwFoAUqkQFsb+pbJxpsCkDPvSB2PWKd+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNUQ3Lzk2QTM2QUE4MTZE ODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2Qt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWtRRnNiLXBiSnhwc0NrRFB2U0IyUFdLZC1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NUQ3Lzk2QTM2QUE4MTZEODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1wYkp4 cHNDa0RQdlNCMlBXS2QtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmvYMakpuKXs7i4BdIjCtxi8eSoYxphNrPXYR6bUgalYMPS2ahUIQXY WgmJvHgXC5ke2fP8ojlS+cGdspaAEIxkju+/hNP2IYupoWRsXFDHAxDrrUtkLy5U pKZZWanOH1x8KUwvt9KV2j/XRmunBh2shq+vuCCkzcES9ONAPDsncvc3zVceW7Sh DGandU6BtPLou0G3suUxU52Esf4+FlhA0oPjUbC3OT0loK8tplGue0gjHT3fH9jT CgBNOpuSc7TEDVCWai++B6XzEJ+8B1XdXOO4t0GjqlVwl5t2zdgmIUUEsz7uh91B EbA0GF47CbFcIcKwZ0x4cRREEfWITqY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org