$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: WSZWnrX/AlE8vbkPa+pY5bBdPvq8lqjyq0OwSSerh5c= Subject key identifier: 14:9E:C2:04:8F:8E:ED:22:1B:D8:77:A1:C8:66:4E:30:48:8F:EE:E9 Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 185C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 1849 Signing time: Fri 22 Nov 2024 16:31:39 +0000 Manifest this update: Fri 22 Nov 2024 16:31:38 +0000 Manifest next update: Fri 29 Nov 2024 16:31:38 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: JCAAjAhsouiyjphm8hy2M/L/3luvnmt9pNwCeb3EA9k=) 2: 7ADF11EE730B11EEA3636871C4F9AE02.roa (hash: TWS2N0Ko/WPMKSAN1gPjrAr4eY8g7j46+IFuxIuYYxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6236 (0x185c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: Nov 22 16:31:38 2024 GMT Not After : Nov 29 16:31:38 2024 GMT Subject: CN=6740b1eb-3e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:34:f7:63:c1:11:00:81:6c:8f:58:23:1c: 6c:44:43:3b:fc:be:a7:d0:3d:1c:69:81:8d:5f:89: 06:d1:88:c6:b4:b1:bf:c1:62:ee:c2:e8:f4:6b:ba: 08:5f:0e:09:2f:ea:1c:75:ef:74:1c:26:b9:3f:f8: e9:57:a9:01:98:c0:ae:5e:36:95:f7:81:4e:f7:9c: 55:f5:69:be:ea:9c:69:e1:c4:a1:5b:70:00:ea:e6: b0:de:95:1c:37:21:f2:29:7a:90:b7:e1:fd:3d:0b: 90:82:36:58:b3:cc:90:2b:d9:7c:cf:98:0b:28:2a: cc:99:ba:2c:0d:3d:9f:2e:23:89:d3:11:ed:5c:47: 59:af:03:02:97:2d:a4:d2:51:6e:09:4a:9f:08:22: 79:4a:36:9a:ea:62:45:5d:9f:fb:c6:d6:be:7e:eb: 06:d0:0b:83:d4:04:4c:97:0c:93:ad:da:5d:0e:ef: 51:16:e6:e4:cf:bb:04:da:7e:ab:1d:b8:55:c0:13: c3:25:8d:42:ce:a5:40:4a:6a:70:07:d9:fb:31:86: 45:90:2f:d5:cd:e0:9c:45:84:64:81:78:e9:ca:2d: 2d:13:f3:b9:f5:c4:30:41:0c:b0:06:5f:96:63:9c: 17:f1:8f:40:77:0c:df:8f:28:54:c9:67:7f:d2:05: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:C2:04:8F:8E:ED:22:1B:D8:77:A1:C8:66:4E:30:48:8F:EE:E9 X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:37:b6:3d:48:d7:66:ed:a6:a9:f4:d4:8c:92:8c:27:e7:f3: da:5f:0c:6b:45:e0:91:09:39:6f:b3:d6:d0:07:93:c1:e4:33: f8:f1:6b:00:27:2a:e3:c3:c7:40:56:66:ba:b1:7c:69:27:4d: 60:f5:5a:39:4d:86:2e:1a:e6:c0:0e:e2:4d:2e:86:b1:09:c0: 85:1c:8b:1b:e6:ae:a2:85:42:7c:f8:c9:01:e0:e5:2e:48:1c: 1c:88:41:95:22:61:71:33:9b:2c:b5:c9:2f:93:00:b3:93:f4: 92:ca:03:2a:7a:e9:d5:e5:55:14:c1:22:11:6e:6d:73:9d:36: a4:0b:81:95:c7:33:4e:22:2f:71:75:d6:98:93:bf:44:ed:a5: 81:4e:6e:89:69:2c:a7:fd:d6:30:50:47:80:3f:17:d3:eb:5a: 9f:81:f5:e6:f6:83:4a:0d:58:2e:4e:19:72:48:73:fe:5c:db: e6:05:b3:11:b2:73:cd:42:a4:0f:e1:d6:a9:f5:c3:17:5b:8f: 72:6c:ed:a5:b5:2a:cf:f8:6a:72:ea:4f:24:af:15:98:f6:ee: bf:5c:56:7a:4e:ad:86:f5:1a:d9:7a:ce:d9:48:f3:7d:da:2d: 40:ac:46:ad:3e:12:b6:c4:8d:ab:b7:0e:71:48:70:90:e5:5d: 1b:2c:6a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjQxMTIyMTYzMTM4WhcNMjQxMTI5MTYzMTM4WjAYMRYwFAYD VQQDEw02NzQwYjFlYi0zZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz24092PBEQCBbI9YIxxsREM7/L6n0D0caYGNX4kG0YjGtLG/wWLuwuj0a7oI Xw4JL+ocde90HCa5P/jpV6kBmMCuXjaV94FO95xV9Wm+6pxp4cShW3AA6uaw3pUc NyHyKXqQt+H9PQuQgjZYs8yQK9l8z5gLKCrMmbosDT2fLiOJ0xHtXEdZrwMCly2k 0lFuCUqfCCJ5Sjaa6mJFXZ/7xta+fusG0AuD1ARMlwyTrdpdDu9RFubkz7sE2n6r HbhVwBPDJY1CzqVASmpwB9n7MYZFkC/VzeCcRYRkgXjpyi0tE/O59cQwQQywBl+W Y5wX8Y9AdwzfjyhUyWd/0gUXlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSewgSP ju0iG9h3ochmTjBIj+7pMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiN7Y9SNdm7aap9NSMkown5/PaXwxrReCRCTlvs9bQB5PB5DP48WsA Jyrjw8dAVma6sXxpJ01g9Vo5TYYuGubADuJNLoaxCcCFHIsb5q6ihUJ8+MkB4OUu SBwciEGVImFxM5sstckvkwCzk/SSygMqeunV5VUUwSIRbm1znTakC4GVxzNOIi9x ddaYk79E7aWBTm6JaSyn/dYwUEeAPxfT61qfgfXm9oNKDVguThlySHP+XNvmBbMR snPNQqQP4dap9cMXW49ybO2ltSrP+Gpy6k8krxWY9u6/XFZ6Tq2G9RrZes7ZSPN9 2i1ArEatPhK2xI2rtw5xSHCQ5V0bLGrR -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org