$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: SaCgBhUZ5bYenjO4D1A8t6mX1E2FTv4XRQ+J817cyTc= Subject key identifier: 8B:B0:A2:2C:92:22:A9:9B:95:E4:30:A5:B5:1B:E3:BC:41:04:5B:59 Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0CE3 Signing time: Wed 20 Nov 2024 17:57:54 +0000 Manifest this update: Wed 20 Nov 2024 17:57:54 +0000 Manifest next update: Wed 27 Nov 2024 17:57:54 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: 9kgwNG6BqL5NUntKmbQ+0Xt/QFPFgVynxuwrxEqwgd4=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: 3lfdylanDHmeBtco3xOY3EFynIvyeVsjRU7spFbzglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: Nov 20 17:57:54 2024 GMT Not After : Nov 27 17:57:54 2024 GMT Subject: CN=673e2322-16d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:eb:11:e7:aa:81:8f:7d:61:47:98:78:e0: d5:8e:e8:d4:24:82:9e:61:13:43:9f:ec:e9:d0:0e: a5:bf:4a:a8:00:00:7e:e4:f9:0d:bf:f2:42:c4:7c: 05:97:ef:ec:9d:39:f3:24:f1:c7:23:1c:aa:60:8c: 3e:18:e3:13:91:93:64:f6:ec:18:e7:7d:bf:09:5e: 4c:42:d9:12:4b:1f:ce:80:6e:3a:36:a7:de:d0:41: 46:25:e3:24:00:5f:10:fa:2f:9b:a7:aa:36:c5:27: 24:44:65:17:3a:03:58:50:fa:9e:f7:eb:18:03:2b: 2c:c7:7a:a9:be:05:16:77:9a:7a:fa:85:41:8d:fe: c0:cf:f2:0e:82:ad:33:93:fc:74:7d:35:d6:2d:46: 6c:1b:fb:24:e7:aa:5a:d9:5d:99:21:8b:7e:05:d6: d8:12:af:40:c5:15:cf:fe:e9:18:bd:da:7c:fe:dc: f7:97:49:6a:ec:dd:d3:e8:47:fe:c8:2b:bc:c3:43: 49:e6:67:d6:91:8c:bf:ec:1e:fe:90:d3:4b:d6:f3: e5:0b:bd:35:2b:9f:2f:78:b8:f8:07:d1:3f:e5:02: 44:2d:54:a9:28:ef:b6:ee:77:38:06:fe:42:0d:41: 97:e1:db:9d:ea:34:f2:40:1e:fc:4a:78:9b:0d:42: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:A2:2C:92:22:A9:9B:95:E4:30:A5:B5:1B:E3:BC:41:04:5B:59 X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:40:26:d9:52:28:5f:5e:11:14:9f:29:01:b0:bb:4f:c5:ed: cf:1a:55:7e:af:2c:b2:c9:e8:d4:19:78:a5:52:9c:95:ce:8e: c2:4e:11:ef:f0:07:cb:ba:0e:15:cc:4d:84:9a:67:3f:94:b8: 53:ec:8d:2b:2c:ec:6f:ce:9e:f3:88:b2:6a:2d:19:6f:f2:e0: 8c:30:50:46:4f:e1:12:c3:cc:e7:f6:8a:8a:34:0e:38:92:df: e2:42:3b:27:44:7a:e6:e4:e9:ff:a5:88:e1:99:b0:02:56:2e: c3:33:92:a7:05:4e:fd:9a:5c:54:e3:f3:ce:3b:4d:3c:10:28: c9:77:0e:09:6b:33:77:ba:b6:f1:eb:14:95:b0:8c:95:75:d3: 73:27:b8:45:17:44:33:02:b6:06:29:9e:73:21:e5:89:67:a3: c1:4e:16:67:4d:60:6f:31:f6:2b:15:73:57:f1:22:23:1c:c0: ec:a6:de:58:89:6e:fb:88:a4:7e:97:03:0f:12:21:4a:9b:79: 98:60:09:61:df:42:76:83:6a:b6:6a:71:21:08:c6:e9:0b:97: 17:94:a9:87:3f:47:30:0b:e4:f5:78:6f:61:ce:e8:cd:81:6d: 8b:ef:45:bf:59:42:c6:15:f4:1e:b8:1d:0c:79:22:9f:ac:b1: 9f:36:fe:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjQxMTIwMTc1NzU0WhcNMjQxMTI3MTc1NzU0WjAYMRYwFAYD VQQDEw02NzNlMjMyMi0xNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YzrEeeqgY99YUeYeODVjujUJIKeYRNDn+zp0A6lv0qoAAB+5PkNv/JCxHwF l+/snTnzJPHHIxyqYIw+GOMTkZNk9uwY532/CV5MQtkSSx/OgG46Nqfe0EFGJeMk AF8Q+i+bp6o2xSckRGUXOgNYUPqe9+sYAyssx3qpvgUWd5p6+oVBjf7Az/IOgq0z k/x0fTXWLUZsG/sk56pa2V2ZIYt+BdbYEq9AxRXP/ukYvdp8/tz3l0lq7N3T6Ef+ yCu8w0NJ5mfWkYy/7B7+kNNL1vPlC701K58veLj4B9E/5QJELVSpKO+27nc4Bv5C DUGX4dud6jTyQB78SnibDUICmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuwoiyS IqmbleQwpbUb47xBBFtZMB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtQCbZUihfXhEUnykBsLtPxe3PGlV+ryyyyejUGXilUpyVzo7CThHv 8AfLug4VzE2Emmc/lLhT7I0rLOxvzp7ziLJqLRlv8uCMMFBGT+ESw8zn9oqKNA44 kt/iQjsnRHrm5On/pYjhmbACVi7DM5KnBU79mlxU4/POO008ECjJdw4JazN3urbx 6xSVsIyVddNzJ7hFF0QzArYGKZ5zIeWJZ6PBThZnTWBvMfYrFXNX8SIjHMDspt5Y iW77iKR+lwMPEiFKm3mYYAlh30J2g2q2anEhCMbpC5cXlKmHP0cwC+T1eG9hzujN gW2L70W/WULGFfQeuB0MeSKfrLGfNv7l -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org