$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: uyjWOKYyR7A62RBPOTR8Ih8rVfNLLdPY4Cq+9N8X3k0= Subject key identifier: 1D:FB:73:AA:93:6E:84:01:45:84:27:B7:3F:B0:BA:0D:78:39:D6:3D Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 3F Signing time: Sat 23 Nov 2024 05:24:36 +0000 Manifest this update: Sat 23 Nov 2024 05:24:35 +0000 Manifest next update: Sat 30 Nov 2024 05:24:35 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: WzMZVBhcFIIcTMsmtJY83WOsjBY7B2vchhJeVYHY81Q=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: vCihCbD/IiwkyJf/jAh1StFRRAhfwTCEK4+ACvnlgHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Nov 23 05:24:35 2024 GMT Not After : Nov 30 05:24:35 2024 GMT Subject: CN=67416714-9576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:a5:ce:88:1e:41:89:fa:74:d3:f7:de:73: 0a:41:9d:77:ba:09:87:d2:ab:7b:20:09:6d:26:9e: ce:96:27:80:41:15:2a:a0:ff:43:40:02:cf:9f:97: a3:97:2b:f2:fc:9a:80:87:bb:5a:f4:3d:06:57:89: 97:20:17:40:a7:a0:cc:b8:aa:45:f5:03:95:cd:8d: 30:e6:2e:72:67:d2:4a:6c:da:4d:4d:2c:a3:cf:6e: 89:29:b4:2a:64:28:05:5a:e0:e7:bf:b0:24:f4:82: 68:62:fb:0d:78:6b:51:a0:c8:c8:1a:44:97:e0:f3: 83:ee:ca:a4:5e:7e:e7:95:16:a0:65:a7:ac:4d:13: 59:82:68:a8:17:ae:a6:8e:97:8e:19:0d:ca:e9:88: 79:11:63:86:4c:97:ad:c3:6a:4a:b0:ef:a1:13:ab: 01:f6:9f:63:7f:94:52:1f:f4:44:b5:e3:aa:cf:3d: 5d:4a:18:57:af:4a:b5:50:36:72:48:54:bf:4b:92: f4:ee:82:5f:88:90:c1:23:b2:01:00:71:2a:d6:ca: b8:93:5f:12:d6:ab:53:12:93:c6:b5:0c:53:90:b2: 3c:30:cf:27:b2:ef:ed:d8:36:36:4c:81:10:cc:be: c6:e8:af:44:a8:a6:17:c6:3d:23:72:11:ea:5f:f1: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:73:AA:93:6E:84:01:45:84:27:B7:3F:B0:BA:0D:78:39:D6:3D X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8f:95:e1:b7:f7:a5:fc:f3:5a:5b:0e:ab:5f:2c:f9:9f:cf: 2c:14:56:cc:21:84:ad:52:5e:ce:a9:e2:4d:6a:39:ad:21:aa: 8a:25:af:48:18:b7:d2:a6:49:47:8b:f6:3b:43:7c:16:14:8b: 43:ca:d4:0b:30:c8:14:93:92:c9:52:65:5b:73:20:2a:a6:f1: c3:b3:53:c8:52:19:5c:ab:c7:94:b9:47:46:61:5e:ec:05:d6: 26:dc:3b:7e:10:db:52:e3:49:6c:06:5e:74:ad:05:2e:66:cb: 59:b1:c7:4c:9b:d0:15:d3:c7:86:5e:0e:84:fb:7a:b5:8c:96: 6f:68:c9:b7:c7:62:14:80:af:2f:12:7b:8b:3d:93:79:cf:d4: 8f:9e:ff:eb:a3:69:9a:23:f9:d4:ac:91:2f:8a:eb:27:ba:67: 50:a0:e3:4d:78:fb:c4:4d:5a:77:63:79:3c:10:01:2e:64:e1: 9a:df:f8:59:b9:cf:a9:4f:62:03:1b:cd:82:19:21:48:f2:d6: 39:d6:fa:eb:19:e2:e8:06:ca:15:8a:4f:c8:ff:af:9a:aa:8f: ad:a1:5e:2b:93:8e:fb:46:bc:46:e0:59:b1:16:de:97:bc:99: 3e:fa:47:81:c0:93:ea:f0:5c:95:4d:9f:f0:b3:23:60:b7:58: 03:b4:ed:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTQ5QzExMC8GA1UEBRMoNDM2MzRDNzAxQkExRjFFRkNFOEY1NkFBNkFEMURCMjk0 NUExREI5RjAeFw0yNDExMjMwNTI0MzVaFw0yNDExMzAwNTI0MzVaMBgxFjAUBgNV BAMTDTY3NDE2NzE0LTk1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxxaXOiB5Bifp00/fecwpBnXe6CYfSq3sgCW0mns6WJ4BBFSqg/0NAAs+fl6OX K/L8moCHu1r0PQZXiZcgF0CnoMy4qkX1A5XNjTDmLnJn0kps2k1NLKPPbokptCpk KAVa4Oe/sCT0gmhi+w14a1GgyMgaRJfg84PuyqRefueVFqBlp6xNE1mCaKgXrqaO l44ZDcrpiHkRY4ZMl63Dakqw76ETqwH2n2N/lFIf9ES146rPPV1KGFevSrVQNnJI VL9LkvTugl+IkMEjsgEAcSrWyriTXxLWq1MSk8a1DFOQsjwwzyey7+3YNjZMgRDM vsbor0SophfGPSNyEepf8TvhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHftzqpNu hAFFhCe3P7C6DXg51j0wHwYDVR0jBBgwFoAUQ2NMcBuh8e/Oj1aqatHbKUWh258w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NDlDL0RFODcxOEM0NEEz MTExRUZCN0JCRDUxQ0M0RjlBRTAyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTJOTWNCdWg4ZV9PajFhcWF0SGJLVVdoMjU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NDlDL0RFODcxOEM0NEEzMTExRUZCN0JCRDUxQ0M0RjlBRTAyL1EyTk1jQnVoOGVf T2oxYXFhdEhiS1VXaDI1OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWPleG396X881pbDqtfLPmfzywUVswhhK1SXs6p4k1qOa0hqoolr0gY t9KmSUeL9jtDfBYUi0PK1AswyBSTkslSZVtzICqm8cOzU8hSGVyrx5S5R0ZhXuwF 1ibcO34Q21LjSWwGXnStBS5my1mxx0yb0BXTx4ZeDoT7erWMlm9oybfHYhSAry8S e4s9k3nP1I+e/+ujaZoj+dSskS+K6ye6Z1Cg4014+8RNWndjeTwQAS5k4Zrf+Fm5 z6lPYgMbzYIZIUjy1jnW+usZ4ugGyhWKT8j/r5qqj62hXiuTjvtGvEbgWbEW3pe8 mT76R4HAk+rwXJVNn/CzI2C3WAO07So= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org