$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: 8PHZbYZcL+jpFXA0jPUNZVruIljUZfYZNJ0kPKDvD24= Subject key identifier: 42:E0:08:83:27:8C:24:B0:AB:2E:5A:1D:B8:83:84:2F:7F:0F:2D:45 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1182 Signing time: Fri 22 Nov 2024 19:40:08 +0000 Manifest this update: Fri 22 Nov 2024 19:40:07 +0000 Manifest next update: Fri 29 Nov 2024 19:40:07 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: 4hXlcgGWRS+/ALfoYFUQRTFDnj52jS9tueHuUGIILSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Nov 22 19:40:07 2024 GMT Not After : Nov 29 19:40:07 2024 GMT Subject: CN=6740de17-d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:43:90:f4:83:54:52:01:02:19:ca:f1:ea: 79:df:b2:08:e8:c0:ee:43:67:c1:5a:7c:3f:dc:45: 35:06:b7:89:65:fa:24:5a:6a:60:a4:c4:d7:58:d1: 64:3d:3d:81:00:d4:10:0a:80:9a:23:78:db:24:dc: 21:cf:29:46:65:fd:ff:37:2a:ba:ef:5c:fc:62:16: af:58:00:ca:b1:d9:19:9b:8e:75:c1:25:4e:9a:bb: b1:1e:1e:f4:ae:44:d0:a2:2a:19:69:04:fe:82:5e: 62:e6:f8:5f:4f:77:d6:ee:93:e3:f9:3f:6f:74:e0: 4c:6b:7c:0c:24:1a:3b:b8:b9:b5:6f:1a:88:60:f5: bb:88:d3:3f:e3:16:12:a9:71:39:61:61:19:c6:98: b8:53:ac:92:53:28:9a:b0:3d:e1:58:ab:10:e5:95: d0:83:7e:af:92:2b:bb:5f:e6:d6:6a:e1:53:72:d6: 69:8d:cd:33:11:9b:ee:90:4a:53:96:28:d5:3a:2d: 45:89:08:c1:51:19:ba:45:ef:d4:02:e5:f6:31:15: 16:bf:2e:6b:54:98:5d:39:e3:eb:14:5b:3e:8e:04: c5:8c:cd:0a:14:4f:4b:a1:97:60:4f:40:be:26:f5: ef:03:c3:b1:1a:a7:3d:49:14:3c:2d:5e:a3:af:18: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:08:83:27:8C:24:B0:AB:2E:5A:1D:B8:83:84:2F:7F:0F:2D:45 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fd:14:da:70:f7:07:95:0f:ad:1c:68:a4:83:a0:ac:8c:4c: 58:2b:03:46:f7:da:06:92:4b:dd:cb:93:74:35:6a:55:b4:db: 46:f2:72:01:17:04:21:da:fa:a8:6a:53:fb:57:42:70:2f:3f: 45:ef:aa:fa:2d:32:72:58:b4:8c:fa:cb:2a:b1:be:fc:f5:8e: ec:3a:4f:60:5e:8d:46:c7:f9:2b:f3:8e:d0:74:78:7c:38:f7: 4e:51:bb:72:c2:09:ea:85:c8:73:79:c0:a3:af:36:5e:ea:24: 64:94:c6:ed:6b:00:09:e5:01:79:c5:82:6c:d8:26:a3:a1:29: 61:2c:9e:b0:5e:b2:f0:cc:d5:27:99:5e:3d:0f:d4:48:bc:fe: f6:a3:0d:6e:c8:82:3b:02:d4:d3:b4:3e:fb:78:95:2a:04:41: 72:32:45:9a:6a:99:46:3d:a0:0a:7c:e6:27:71:f5:9d:6b:f4: d0:8e:23:ce:10:5b:5c:c0:78:2e:36:ec:be:fe:ee:f8:ec:e3: ab:17:1a:d6:be:92:06:c3:de:20:64:99:bc:23:1b:9e:da:81: 95:23:6f:9e:74:32:b6:c4:a2:50:c9:9d:a2:0e:d6:be:9b:b8: 76:48:48:ac:48:a1:63:fd:2f:ab:fc:97:44:8c:d5:f3:0b:cd: 56:4c:e3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjQxMTIyMTk0MDA3WhcNMjQxMTI5MTk0MDA3WjAYMRYwFAYD VQQDEw02NzQwZGUxNy1kNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf9DkPSDVFIBAhnK8ep537II6MDuQ2fBWnw/3EU1BreJZfokWmpgpMTXWNFk PT2BANQQCoCaI3jbJNwhzylGZf3/Nyq671z8YhavWADKsdkZm451wSVOmruxHh70 rkTQoioZaQT+gl5i5vhfT3fW7pPj+T9vdOBMa3wMJBo7uLm1bxqIYPW7iNM/4xYS qXE5YWEZxpi4U6ySUyiasD3hWKsQ5ZXQg36vkiu7X+bWauFTctZpjc0zEZvukEpT lijVOi1FiQjBURm6Re/UAuX2MRUWvy5rVJhdOePrFFs+jgTFjM0KFE9LoZdgT0C+ JvXvA8OxGqc9SRQ8LV6jrxj87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELgCIMn jCSwqy5aHbiDhC9/Dy1FMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/RTacPcHlQ+tHGikg6CsjExYKwNG99oGkkvdy5N0NWpVtNtG8nIB FwQh2vqoalP7V0JwLz9F76r6LTJyWLSM+ssqsb789Y7sOk9gXo1Gx/kr847QdHh8 OPdOUbtywgnqhchzecCjrzZe6iRklMbtawAJ5QF5xYJs2CajoSlhLJ6wXrLwzNUn mV49D9RIvP72ow1uyII7AtTTtD77eJUqBEFyMkWaaplGPaAKfOYncfWda/TQjiPO EFtcwHguNuy+/u747OOrFxrWvpIGw94gZJm8Ixue2oGVI2+edDK2xKJQyZ2iDta+ m7h2SEisSKFj/S+r/JdEjNXzC81WTOM6 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org