$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: WRDMbDKzogUB3b3grEDkSsptnEJFaPsBUekaQ9nBNDQ= Subject key identifier: 8A:8E:9D:20:DE:78:5E:9E:12:3A:3B:5B:4E:A1:5E:2D:49:8D:DA:2E Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 0F9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 1604 Signing time: Fri 22 Nov 2024 17:29:47 +0000 Manifest this update: Fri 22 Nov 2024 17:29:46 +0000 Manifest next update: Fri 29 Nov 2024 17:29:46 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: 5BTytLsOh/x74irwBczioffzHkCoym703TGi4FiICpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3995 (0xf9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: Nov 22 17:29:46 2024 GMT Not After : Nov 29 17:29:46 2024 GMT Subject: CN=6740bf8a-c373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:6c:a1:15:56:6f:96:19:fb:cd:fa:f3:04: 84:2a:60:fe:c7:09:8b:e8:d5:df:b5:c3:cf:b0:8a: c4:c0:f8:1f:81:b8:33:1d:74:84:ec:0f:ea:f5:33: 37:09:0a:0f:19:95:d3:f0:57:65:f7:65:dd:1f:8e: 58:c7:50:05:fd:e1:5a:d3:a9:da:6d:58:b1:61:2c: 2a:14:34:24:d5:ac:55:ce:1f:f8:23:a6:a7:3e:af: 4f:25:58:68:e4:eb:45:1d:11:f4:13:92:4f:26:74: d4:e3:aa:19:2d:14:ab:a7:b9:37:66:68:81:03:47: 33:01:ea:b0:5b:ee:e4:08:f8:4b:7e:d0:0e:32:65: ce:c4:ec:0c:e2:6b:1f:9a:99:d5:c1:36:00:57:02: 04:2c:7b:f2:b8:78:91:f4:a7:43:23:d8:bf:ed:81: 3b:82:eb:38:d1:fe:8f:fd:a3:8c:56:ef:d9:85:0a: 5c:9e:be:db:7b:5f:54:30:ac:63:dc:40:e8:cd:fd: 45:6b:8c:dc:d7:9e:60:7c:ce:c8:0f:05:8d:4d:8e: 0a:c4:bb:d2:5d:62:ef:c8:90:d0:72:f9:5a:20:86: 5c:26:19:83:f4:7c:8c:8b:d2:7d:a1:41:ee:73:6f: 0b:08:27:fb:67:e9:d8:18:53:2e:7c:60:1b:3b:f3: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:9D:20:DE:78:5E:9E:12:3A:3B:5B:4E:A1:5E:2D:49:8D:DA:2E X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5d:84:7d:38:77:5e:76:88:9f:69:43:07:c2:79:4d:73:d2: d5:18:74:46:a9:69:7b:ec:38:57:2f:4b:82:e9:67:a5:10:9e: 07:65:11:9f:15:7e:e4:4c:62:af:53:1b:80:5e:f0:cf:ab:12: 47:1a:70:4c:42:9e:57:87:e3:53:ca:b2:3b:a7:cf:68:ac:8f: 9d:ea:04:75:15:f9:3d:07:0b:7f:97:4b:b8:71:6c:0e:cb:ee: fe:84:de:f9:13:29:19:b5:44:df:8a:14:d0:09:ea:fb:b9:34: b1:d0:12:e8:85:dc:ea:99:55:c5:2a:1b:e7:12:72:62:07:25: 73:c3:ef:9c:15:7c:cb:a7:0e:43:a7:b0:ff:3d:dd:7e:61:92: e9:85:ec:f8:36:26:52:a2:c8:52:be:72:0e:98:24:b6:6a:01: c2:6e:6d:c2:fd:2d:a0:4c:be:93:6e:03:cf:59:6c:ca:9a:3c: 6a:58:44:b2:b4:e0:af:e6:34:32:7c:71:92:38:63:b7:b8:b1: 05:c0:ab:9b:b3:9b:9c:b2:ca:6e:15:89:cf:a1:32:c4:e9:6a: f7:40:6e:6e:96:a5:a7:d0:d2:7b:c4:fb:d3:bf:67:b9:06:d4: 1b:5c:5c:61:49:f6:3d:9a:f7:dc:ed:a4:d8:17:40:d8:e3:80: d2:2e:58:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjQxMTIyMTcyOTQ2WhcNMjQxMTI5MTcyOTQ2WjAYMRYwFAYD VQQDEw02NzQwYmY4YS1jMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseNsoRVWb5YZ+8368wSEKmD+xwmL6NXftcPPsIrEwPgfgbgzHXSE7A/q9TM3 CQoPGZXT8Fdl92XdH45Yx1AF/eFa06nabVixYSwqFDQk1axVzh/4I6anPq9PJVho 5OtFHRH0E5JPJnTU46oZLRSrp7k3ZmiBA0czAeqwW+7kCPhLftAOMmXOxOwM4msf mpnVwTYAVwIELHvyuHiR9KdDI9i/7YE7gus40f6P/aOMVu/ZhQpcnr7be19UMKxj 3EDozf1Fa4zc155gfM7IDwWNTY4KxLvSXWLvyJDQcvlaIIZcJhmD9HyMi9J9oUHu c28LCCf7Z+nYGFMufGAbO/NBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqOnSDe eF6eEjo7W06hXi1JjdouMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiXYR9OHdedoifaUMHwnlNc9LVGHRGqWl77DhXL0uC6WelEJ4HZRGf FX7kTGKvUxuAXvDPqxJHGnBMQp5Xh+NTyrI7p89orI+d6gR1Ffk9Bwt/l0u4cWwO y+7+hN75EykZtUTfihTQCer7uTSx0BLohdzqmVXFKhvnEnJiByVzw++cFXzLpw5D p7D/Pd1+YZLphez4NiZSoshSvnIOmCS2agHCbm3C/S2gTL6TbgPPWWzKmjxqWESy tOCv5jQyfHGSOGO3uLEFwKubs5ucsspuFYnPoTLE6Wr3QG5ulqWn0NJ7xPvTv2e5 BtQbXFxhSfY9mvfc7aTYF0DY44DSLlje -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org