$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json) Hash identifier: yXaEZGURkl+AG07hvtaTP5cmoAb0umpps3TCoJtiC6s= Subject key identifier: 49:B5:D0:9B:D5:7D:FA:54:4B:25:80:78:75:66:F7:4A:B0:05:EB:B7 Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft Manifest number: 06 Signing time: Sat 23 Nov 2024 06:09:29 +0000 Manifest this update: Sat 23 Nov 2024 06:09:29 +0000 Manifest next update: Sat 30 Nov 2024 06:09:29 +0000 Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: wNBUbVuUu2bT8lwLP9W7M3l1d5bcEK2zPdb68TFaD7w=) 2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: 5VAXQpUtw8xIvHUo10IcjgkVVxX2TxpUjbL3TgQaqhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Validity Not Before: Nov 23 06:09:29 2024 GMT Not After : Nov 30 06:09:29 2024 GMT Subject: CN=67417199-72da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:34:c6:53:d2:35:55:83:94:29:a0:c6:4f: d7:8f:75:a7:23:e1:98:c7:e4:e1:e9:c9:ad:8b:71: 14:16:ae:d9:7e:cb:3a:55:bd:d7:91:63:4f:be:9c: c7:94:06:24:46:aa:c3:45:fe:d0:ac:84:8a:f8:ca: d0:4c:d7:b2:47:b7:c3:01:ee:05:94:2e:35:38:e2: da:01:1b:59:11:8e:0f:7b:38:fd:d3:3e:d5:01:0d: 23:ff:ba:2b:df:e8:b1:65:a6:1f:57:fa:2c:6b:43: b4:c3:37:8d:b4:8e:57:bf:c4:e8:80:06:f5:36:5b: 3e:25:c7:8e:e9:8e:bb:60:4c:10:64:bf:4a:ee:05: ed:d1:44:c1:ca:da:73:bf:94:25:3f:ec:0b:5b:62: 70:c0:c8:a5:6e:09:4f:be:7f:7c:2c:64:18:5f:2f: 15:8c:aa:86:9b:6f:e6:cb:cd:df:f7:3c:13:c8:fb: 98:44:e3:92:b5:4a:f1:35:bb:20:3b:fc:e7:1c:a7: cc:a0:3a:2d:b9:60:37:e8:c2:f1:dd:af:92:68:8c: c9:51:0e:b2:73:a1:44:73:d7:c0:ed:b0:c7:42:3d: 90:9e:ab:99:1e:5d:1d:60:c2:04:fb:0d:7c:5c:52: 93:6e:fd:c4:a1:1b:22:ba:f7:72:23:f8:2a:d1:4d: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:D0:9B:D5:7D:FA:54:4B:25:80:78:75:66:F7:4A:B0:05:EB:B7 X509v3 Authority Key Identifier: keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ec:c8:c8:27:f0:10:10:5e:59:7c:f2:e8:37:7e:f5:bb:22: a5:28:4e:73:ce:88:d3:1c:6a:1a:fb:7b:92:02:bb:3a:9b:71: 1f:af:e9:93:94:cb:be:1e:3b:d9:8e:08:dd:f1:1b:c1:de:ba: 98:93:9b:4e:a6:e0:c0:84:52:80:26:26:aa:2b:dd:9f:21:d2: d9:8d:6d:9d:24:3b:2e:38:01:eb:e4:98:cd:a0:28:6a:e7:9f: 4a:8b:5a:9a:12:ae:fa:0c:9e:99:5d:a4:02:08:dc:79:ca:27: 72:e6:f5:82:bb:fc:77:61:57:bd:71:1d:fb:2b:2f:43:5a:e4: fa:95:0f:a4:e5:95:97:42:8e:ea:52:0e:ae:7b:bc:82:76:9a: e1:73:9e:8a:29:0b:6f:cc:9d:0a:76:55:c5:b2:56:56:a2:13: 97:74:08:5e:b1:e8:39:36:1f:03:cb:02:8f:b9:74:75:51:47: 5f:3f:74:98:68:b4:2d:0a:27:7b:88:96:05:92:e5:8d:ff:53: f4:52:1f:ff:fc:ea:00:b6:e4:3e:a3:f7:15:35:0c:d9:8a:06: 6c:f9:3c:e3:cb:03:cc:bb:aa:e6:37:7f:27:0a:f2:a5:8e:2a: e2:04:e6:ce:4f:80:4d:e5:f6:c7:95:22:b5:ca:ae:08:58:65: 9a:7f:6e:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzMxQzExMC8GA1UEBRMoNDBGQUE3MEY4QTIzQTAzRDE2QTExMDg2REJFNTAyRTg2 MjE2NDk2NzAeFw0yNDExMjMwNjA5MjlaFw0yNDExMzAwNjA5MjlaMBgxFjAUBgNV BAMTDTY3NDE3MTk5LTcyZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCazTGU9I1VYOUKaDGT9ePdacj4ZjH5OHpya2LcRQWrtl+yzpVvdeRY0++nMeU BiRGqsNF/tCshIr4ytBM17JHt8MB7gWULjU44toBG1kRjg97OP3TPtUBDSP/uivf 6LFlph9X+ixrQ7TDN420jle/xOiABvU2Wz4lx47pjrtgTBBkv0ruBe3RRMHK2nO/ lCU/7AtbYnDAyKVuCU++f3wsZBhfLxWMqoabb+bLzd/3PBPI+5hE45K1SvE1uyA7 /Occp8ygOi25YDfowvHdr5JojMlRDrJzoURz18DtsMdCPZCeq5keXR1gwgT7DXxc UpNu/cShGyK693Ij+CrRTTQ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSbXQm9V9 +lRLJYB4dWb3SrAF67cwHwYDVR0jBBgwFoAUQPqnD4ojoD0WoRCG2+UC6GIWSWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMzFDL0YxMDdEQTEwQTZD RjExRUZCMkZCQjU3REM0RjlBRTAyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBxbkQ0b2pvRDBXb1JDRzItVUM2R0lXU1djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MzFDL0YxMDdEQTEwQTZDRjExRUZCMkZCQjU3REM0RjlBRTAyL1FQcW5ENG9qb0Qw V29SQ0cyLVVDNkdJV1NXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTsyMgn8BAQXll88ug3fvW7IqUoTnPOiNMcahr7e5ICuzqbcR+v6ZOU y74eO9mOCN3xG8HeupiTm06m4MCEUoAmJqor3Z8h0tmNbZ0kOy44AevkmM2gKGrn n0qLWpoSrvoMnpldpAII3HnKJ3Lm9YK7/HdhV71xHfsrL0Na5PqVD6TllZdCjupS Dq57vIJ2muFznoopC2/MnQp2VcWyVlaiE5d0CF6x6Dk2HwPLAo+5dHVRR18/dJho tC0KJ3uIlgWS5Y3/U/RSH//86gC25D6j9xU1DNmKBmz5POPLA8y7quY3fycK8qWO KuIE5s5PgE3l9seVIrXKrghYZZp/bls= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org