$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json) Hash identifier: AzgKvsu9tOrHPfGCDeiePCG3VOQyd7qecAxfchFOgyA= Subject key identifier: B2:2F:F9:E1:5E:2E:99:88:22:3D:09:EC:84:FD:AB:1A:EA:41:B4:26 Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft Manifest number: 0141 Signing time: Sat 23 Nov 2024 02:41:46 +0000 Manifest this update: Sat 23 Nov 2024 02:41:46 +0000 Manifest next update: Sat 30 Nov 2024 02:41:46 +0000 Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: ajD6HDtxfo7n48tOEtXY51vG5GkrCxqtiWiXxV9bIBY=) 2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: bAtzTQ6ksGlovLoJiFT89uWNFpngQdeDkCpn1zXsqCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: Nov 23 02:41:46 2024 GMT Not After : Nov 30 02:41:46 2024 GMT Subject: CN=674140ea-bea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:11:35:0d:f1:f7:96:b8:2e:37:79:f2:5c: 81:bb:15:1c:2d:d8:ed:fa:3c:cd:50:9d:a8:2e:f9: 42:fb:67:83:2e:05:16:2b:a0:ac:ea:35:8a:1a:7f: de:ff:98:29:63:25:76:6a:0a:b7:f2:4f:01:65:0d: df:95:b7:fd:fa:05:4b:52:6b:45:cf:e0:df:4f:16: ba:34:5f:01:07:c8:3a:ce:17:c9:16:45:c2:12:a1: 75:0e:00:83:01:33:04:76:cd:08:82:84:fc:36:ac: 2f:c5:c1:18:88:bb:06:80:02:f9:25:03:cb:f0:86: a0:6a:75:5f:92:8a:7a:ee:ff:4c:82:ed:57:d0:fa: b9:61:c2:94:3b:56:8d:8a:01:94:ad:c6:67:f5:2e: b4:61:c4:ea:bb:ee:2b:b8:15:93:ba:e8:52:66:1a: 6d:b4:dd:4a:d4:a0:8e:9b:d7:ee:d6:ee:aa:4e:a7: b6:b1:79:0b:26:62:71:08:37:f3:d0:55:ee:0b:9d: dd:ba:4b:12:db:56:47:d8:03:1e:7c:b0:cb:96:74: 05:94:b8:f2:52:19:ae:01:fd:f4:67:4a:8f:66:39: cb:4a:e9:e3:09:90:ab:ed:51:fe:4a:36:0c:07:37: 06:8c:4c:f7:7e:c1:e2:a6:c8:67:d6:8b:58:e6:48: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2F:F9:E1:5E:2E:99:88:22:3D:09:EC:84:FD:AB:1A:EA:41:B4:26 X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d4:20:63:0f:64:f9:64:47:39:6a:5e:4f:48:64:3a:d0:88: bf:c9:86:f3:9d:78:2d:66:81:e9:6e:cd:b9:00:c5:81:23:e1: bf:08:ab:67:a3:e8:57:72:0b:e3:1f:cf:aa:41:1d:84:e1:54: db:1e:c4:c2:32:d3:1a:1b:f8:be:f9:3d:6f:72:b9:01:73:76: 1a:18:a5:53:6b:0d:ad:b9:cf:7f:6c:13:d5:01:07:20:8e:08: 68:65:b3:1f:36:ff:f4:1e:7c:68:6d:45:fc:3c:a4:73:40:72: 18:a0:6e:b3:63:06:25:cc:19:41:1c:b3:0e:c6:63:d0:d1:a0: 98:73:e3:8a:54:e4:5a:6e:6a:4d:16:2a:d7:74:5a:c8:6f:a3: fd:b7:b8:f4:2e:30:8f:f9:ad:57:b6:64:d4:3e:88:c3:2a:ec: 34:9c:f3:a7:24:c7:39:b9:6a:6d:c3:d8:90:4b:a6:30:c2:cb: 4e:28:8a:80:5f:f0:b6:1f:5c:04:fa:77:50:8f:6c:f0:19:95: 3b:a7:9a:ae:ae:3b:80:f1:6a:b6:4f:d5:da:49:88:9d:8b:4c: f3:b1:f5:13:03:3e:28:ad:08:1b:6e:7b:63:c2:f0:4a:43:83: 60:89:f0:20:67:bf:4d:1e:37:18:17:f9:f6:35:9e:db:d5:c5: 51:65:59:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjQxMTIzMDI0MTQ2WhcNMjQxMTMwMDI0MTQ2WjAYMRYwFAYD VQQDEw02NzQxNDBlYS1iZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3cRNQ3x95a4Ljd58lyBuxUcLdjt+jzNUJ2oLvlC+2eDLgUWK6Cs6jWKGn/e /5gpYyV2agq38k8BZQ3flbf9+gVLUmtFz+DfTxa6NF8BB8g6zhfJFkXCEqF1DgCD ATMEds0IgoT8NqwvxcEYiLsGgAL5JQPL8IaganVfkop67v9Mgu1X0Pq5YcKUO1aN igGUrcZn9S60YcTqu+4ruBWTuuhSZhpttN1K1KCOm9fu1u6qTqe2sXkLJmJxCDfz 0FXuC53duksS21ZH2AMefLDLlnQFlLjyUhmuAf30Z0qPZjnLSunjCZCr7VH+SjYM BzcGjEz3fsHipshn1otY5kh3VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIv+eFe LpmIIj0J7IT9qxrqQbQmMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a bkZlUVFvdHhiOHJsUWtxSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc1CBjD2T5ZEc5al5PSGQ60Ii/yYbznXgtZoHpbs25AMWBI+G/CKtn o+hXcgvjH8+qQR2E4VTbHsTCMtMaG/i++T1vcrkBc3YaGKVTaw2tuc9/bBPVAQcg jghoZbMfNv/0HnxobUX8PKRzQHIYoG6zYwYlzBlBHLMOxmPQ0aCYc+OKVORabmpN FirXdFrIb6P9t7j0LjCP+a1XtmTUPojDKuw0nPOnJMc5uWptw9iQS6YwwstOKIqA X/C2H1wE+ndQj2zwGZU7p5qurjuA8Wq2T9XaSYidi0zzsfUTAz4orQgbbntjwvBK Q4NgifAgZ79NHjcYF/n2NZ7b1cVRZVkf -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org