$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: RdWviBojQKKowKLnAHmW9tEUrRIbEXIs+WpEz7g91l8= Subject key identifier: B0:C9:B3:73:4E:60:18:98:B0:26:8C:D8:83:91:C8:6C:B4:DA:11:78 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 35AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 34FE Signing time: Sun 24 Nov 2024 14:27:23 +0000 Manifest this update: Sun 24 Nov 2024 14:27:22 +0000 Manifest next update: Sun 01 Dec 2024 14:27:22 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: sye/HaIIrEoXMnmasqHrfaIy5qlhGSmlMTNPLilpMC0=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: KQxG83a0X5caNzZPXZUoZf9OVB3NUDw7aVDZZc4ullg=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: bBkt7enT88SRnJFTpBPLURewCJmnh9TTKfLXv4KFsQo=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: UGq/FTCZQ7FhckK2ZxCO/5YcR0nz7NOxc2RauGEBdPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Nov 24 14:27:22 2024 GMT Not After : Dec 1 14:27:22 2024 GMT Subject: CN=674337ca-80fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:1b:36:1c:ef:0d:62:4d:e0:75:b9:5b:d5: 76:3e:34:68:da:0d:80:2b:ab:12:45:66:92:03:53: 73:cc:1f:b2:31:29:94:e6:f0:43:ee:12:7c:d2:c1: e1:93:94:d6:3a:71:54:ea:f7:29:20:72:ba:fc:7d: 33:60:7f:1e:f9:d6:77:df:fd:38:cb:8a:d1:e1:cc: d8:51:87:58:bf:cf:2a:13:b8:eb:65:24:a2:7e:4f: f1:89:5d:c4:ab:f4:fd:14:d4:76:3d:ec:2c:c3:0f: ab:7a:8a:4f:9d:c7:74:92:4e:79:87:62:78:28:d7: c0:82:66:f7:51:73:12:30:ac:b5:62:aa:8d:e4:07: 27:f7:b1:58:11:35:90:37:41:3d:03:ef:ff:1a:0b: 75:60:8a:5a:b9:f9:1a:bd:3d:07:10:ed:81:bb:8d: 60:ac:c8:40:04:8f:aa:f9:e7:1a:38:c1:f9:0c:19: cf:a7:a6:a2:76:80:93:fa:a0:73:d4:ef:f2:11:d0: 35:af:71:0f:36:66:74:41:4c:dc:85:2f:2c:94:3f: a0:a7:4d:8e:9c:5d:db:01:3f:b0:e5:80:1e:5b:3d: 95:21:19:ee:8c:63:39:5f:86:ad:e9:35:64:7b:cf: bb:a8:18:4b:aa:92:6f:15:8b:0d:dc:e6:2c:36:0f: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C9:B3:73:4E:60:18:98:B0:26:8C:D8:83:91:C8:6C:B4:DA:11:78 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1b:c8:0c:f5:65:c8:26:a7:7d:0c:be:24:00:7e:f3:26:f5: 1c:e6:d2:e6:3b:44:c7:28:90:f8:fc:81:df:8c:ae:dd:09:18: da:37:52:ab:5b:d0:88:a0:56:a9:56:d4:62:10:37:df:64:bd: e7:88:26:6d:1a:a0:64:82:78:33:a3:c1:b8:68:8a:84:a2:0b: f2:39:41:86:f9:07:6f:a5:e5:4a:4b:2e:d6:92:b0:80:63:48: 98:c2:5b:2e:b2:c1:a2:b3:4a:23:64:8b:20:29:97:f6:e2:b6: 10:7a:b5:8a:81:d9:25:44:db:2d:ec:9a:4b:70:06:d6:84:a1: 1b:b1:36:93:06:8b:88:7a:0a:14:72:ae:60:ce:57:a9:a9:eb: 6f:cf:d9:4b:d1:2a:ed:a0:c6:80:eb:bb:54:5f:53:ab:73:df: 62:8b:71:7d:18:ec:0f:c9:41:aa:7a:76:aa:d5:84:d4:70:43: 3b:91:7c:75:6d:ec:bf:5f:31:af:3b:1d:07:27:18:bd:91:6c: 87:b6:a4:d7:d3:e9:19:4d:fe:df:f7:47:63:68:bb:64:06:1c: 28:9c:65:5e:fe:29:65:6e:33:2b:ce:1b:c6:b2:b2:7c:65:d4: 63:52:fe:7d:b4:b7:c6:dd:c7:5d:58:3f:6e:85:16:21:41:85: 38:27:a9:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjQxMTI0MTQyNzIyWhcNMjQxMjAxMTQyNzIyWjAYMRYwFAYD VQQDEw02NzQzMzdjYS04MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M4bNhzvDWJN4HW5W9V2PjRo2g2AK6sSRWaSA1NzzB+yMSmU5vBD7hJ80sHh k5TWOnFU6vcpIHK6/H0zYH8e+dZ33/04y4rR4czYUYdYv88qE7jrZSSifk/xiV3E q/T9FNR2Pewsww+reopPncd0kk55h2J4KNfAgmb3UXMSMKy1YqqN5Acn97FYETWQ N0E9A+//Ggt1YIpaufkavT0HEO2Bu41grMhABI+q+ecaOMH5DBnPp6aidoCT+qBz 1O/yEdA1r3EPNmZ0QUzchS8slD+gp02OnF3bAT+w5YAeWz2VIRnujGM5X4at6TVk e8+7qBhLqpJvFYsN3OYsNg+S4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDJs3NO YBiYsCaM2IORyGy02hF4MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJG8gM9WXIJqd9DL4kAH7zJvUc5tLmO0THKJD4/IHfjK7dCRjaN1Kr W9CIoFapVtRiEDffZL3niCZtGqBkgngzo8G4aIqEogvyOUGG+QdvpeVKSy7WkrCA Y0iYwlsussGis0ojZIsgKZf24rYQerWKgdklRNst7JpLcAbWhKEbsTaTBouIegoU cq5gzlepqetvz9lL0SrtoMaA67tUX1Orc99ii3F9GOwPyUGqenaq1YTUcEM7kXx1 bey/XzGvOx0HJxi9kWyHtqTX0+kZTf7f90djaLtkBhwonGVe/illbjMrzhvGsrJ8 ZdRjUv59tLfG3cddWD9uhRYhQYU4J6lQ -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:18 2024 by rpki-client on console-ams.rpki-client.org