$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: 4DCBehB1SiKArbwXSIiKX4JBDcLv22LZqIlslSSdus0= Subject key identifier: 13:8B:CD:00:08:4F:67:0D:07:7F:BE:4D:D0:1A:BC:77:EA:5D:68:9E Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0C43 Signing time: Fri 22 Nov 2024 18:10:01 +0000 Manifest this update: Fri 22 Nov 2024 18:10:00 +0000 Manifest next update: Fri 29 Nov 2024 18:10:00 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: w6omtlLNutJ9VZyH+LNjnQA2DZj8CPf+W/x/5kXBFe0=) 2: D0566D20F25411E9AEDBEA62C4F9AE02.roa (hash: JRm3KZLihVfX2Mjt/YikIApeielUsAEctutVAu4actQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Nov 22 18:10:00 2024 GMT Not After : Nov 29 18:10:00 2024 GMT Subject: CN=6740c8f9-62c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:37:1a:2c:72:c0:c8:49:07:20:fe:45:bf: 76:2d:57:08:ac:81:4c:63:26:9f:f0:67:06:f9:11: 29:79:7f:9d:fa:b1:ac:5a:64:a5:c2:8e:ca:ef:16: 3c:68:40:1a:43:ec:4a:05:22:62:41:dd:38:ab:1a: ae:e4:59:39:90:a7:3b:96:32:13:8b:42:c3:57:2b: c0:cf:b9:d9:46:08:5b:58:df:5e:b2:5f:64:73:23: 57:3c:c5:81:e9:c6:b8:09:eb:7c:a7:4c:f6:da:17: 3b:91:f1:37:59:13:01:0a:55:08:48:12:09:c9:8f: 5d:2a:38:ff:bd:df:26:54:37:04:de:f5:be:00:ca: fd:dc:95:56:7a:37:25:6d:32:4a:f3:cf:6d:87:8a: 7c:f2:0e:a7:13:54:5b:49:04:e4:1f:7c:4c:e0:93: 38:93:93:5b:11:0f:3d:c9:a5:ce:0b:3d:32:0d:4f: 1c:ea:0c:25:61:a8:77:69:22:19:e6:00:52:91:6e: cd:b2:e8:8c:59:7c:6b:e2:e7:3f:e1:e2:55:99:73: f3:e3:59:3c:12:f7:e8:31:c0:36:d6:86:f1:54:2e: 3e:72:71:e2:e8:5a:88:0a:ba:1f:b6:88:88:09:e5: 7b:83:02:07:82:e3:9c:0f:02:d5:be:77:0d:f1:d9: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8B:CD:00:08:4F:67:0D:07:7F:BE:4D:D0:1A:BC:77:EA:5D:68:9E X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:17:f1:d6:39:29:a5:38:54:4c:de:20:f3:2e:9a:ad:fc:bc: 1f:39:d2:b0:b3:c3:73:a4:57:f9:71:b4:24:06:84:d1:65:e8: 19:40:5f:22:5e:b1:23:23:8d:43:f2:c9:cc:fd:24:ad:cf:23: 4d:3a:7e:b2:ce:d2:35:04:f7:77:28:db:c0:96:fe:de:65:e9: 50:6a:99:2d:20:1e:8c:b4:56:41:0d:50:d3:55:d7:3e:6a:32: a6:76:87:85:e3:7f:7b:6c:11:fc:5c:78:40:64:82:6d:c1:42: f8:90:06:73:35:e1:50:3e:8f:55:bd:c7:db:5d:5d:b9:2b:90: 3f:3e:12:9a:3c:5b:e7:d5:a8:21:c6:2e:32:76:41:f1:6b:94: 23:18:bd:0e:65:69:35:12:c6:7f:5f:7c:2f:6b:10:b6:d3:3c: 00:dd:22:ad:29:e7:ce:96:da:4e:2f:73:ac:20:bc:13:37:32: 27:67:cd:3b:ee:0e:ec:40:da:59:6e:02:2c:3c:ad:72:56:9f: f5:c2:e1:2e:ed:59:56:61:69:7d:7d:3c:f8:61:b0:49:59:08: 48:f2:e0:4a:b8:36:85:25:ff:bb:78:4e:23:90:50:42:47:29: 31:8c:58:7f:46:0c:9f:29:f4:ef:56:ee:99:82:89:2c:39:75: db:5c:0c:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjQxMTIyMTgxMDAwWhcNMjQxMTI5MTgxMDAwWjAYMRYwFAYD VQQDEw02NzQwYzhmOS02MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY43GixywMhJByD+Rb92LVcIrIFMYyaf8GcG+REpeX+d+rGsWmSlwo7K7xY8 aEAaQ+xKBSJiQd04qxqu5Fk5kKc7ljITi0LDVyvAz7nZRghbWN9esl9kcyNXPMWB 6ca4Cet8p0z22hc7kfE3WRMBClUISBIJyY9dKjj/vd8mVDcE3vW+AMr93JVWejcl bTJK889th4p88g6nE1RbSQTkH3xM4JM4k5NbEQ89yaXOCz0yDU8c6gwlYah3aSIZ 5gBSkW7NsuiMWXxr4uc/4eJVmXPz41k8EvfoMcA21obxVC4+cnHi6FqICroftoiI CeV7gwIHguOcDwLVvncN8dn3rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOLzQAI T2cNB3++TdAavHfqXWieMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMF/HWOSmlOFRM3iDzLpqt/LwfOdKws8NzpFf5cbQkBoTRZegZQF8i XrEjI41D8snM/SStzyNNOn6yztI1BPd3KNvAlv7eZelQapktIB6MtFZBDVDTVdc+ ajKmdoeF4397bBH8XHhAZIJtwUL4kAZzNeFQPo9VvcfbXV25K5A/PhKaPFvn1agh xi4ydkHxa5QjGL0OZWk1EsZ/X3wvaxC20zwA3SKtKefOltpOL3OsILwTNzInZ807 7g7sQNpZbgIsPK1yVp/1wuEu7VlWYWl9fTz4YbBJWQhI8uBKuDaFJf+7eE4jkFBC RykxjFh/RgyfKfTvVu6ZgoksOXXbXAxt -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org