$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: 40hEj18yZYNwq6pNzrv3aiLeyXK9r263YCZpMkIlKx4= Subject key identifier: 0C:E3:E5:24:CE:77:EF:20:8F:54:CC:F3:53:17:7A:01:B7:C8:80:89 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0314 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 030F Signing time: Wed 27 Nov 2024 00:47:19 +0000 Manifest this update: Wed 27 Nov 2024 00:47:18 +0000 Manifest next update: Wed 04 Dec 2024 00:47:18 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: gflQtgP4eBlJHmPQdcFRpFg8BgQgGSNnwur1LI5Y/u4=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: Q0fNfLOcKzzEZus7R55E69tTYXEUxIWv89YZB7PtU84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 00:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Nov 27 00:47:18 2024 GMT Not After : Dec 4 00:47:18 2024 GMT Subject: CN=67466c17-7f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:4e:b1:eb:a1:de:b4:59:ba:8f:91:5f:93: f5:2d:1e:e9:b2:bc:ef:85:1e:61:23:f9:48:ec:af: 78:df:2a:66:09:27:75:19:ca:57:21:8f:6b:00:ab: d4:8c:de:97:d4:19:97:1a:b3:1d:e7:84:de:48:70: 08:02:0f:a9:04:46:e3:e7:57:81:56:dd:7a:c3:f8: 73:f2:36:fb:ac:a1:a1:52:e1:31:f8:6b:9c:e1:20: db:fd:90:e5:98:cc:94:b1:f1:06:7a:82:39:07:f4: 03:a8:24:cd:e2:aa:6d:ab:21:04:9d:05:97:62:eb: 2e:96:ee:6d:fa:b9:e0:08:df:98:c8:64:24:9f:e1: 4f:ba:80:31:ce:ac:d2:03:fb:6d:a7:7b:12:29:9f: 82:5c:f8:61:56:34:30:62:dd:ce:66:cf:3c:dd:f5: b7:ba:d5:f4:d9:bd:0f:4b:64:97:e2:77:ef:6e:3b: 1a:15:08:df:93:98:f4:5e:0e:17:e3:83:3c:37:de: 90:c3:c5:82:07:30:fe:39:93:e4:06:ff:e5:7e:1e: aa:e9:12:0b:a4:81:a5:e9:af:3c:a4:17:10:3b:19: 62:77:04:7b:5d:2c:36:a3:e2:2e:85:f8:c1:5b:c3: 9d:42:c5:97:f9:75:9f:37:ed:2b:30:d7:76:a2:a2: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:E5:24:CE:77:EF:20:8F:54:CC:F3:53:17:7A:01:B7:C8:80:89 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:76:16:dd:4f:97:6a:67:7b:bb:81:0e:e8:58:75:b2:6d:3c: cd:15:36:4b:e5:0d:0f:41:43:2d:28:48:58:28:8f:bf:8a:f0: 4a:76:0a:61:f4:a5:46:97:92:3f:cc:9d:e5:81:67:ce:d7:1e: d2:13:2a:93:59:7b:25:3b:a8:dd:7f:c4:c6:3c:00:4f:c3:8c: 78:7b:63:dc:36:ba:fc:67:e3:79:2c:85:5b:d6:a7:b3:4e:01: 3f:19:ed:58:67:2a:51:51:9c:7d:07:e5:64:97:a9:a1:41:08: b7:41:ec:56:5f:d3:39:85:0c:e7:ea:f4:22:a7:5f:9d:f3:93: 19:4c:da:a6:8c:7f:72:d2:b9:f6:f4:9e:1f:8b:bc:64:e2:9d: 90:56:3d:67:4e:a6:1d:4b:b8:f8:e3:25:d8:67:0a:42:99:87: f1:45:ac:64:18:16:eb:dc:1d:85:89:9c:0b:62:b2:09:00:5f: 9f:2c:97:ab:44:1b:98:5e:c8:41:ef:bb:e8:46:e1:6e:33:d3: 9f:0d:93:09:13:d1:76:fd:f1:d0:47:d3:b3:0f:ab:82:46:5f: cf:8e:a7:62:b0:16:f9:c4:9a:cb:e0:bf:f9:d6:63:52:79:f7: e4:b0:7d:b5:12:ae:ab:54:75:75:9d:8f:6f:b8:61:c2:f1:44: f8:9b:57:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjQxMTI3MDA0NzE4WhcNMjQxMjA0MDA0NzE4WjAYMRYwFAYD VQQDEw02NzQ2NmMxNy03Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbBOseuh3rRZuo+RX5P1LR7psrzvhR5hI/lI7K943ypmCSd1GcpXIY9rAKvU jN6X1BmXGrMd54TeSHAIAg+pBEbj51eBVt16w/hz8jb7rKGhUuEx+Guc4SDb/ZDl mMyUsfEGeoI5B/QDqCTN4qptqyEEnQWXYusulu5t+rngCN+YyGQkn+FPuoAxzqzS A/ttp3sSKZ+CXPhhVjQwYt3OZs883fW3utX02b0PS2SX4nfvbjsaFQjfk5j0Xg4X 44M8N96Qw8WCBzD+OZPkBv/lfh6q6RILpIGl6a88pBcQOxlidwR7XSw2o+IuhfjB W8OdQsWX+XWfN+0rMNd2oqJX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzj5STO d+8gj1TM81MXegG3yICJMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAydhbdT5dqZ3u7gQ7oWHWybTzNFTZL5Q0PQUMtKEhYKI+/ivBKdgph 9KVGl5I/zJ3lgWfO1x7SEyqTWXslO6jdf8TGPABPw4x4e2PcNrr8Z+N5LIVb1qez TgE/Ge1YZypRUZx9B+Vkl6mhQQi3QexWX9M5hQzn6vQip1+d85MZTNqmjH9y0rn2 9J4fi7xk4p2QVj1nTqYdS7j44yXYZwpCmYfxRaxkGBbr3B2FiZwLYrIJAF+fLJer RBuYXshB77voRuFuM9OfDZMJE9F2/fHQR9OzD6uCRl/PjqdisBb5xJrL4L/51mNS effksH21Eq6rVHV1nY9vuGHC8UT4m1cZ -----END CERTIFICATE-----Generated at Wed Nov 27 02:21:09 2024 by rpki-client on console-fra.rpki-client.org