$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: dIbdrwXar7opDFbH6gOrrFXkRMuy/XL5IedZr22io4s= Subject key identifier: ED:A6:63:BC:4F:99:1C:68:57:9B:ED:4A:47:8E:51:4C:77:62:78:E2 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0BFD Signing time: Fri 22 Nov 2024 18:17:41 +0000 Manifest this update: Fri 22 Nov 2024 18:17:40 +0000 Manifest next update: Fri 29 Nov 2024 18:17:40 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: z3y7/ST3jDyK5vEEkps/lhVSpYsApwFVnMIPQdnt+3k=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: v5WnYGiqJFnOk64Cg+XJ95Fr8ijqDqDsbZRgPYZFORE=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: 3MI130qG7qiGy/yPcdkdZX/rmSLfxgXhGaaD2XSdx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Nov 22 18:17:40 2024 GMT Not After : Nov 29 18:17:40 2024 GMT Subject: CN=6740cac4-5862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:e1:d6:98:1a:c4:9c:fc:91:36:e3:81:eb: c5:58:b7:41:db:c3:83:f9:8e:09:f3:8c:6a:53:36: 64:8e:a1:03:86:20:cb:f8:c0:75:90:63:ca:64:53: 3b:bb:b0:79:2d:b4:0c:a1:73:8f:cc:bd:61:b3:06: f4:d2:eb:61:8c:79:17:1b:73:50:4e:b1:1e:2f:43: 6d:e1:92:98:9a:ab:0c:81:74:90:bd:3c:78:8e:5b: 3e:6b:c0:be:02:1a:fb:7b:b5:99:a2:49:4b:f0:28: 4e:89:b9:c6:33:0c:11:a3:05:26:32:75:c3:99:40: 51:90:72:dc:04:8a:62:84:20:a4:54:40:80:e9:61: b8:ce:bb:96:56:f1:12:e9:e8:b0:00:7d:e4:3e:b1: 1a:2d:f4:94:60:00:74:8e:1b:c2:b6:cf:45:36:69: 96:fc:d5:12:7f:9a:32:e1:68:73:dd:16:a9:f2:14: 82:e9:0f:b0:e5:b0:bf:b1:c9:02:39:0c:9d:6c:10: e9:36:46:44:d2:1d:23:4a:ac:9e:56:3d:e3:d3:74: 34:84:dd:8b:7c:20:14:5a:49:33:f7:1b:42:fb:17: a2:10:0e:a1:46:aa:83:f8:41:e2:94:a9:f2:af:f9: f4:19:1f:8c:ce:aa:62:7a:e3:3b:34:e3:6e:36:bf: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A6:63:BC:4F:99:1C:68:57:9B:ED:4A:47:8E:51:4C:77:62:78:E2 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:09:8f:0d:95:94:5d:8b:d9:49:8e:b3:8e:3b:c0:8f:2a:08: c1:ff:a5:b9:b7:e8:61:f8:9a:62:c0:6b:42:2f:4b:87:87:31: 89:ac:af:a5:0d:f6:2a:8e:c9:ba:10:a8:a7:c6:62:49:c5:17: b6:e5:fc:32:05:6b:56:53:b2:c3:13:da:9a:c0:56:b4:db:ab: 1b:56:6d:c6:24:8b:88:76:a7:9d:27:fe:ae:5c:8e:eb:72:1d: 8f:b9:4e:7d:de:13:88:ec:08:fb:bb:05:e3:ab:1e:af:ec:fb: 65:56:8f:1d:ae:be:6e:8e:79:2e:46:ee:77:bb:93:c1:85:ea: a4:4d:45:d1:29:3b:e2:45:0d:55:4a:2b:3e:24:22:2c:32:57: 13:11:9d:6e:f9:bf:e3:74:49:e5:18:7b:0d:97:db:58:c7:db: a5:37:2f:8c:44:c9:4c:82:7a:23:9d:eb:2e:d1:c8:36:49:98: 73:2d:d1:17:fd:be:ed:5f:18:7b:f6:2f:52:6c:cc:32:a8:41: 30:74:5d:5b:36:1c:19:af:cf:64:07:90:3a:09:a2:d4:ea:91: 01:c4:c3:43:bd:9c:42:6a:22:2c:da:da:68:06:d6:bd:bf:ad: 62:94:72:e8:b4:2b:8d:d5:78:40:de:c8:bf:35:e4:59:9b:66: 56:7a:a6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjQxMTIyMTgxNzQwWhcNMjQxMTI5MTgxNzQwWjAYMRYwFAYD VQQDEw02NzQwY2FjNC01ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqULh1pgaxJz8kTbjgevFWLdB28OD+Y4J84xqUzZkjqEDhiDL+MB1kGPKZFM7 u7B5LbQMoXOPzL1hswb00uthjHkXG3NQTrEeL0Nt4ZKYmqsMgXSQvTx4jls+a8C+ Ahr7e7WZoklL8ChOibnGMwwRowUmMnXDmUBRkHLcBIpihCCkVECA6WG4zruWVvES 6eiwAH3kPrEaLfSUYAB0jhvCts9FNmmW/NUSf5oy4Whz3Rap8hSC6Q+w5bC/sckC OQydbBDpNkZE0h0jSqyeVj3j03Q0hN2LfCAUWkkz9xtC+xeiEA6hRqqD+EHilKny r/n0GR+MzqpieuM7NONuNr93twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2mY7xP mRxoV5vtSkeOUUx3YnjiMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiCY8NlZRdi9lJjrOOO8CPKgjB/6W5t+hh+JpiwGtCL0uHhzGJrK+l DfYqjsm6EKinxmJJxRe25fwyBWtWU7LDE9qawFa026sbVm3GJIuIdqedJ/6uXI7r ch2PuU593hOI7Aj7uwXjqx6v7PtlVo8drr5ujnkuRu53u5PBheqkTUXRKTviRQ1V Sis+JCIsMlcTEZ1u+b/jdEnlGHsNl9tYx9ulNy+MRMlMgnojnesu0cg2SZhzLdEX /b7tXxh79i9SbMwyqEEwdF1bNhwZr89kB5A6CaLU6pEBxMNDvZxCaiIs2tpoBta9 v61ilHLotCuN1XhA3si/NeRZm2ZWeqbe -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:13 2024 by rpki-client on console-ams.rpki-client.org