$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json) Hash identifier: OnucXeyFmWvCn1lP4Xfex1A2mF02O/b5aL2R5bOBP08= Subject key identifier: FB:22:C3:31:AD:A6:35:D4:1B:67:89:27:54:A2:90:91:38:64:A8:18 Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft Manifest number: 013D Signing time: Sat 23 Nov 2024 02:40:44 +0000 Manifest this update: Sat 23 Nov 2024 02:40:44 +0000 Manifest next update: Sat 30 Nov 2024 02:40:44 +0000 Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: n03iscVaH75jtWf5NrzYOk6V3q+wVoUZHgZohGE6uEA=) 2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: kNqmZ3FjK582qLYE+Ju01BtqotCDz4PwGxpxzQp9l4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Validity Not Before: Nov 23 02:40:44 2024 GMT Not After : Nov 30 02:40:44 2024 GMT Subject: CN=674140ac-64d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:1a:26:93:16:6d:ea:97:20:d0:32:b8:87: 73:a1:17:49:c5:61:d6:82:e6:62:9a:42:3d:ad:04: 8f:0f:c9:d2:20:64:51:c5:64:b8:a2:b1:45:b1:cb: cd:69:70:9c:e5:ad:08:c9:e9:eb:5b:d9:5b:45:84: 68:e7:b0:ff:86:e6:41:d2:ba:3a:e6:7e:b4:a6:cd: 27:7a:d8:84:3c:18:87:46:b1:4c:0f:41:84:23:18: 5d:b8:b2:76:34:c7:2a:f5:86:f1:da:2d:0a:82:54: e1:fd:16:8c:14:9c:c8:f7:c3:dc:80:f4:26:0f:89: 02:27:1d:fa:df:32:d5:87:e0:c9:5a:16:c4:7c:33: 52:4a:13:1b:7a:db:19:d6:a2:fc:18:80:87:a7:1c: a9:1e:68:0c:3c:75:b1:28:52:f4:4f:8b:5c:9c:db: 0b:5a:80:bc:ff:4e:ac:e5:99:12:7e:97:31:ea:2a: c3:aa:77:0e:f3:1d:61:e2:8c:f0:22:8d:53:a1:e9: 02:87:fb:0b:59:06:4a:24:f5:db:17:dd:de:90:72: 24:d7:6b:11:c2:7b:8c:a1:8d:a1:96:b8:ec:09:ea: 91:c2:ac:ce:55:68:49:e1:36:19:15:3d:2c:e1:fb: 7c:d4:1f:1c:c2:d5:ab:79:c0:32:29:52:cf:61:35: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:22:C3:31:AD:A6:35:D4:1B:67:89:27:54:A2:90:91:38:64:A8:18 X509v3 Authority Key Identifier: keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:76:5c:cd:d0:b7:8c:13:56:4c:74:b4:bb:e0:c7:18:17:40: e9:3d:f8:33:4f:bd:e2:54:38:dc:0e:26:a7:12:ab:7f:62:a0: 12:30:fc:eb:19:d1:1f:49:b9:d9:8c:07:d3:40:99:9d:f2:03: 2e:2a:75:bf:51:4c:a5:82:36:67:d4:9e:72:9d:e5:a7:78:e8: fe:bf:4f:98:fe:a4:34:14:26:17:6b:b6:3a:58:df:1d:5c:f4: 82:07:6f:ee:d9:00:a4:7f:11:8c:1d:49:97:fb:85:66:41:d2: 6f:ad:42:4e:f7:ff:a6:0d:eb:0d:50:1a:4f:c8:e7:a0:87:e4: ae:c8:e7:b8:1b:75:5d:21:ed:29:00:37:e3:ba:f5:a3:2c:9e: e1:60:3e:72:3f:45:32:f2:25:3b:46:3e:77:19:92:71:7a:8b: de:66:a8:af:de:41:d4:b2:2a:31:e7:76:a4:00:ff:d0:8d:fd: fc:52:51:e4:61:91:5c:77:39:5d:0d:52:c0:00:10:4a:60:fd: 6b:34:80:f2:ad:7d:02:8a:df:9f:4e:f0:5d:23:07:29:1a:1f: f5:9f:ba:eb:d7:62:eb:f7:7b:04:ba:9f:73:f8:c7:0d:4a:a5: 48:5a:fd:7b:eb:0c:91:8d:b9:4d:23:ca:ff:67:2c:7f:30:4d: 56:e9:9e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5 NDdCRTA5MkEwHhcNMjQxMTIzMDI0MDQ0WhcNMjQxMTMwMDI0MDQ0WjAYMRYwFAYD VQQDEw02NzQxNDBhYy02NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFsaJpMWbeqXINAyuIdzoRdJxWHWguZimkI9rQSPD8nSIGRRxWS4orFFscvN aXCc5a0IyenrW9lbRYRo57D/huZB0ro65n60ps0netiEPBiHRrFMD0GEIxhduLJ2 NMcq9Ybx2i0KglTh/RaMFJzI98PcgPQmD4kCJx363zLVh+DJWhbEfDNSShMbetsZ 1qL8GICHpxypHmgMPHWxKFL0T4tcnNsLWoC8/06s5ZkSfpcx6irDqncO8x1h4ozw Io1ToekCh/sLWQZKJPXbF93ekHIk12sRwnuMoY2hlrjsCeqRwqzOVWhJ4TYZFT0s 4ft81B8cwtWrecAyKVLPYTWoGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsiwzGt pjXUG2eJJ1SikJE4ZKgYMB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0 QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi enJmc2RjRjRZUHVVZS1DU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhdlzN0LeME1ZMdLS74McYF0DpPfgzT73iVDjcDianEqt/YqASMPzr GdEfSbnZjAfTQJmd8gMuKnW/UUylgjZn1J5yneWneOj+v0+Y/qQ0FCYXa7Y6WN8d XPSCB2/u2QCkfxGMHUmX+4VmQdJvrUJO9/+mDesNUBpPyOegh+SuyOe4G3VdIe0p ADfjuvWjLJ7hYD5yP0Uy8iU7Rj53GZJxeoveZqiv3kHUsiox53akAP/Qjf38UlHk YZFcdzldDVLAABBKYP1rNIDyrX0Cit+fTvBdIwcpGh/1n7rr12Lr93sEup9z+McN SqVIWv176wyRjblNI8r/Zyx/ME1W6Z52 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org