$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft File: QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json) Hash identifier: HV+xlQ+pl6YFs/ryYXLa9X5sVlZS4B5h+PTNDIT/AfI= Subject key identifier: 6F:EC:4A:E7:99:11:4A:A5:DC:EE:98:B7:BB:2D:EF:73:0F:3F:EF:4A Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA Certificate issuer: /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft Manifest number: 28 Signing time: Wed 23 Oct 2024 06:21:46 +0000 Manifest this update: Wed 23 Oct 2024 06:21:45 +0000 Manifest next update: Wed 30 Oct 2024 06:21:45 +0000 Files and hashes: 1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: nQB/OoTxe6sXUNe/ZR+jHQDczBiNEDkWfpfigXdV1W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Validity Not Before: Oct 23 06:21:45 2024 GMT Not After : Oct 30 06:21:45 2024 GMT Subject: CN=671895f9-8d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:c4:83:46:06:35:00:47:e3:13:35:48:7b: 2d:79:12:78:05:6c:f4:f0:0d:72:7f:e4:38:a4:3d: 45:f2:28:5a:9e:77:d5:4a:0d:e7:36:50:86:3b:fa: 75:b7:9e:6f:c5:8a:01:71:fe:20:a6:de:a0:1e:24: 55:bd:d5:82:0a:5e:c1:e6:e3:6c:26:c8:26:f7:fd: c1:2c:48:75:61:eb:f8:85:7c:de:ea:10:f5:3b:4e: 0d:c8:ba:71:a0:cc:9c:2d:5c:da:70:49:6a:d0:34: 7a:a3:d7:b1:f9:b3:41:c6:fc:4f:13:fc:28:ce:95: 43:fc:09:3a:8d:70:1a:5d:2d:44:5c:43:21:86:35: f7:e3:69:9b:d3:ba:49:a9:59:10:86:9b:6c:17:ac: 21:01:70:24:ac:2e:24:d8:5e:42:b6:a4:1f:f2:49: f8:08:2d:1a:26:6b:ab:73:05:cb:91:cd:e0:03:46: 15:4e:a8:53:5f:97:d2:db:ea:6b:0f:83:65:0b:0d: ce:9a:ea:e9:ce:4b:72:cc:16:20:da:87:4a:32:f5: 4d:af:3d:4c:3c:ea:e5:e7:1a:a0:98:61:14:e2:5c: fd:b6:15:50:d7:75:c3:6c:e5:80:93:65:61:31:4f: d4:c0:7e:ac:86:09:df:29:03:84:bf:1f:b0:d7:8f: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:4A:E7:99:11:4A:A5:DC:EE:98:B7:BB:2D:EF:73:0F:3F:EF:4A X509v3 Authority Key Identifier: keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1b:ec:d5:c5:b2:e9:03:6a:db:7c:8c:dd:ac:79:e8:02:67: 06:e1:fb:14:d3:24:0e:01:b1:33:91:cb:86:95:cc:f5:47:e0: 11:9c:e4:ff:47:22:37:98:a6:00:88:2c:84:d4:d6:9e:b1:99: 20:b5:9e:97:6f:b8:fb:87:41:37:dc:68:1f:8b:4d:69:66:ea: 9c:78:0b:60:46:9a:5d:26:8b:c1:94:78:8a:c7:12:50:dd:2f: 30:b1:5b:30:db:49:de:46:c2:ca:da:30:72:46:8a:7d:2b:87: 10:ea:be:5e:03:79:17:da:5a:74:61:47:59:59:66:0e:cb:47: 71:13:d5:cb:5e:c9:ab:2e:10:e9:46:31:50:61:53:f4:ad:8b: 3c:ed:99:38:48:c5:e7:b3:21:19:30:cc:1f:b5:b1:87:47:dc: 54:19:62:4b:f0:e9:29:67:ea:7d:60:2b:35:f9:6e:87:b3:95: c7:a2:6e:16:23:3f:28:c8:76:7d:79:35:dd:82:59:05:8f:30: 17:18:df:42:fc:b6:8e:0c:95:59:b4:9d:e9:2a:bc:1c:a5:0c: c2:84:fa:35:b5:3f:cb:1a:70:29:b4:21:25:15:e1:46:e2:be: 66:eb:f1:fe:13:4b:70:77:05:29:5a:a7:f4:37:cb:6e:b1:c6: 2d:e5:b1:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE1NzExMC8GA1UEBRMoNDAxQzFBMzYzNEY5ODdDRTlGOUU1Q0VGNTQwOURDMUJE MEZGMkJBQTAeFw0yNDEwMjMwNjIxNDVaFw0yNDEwMzAwNjIxNDVaMBgxFjAUBgNV BAMTDTY3MTg5NWY5LThkMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC028SDRgY1AEfjEzVIey15EngFbPTwDXJ/5DikPUXyKFqed9VKDec2UIY7+nW3 nm/FigFx/iCm3qAeJFW91YIKXsHm42wmyCb3/cEsSHVh6/iFfN7qEPU7Tg3IunGg zJwtXNpwSWrQNHqj17H5s0HG/E8T/CjOlUP8CTqNcBpdLURcQyGGNffjaZvTukmp WRCGm2wXrCEBcCSsLiTYXkK2pB/ySfgILRoma6tzBcuRzeADRhVOqFNfl9Lb6msP g2ULDc6a6unOS3LMFiDah0oy9U2vPUw86uXnGqCYYRTiXP22FVDXdcNs5YCTZWEx T9TAfqyGCd8pA4S/H7DXj76nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb+xK55kR SqXc7pi3uy3vcw8/70owHwYDVR0jBBgwFoAUQBwaNjT5h86fnlzvVAncG9D/K6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTU3Lzc2RjI2N0ZBNTZF QzExRUY4QTBDQjI0RkM0RjlBRTAyL1FCd2FOalQ1aDg2Zm5senZWQW5jRzlEX0s2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUJ3YU5qVDVoODZmbmx6dlZBbmNHOURfSzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 QTU3Lzc2RjI2N0ZBNTZFQzExRUY4QTBDQjI0RkM0RjlBRTAyL1FCd2FOalQ1aDg2 Zm5senZWQW5jRzlEX0s2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwb7NXFsukDatt8jN2seegCZwbh+xTTJA4BsTORy4aVzPVH4BGc5P9H IjeYpgCILITU1p6xmSC1npdvuPuHQTfcaB+LTWlm6px4C2BGml0mi8GUeIrHElDd LzCxWzDbSd5GwsraMHJGin0rhxDqvl4DeRfaWnRhR1lZZg7LR3ET1cteyasuEOlG MVBhU/StizztmThIxeezIRkwzB+1sYdH3FQZYkvw6Sln6n1gKzX5boezlceibhYj PyjIdn15Nd2CWQWPMBcY30L8to4MlVm0nekqvBylDMKE+jW1P8sacCm0ISUV4Ubi vmbr8f4TS3B3BSlap/Q3y26xxi3lsd0= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:58 2024 by rpki-client on console-ams.rpki-client.org