$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: Y8Pi8rhUmMO5/GcRUdJwK/vpNmegA+gyxNMBXi1cwOE= Subject key identifier: 46:E9:1E:1C:5E:92:D7:95:DB:3A:FE:51:B6:B4:5B:5F:1E:82:57:92 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 198A Signing time: Fri 22 Nov 2024 16:24:52 +0000 Manifest this update: Fri 22 Nov 2024 16:24:51 +0000 Manifest next update: Fri 29 Nov 2024 16:24:51 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: AAXoNoRhHylUnhKsNeDJfhikW/BsAGkKQ+FrFeNedco=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: /r9L/quFrkZXr3YqN84IxLT9NVKKHI9054i3mJQRoRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6544 (0x1990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Nov 22 16:24:51 2024 GMT Not After : Nov 29 16:24:51 2024 GMT Subject: CN=6740b054-3fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:aa:d6:b7:51:78:31:0c:f1:b3:49:5d:2f: 96:78:3e:91:16:94:51:3c:27:37:3c:dd:d5:cc:02: d4:b0:31:5e:7f:13:f5:bd:99:41:29:09:48:98:98: c1:97:13:3f:eb:6a:74:65:f6:7c:24:9b:09:80:f1: 42:e4:df:23:f7:f7:18:b9:92:3c:2a:6d:02:34:5d: 42:69:b0:93:25:43:e7:f5:83:b5:0b:14:aa:5f:ef: 1a:1a:46:56:28:47:ac:5a:ed:03:74:d6:a5:53:0a: 65:36:c1:b9:c4:17:b1:63:50:67:c2:86:28:b5:08: d7:b6:bd:14:f7:9f:33:17:ea:50:40:f6:0b:7e:b3: 08:57:94:11:60:c4:61:13:cc:8b:a2:64:c3:a3:43: a3:ed:61:b0:82:36:4d:dc:e1:7d:e0:b7:28:92:cb: 49:6d:6f:ce:95:f5:17:ad:02:f9:05:c8:c4:f6:09: b9:b3:b1:a4:58:9d:e3:d5:39:37:44:bd:92:81:a4: 96:bf:79:b8:5e:b5:14:f3:60:30:61:2f:2f:40:04: 3a:da:e1:1a:da:c7:92:5b:3d:ea:74:17:9a:70:17: 58:bd:cd:d8:81:4e:0a:d4:3a:76:4c:8a:41:18:09: f7:9c:c2:92:fd:12:30:64:35:5b:76:1b:49:e1:8e: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:1E:1C:5E:92:D7:95:DB:3A:FE:51:B6:B4:5B:5F:1E:82:57:92 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3b:24:df:08:32:11:a6:59:14:8c:40:01:c9:5c:f0:d2:2e: ea:8e:13:ba:64:a9:2a:6a:51:55:cb:42:c1:e9:13:62:1e:d0: 6d:07:f8:e6:0d:d4:fe:72:9c:c5:c0:79:a6:37:45:ff:0e:06: 9d:25:0f:73:b2:cf:f3:d6:d5:09:00:e9:40:62:01:69:82:b4: 5e:b5:60:98:71:f0:56:11:7a:db:c8:21:16:41:82:e4:28:0a: ea:98:27:6f:9c:58:55:c1:a4:6d:e8:e1:de:27:83:05:04:84: 74:8b:35:bd:e2:37:a0:25:c3:51:9b:88:b5:43:a4:34:9f:80: e3:d3:8b:c6:da:05:5e:f4:10:af:fd:b4:49:52:ea:d9:2d:0f: 66:e3:77:b6:4e:24:5b:91:33:cd:65:ef:a3:6b:42:1b:ff:ea: 8a:17:57:c0:99:4f:0c:59:83:36:88:2c:f4:47:0e:13:3c:78: 9a:c8:e6:10:0d:b3:03:c1:96:38:4c:7f:7a:cd:22:61:c7:3f: b5:b6:6e:c9:ef:98:22:21:63:10:3b:c7:5a:74:fe:f3:ce:52: 92:1d:9f:68:bb:2d:91:03:a3:bc:31:64:f8:37:3c:fd:b8:56: 52:71:6f:fd:61:a8:29:51:c9:15:cb:24:e7:bb:f9:4f:03:77: 5a:0b:e6:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjQxMTIyMTYyNDUxWhcNMjQxMTI5MTYyNDUxWjAYMRYwFAYD VQQDEw02NzQwYjA1NC0zZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWyq1rdReDEM8bNJXS+WeD6RFpRRPCc3PN3VzALUsDFefxP1vZlBKQlImJjB lxM/62p0ZfZ8JJsJgPFC5N8j9/cYuZI8Km0CNF1CabCTJUPn9YO1CxSqX+8aGkZW KEesWu0DdNalUwplNsG5xBexY1BnwoYotQjXtr0U958zF+pQQPYLfrMIV5QRYMRh E8yLomTDo0Oj7WGwgjZN3OF94LcokstJbW/OlfUXrQL5BcjE9gm5s7GkWJ3j1Tk3 RL2SgaSWv3m4XrUU82AwYS8vQAQ62uEa2seSWz3qdBeacBdYvc3YgU4K1Dp2TIpB GAn3nMKS/RIwZDVbdhtJ4Y4DlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbpHhxe kteV2zr+Uba0W18egleSMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcOyTfCDIRplkUjEAByVzw0i7qjhO6ZKkqalFVy0LB6RNiHtBtB/jm DdT+cpzFwHmmN0X/DgadJQ9zss/z1tUJAOlAYgFpgrRetWCYcfBWEXrbyCEWQYLk KArqmCdvnFhVwaRt6OHeJ4MFBIR0izW94jegJcNRm4i1Q6Q0n4Dj04vG2gVe9BCv /bRJUurZLQ9m43e2TiRbkTPNZe+ja0Ib/+qKF1fAmU8MWYM2iCz0Rw4TPHiayOYQ DbMDwZY4TH96zSJhxz+1tm7J75giIWMQO8dadP7zzlKSHZ9ouy2RA6O8MWT4Nzz9 uFZScW/9YagpUckVyyTnu/lPA3daC+a4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org