$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: UjY0G18uKXgqXi+/WlOiRogx7/M803JFREVD808+O5s= Subject key identifier: 8B:C6:96:24:DD:DB:3C:8E:7A:84:A0:AF:22:82:24:5E:18:C1:EA:3E Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 010E Signing time: Sat 23 Nov 2024 03:05:27 +0000 Manifest this update: Sat 23 Nov 2024 03:05:27 +0000 Manifest next update: Sat 30 Nov 2024 03:05:27 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: WE2Gl4Ep1HoA2r5W3en+OwcrvcCkJGwGcvw5uXp6r9U=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: 79kHqAxd/12u3/PUdK+0+w+2KHfLducqX+C5RoEG/XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Nov 23 03:05:27 2024 GMT Not After : Nov 30 03:05:27 2024 GMT Subject: CN=67414677-a021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:86:1b:0e:eb:2d:9e:7c:1c:f7:62:44:c1: ee:6b:0b:9d:13:04:8e:b3:14:e2:a3:0e:7f:39:75: 8f:f0:c6:2b:ea:aa:81:be:d7:e1:4a:44:c4:3d:f1: 1c:7a:0d:82:31:cb:82:a4:c8:a3:12:c2:c7:38:c1: 30:4d:f8:dd:1c:df:72:1c:97:f3:25:62:c9:b4:65: ef:9c:b6:d7:13:28:6a:4f:d2:58:a6:e5:e7:1e:68: 0e:d9:55:5f:0e:f2:6b:fb:f0:49:39:30:7b:18:8b: 86:03:00:3a:6b:39:41:68:eb:37:9f:5d:e9:0c:0b: 71:36:13:c7:f6:24:5f:ae:71:77:d3:13:68:ab:11: 72:59:c4:cd:a4:08:18:0b:77:d4:f7:c2:f6:cd:1b: 4f:d6:fb:69:9f:26:38:87:d9:8b:2b:51:0d:85:47: 40:0e:bc:ea:df:34:f6:6a:b0:74:47:55:d4:df:34: e7:7c:24:27:6d:3f:0a:03:14:b7:c7:26:f4:81:25: b7:2b:01:68:2b:e4:9d:32:5d:54:98:d1:85:43:e3: f9:02:ef:7e:6e:0c:fe:96:cb:ca:63:38:28:e2:18: ba:f7:61:79:1b:76:81:6e:78:6c:d6:ae:cd:8a:77: 34:e7:b8:32:b7:0d:a9:04:8e:1d:5a:fd:38:6b:0f: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C6:96:24:DD:DB:3C:8E:7A:84:A0:AF:22:82:24:5E:18:C1:EA:3E X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1d:13:5f:22:ef:81:cd:dd:cb:ec:19:1f:8e:f4:4f:f5:98: 63:6f:e6:e8:fa:c6:62:e3:ee:4a:aa:02:20:fb:5d:a8:6e:46: e6:3a:c2:d9:b7:77:fd:b5:b4:ef:ac:74:0d:8b:ee:1b:43:6f: 20:b0:1f:dd:97:ae:5b:08:c3:f7:d7:29:33:ab:8f:48:e9:f2: e7:a7:26:32:54:20:9f:35:72:5e:43:a2:f5:d3:2b:f4:5e:d1: 45:0f:6f:89:6f:7e:a2:64:6d:18:a8:76:b7:ff:3d:5f:27:ce: ae:7b:f3:0b:b1:d7:57:a6:3d:e4:c4:97:16:2a:6c:73:17:bc: c9:7a:ea:fa:de:10:88:21:3c:2c:64:b4:23:74:69:ee:c5:be: c9:5e:70:9d:c2:78:0b:3e:d3:4d:34:81:5c:ad:12:2a:14:f0: 62:18:a6:f5:21:98:8f:84:a2:92:0d:b3:0d:76:d8:e6:b4:80: 69:1a:87:51:97:0b:12:28:ad:d5:32:f8:b0:e0:ca:73:51:f8: fd:44:9e:cc:8b:ce:e2:61:19:e2:c3:37:65:3e:0e:c6:1b:dc: 71:59:d3:02:0b:e3:d4:30:68:f9:4f:fe:4f:7c:57:2d:67:d2: 8f:af:36:ac:ca:46:4f:0c:ee:7f:07:43:d1:99:d8:49:19:fe: b3:c8:5c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjQxMTIzMDMwNTI3WhcNMjQxMTMwMDMwNTI3WjAYMRYwFAYD VQQDEw02NzQxNDY3Ny1hMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOyGGw7rLZ58HPdiRMHuawudEwSOsxTiow5/OXWP8MYr6qqBvtfhSkTEPfEc eg2CMcuCpMijEsLHOMEwTfjdHN9yHJfzJWLJtGXvnLbXEyhqT9JYpuXnHmgO2VVf DvJr+/BJOTB7GIuGAwA6azlBaOs3n13pDAtxNhPH9iRfrnF30xNoqxFyWcTNpAgY C3fU98L2zRtP1vtpnyY4h9mLK1ENhUdADrzq3zT2arB0R1XU3zTnfCQnbT8KAxS3 xyb0gSW3KwFoK+SdMl1UmNGFQ+P5Au9+bgz+lsvKYzgo4hi692F5G3aBbnhs1q7N inc057gytw2pBI4dWv04aw9yEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvGliTd 2zyOeoSgryKCJF4Yweo+MB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrHRNfIu+Bzd3L7BkfjvRP9Zhjb+bo+sZi4+5KqgIg+12obkbmOsLZ t3f9tbTvrHQNi+4bQ28gsB/dl65bCMP31ykzq49I6fLnpyYyVCCfNXJeQ6L10yv0 XtFFD2+Jb36iZG0YqHa3/z1fJ86ue/MLsddXpj3kxJcWKmxzF7zJeur63hCIITws ZLQjdGnuxb7JXnCdwngLPtNNNIFcrRIqFPBiGKb1IZiPhKKSDbMNdtjmtIBpGodR lwsSKK3VMviw4MpzUfj9RJ7Mi87iYRniwzdlPg7GG9xxWdMCC+PUMGj5T/5PfFct Z9KPrzasykZPDO5/B0PRmdhJGf6zyFzo -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org