$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json) Hash identifier: 44ocNtxwUTodL1gDkUBiVlglU0hGbKhHi2VMjsArB2I= Subject key identifier: AF:0F:18:53:C3:18:06:1B:6E:70:B5:5B:F1:08:8A:A9:C4:11:5C:21 Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft Manifest number: 0591 Signing time: Fri 22 Nov 2024 22:46:40 +0000 Manifest this update: Fri 22 Nov 2024 22:46:40 +0000 Manifest next update: Fri 29 Nov 2024 22:46:40 +0000 Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: Fd+0oARTi7otVE719DKURyWmiV1XgLmXs6gaQQ8m1Mw=) 2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: gGaPSZTXBZeyhBvTnRDrA4x3lhLiqzg2ne+ktqQeFQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Validity Not Before: Nov 22 22:46:40 2024 GMT Not After : Nov 29 22:46:40 2024 GMT Subject: CN=674109d0-e00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:22:62:ea:30:13:be:c4:e1:87:08:ca:54: 7d:bf:af:2a:66:cf:c3:e1:bf:a9:21:55:6f:71:61: 90:04:04:3b:77:1e:88:d8:23:24:17:e3:4e:6e:ae: c0:85:f8:be:74:8d:57:b4:c9:ee:09:a2:9f:76:d9: dd:52:10:07:7f:03:33:ec:10:11:ec:b7:fd:6d:2d: c9:01:24:83:6d:e5:50:5f:2b:56:16:d7:d1:49:1a: 01:af:5c:ec:dd:8e:dd:5f:cf:33:52:fa:e5:6f:80: 34:4b:73:fd:83:00:a8:f6:99:af:9c:a0:fa:fc:10: bf:1b:66:6d:e3:2c:61:a5:bd:5f:8b:e1:c3:11:2e: 8a:cc:80:94:e6:e6:0d:4c:d7:14:aa:c0:c1:7d:3f: 64:40:66:fb:aa:af:ca:28:22:25:aa:f4:9c:73:9f: 03:8b:d3:11:48:db:3c:fb:c5:cc:b7:80:64:95:32: 04:39:c7:4e:7e:6b:61:e0:ac:8f:6f:2f:cf:42:0e: 2a:c6:2a:88:79:28:35:cf:13:3a:bf:4e:43:e6:89: df:43:bb:97:d1:e1:6b:e3:a6:50:3d:fb:25:44:95: e7:3b:d9:f8:d2:f3:c5:a8:56:5d:3f:b7:80:18:74: 3e:ce:95:44:8b:59:09:ab:24:5e:4b:c0:85:8b:27: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:18:53:C3:18:06:1B:6E:70:B5:5B:F1:08:8A:A9:C4:11:5C:21 X509v3 Authority Key Identifier: keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:85:68:ab:50:43:d4:29:66:ca:c1:6f:fc:6a:02:07:3c: 5b:23:d4:b6:47:3f:ef:8c:79:0f:cc:b4:60:5c:33:59:51:47: af:93:43:9d:dd:4c:f4:1b:4b:e9:50:9b:a1:84:1d:29:f3:78: de:51:8d:02:a4:bb:4c:41:2c:5a:63:d4:26:73:27:58:88:5c: 14:2a:a5:07:39:3a:8b:39:06:29:4c:2f:cd:4e:03:ff:2c:2f: db:08:7f:37:9f:50:ac:b9:34:c4:85:16:9a:95:c4:39:22:10: d3:4c:c0:3f:fb:81:1f:cf:c0:63:a5:93:f7:fd:a7:e2:bf:97: 82:19:9e:fa:fc:5d:0e:b3:7d:c0:aa:db:63:1b:74:a6:7e:81: 98:ca:a4:0e:74:fa:b4:be:1a:94:4f:47:55:d2:e0:50:1e:6c: 24:26:70:53:75:0b:fe:0d:e1:a2:f0:46:33:4f:3f:5f:e4:95: ff:8f:a3:3b:c8:6f:c9:6f:ec:0e:d9:2f:c1:70:57:e3:cb:4e: 3d:ba:50:05:1f:85:82:1f:31:07:be:82:b2:6a:53:59:c3:e1: e7:a3:2c:a1:3d:7f:2c:1e:71:eb:7e:c3:83:b6:a0:d2:df:27: 95:68:53:c2:a9:b7:f5:f6:01:8f:94:bb:7b:31:2b:b2:c3:43: d8:57:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCRTExMTAvBgNVBAUTKEFBMjFCNjkwQzFENjNDQkY0NDFBQTNCRDExN0VEOEI3 ODY4ODIyMjkwHhcNMjQxMTIyMjI0NjQwWhcNMjQxMTI5MjI0NjQwWjAYMRYwFAYD VQQDEw02NzQxMDlkMC1lMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD8iYuowE77E4YcIylR9v68qZs/D4b+pIVVvcWGQBAQ7dx6I2CMkF+NObq7A hfi+dI1XtMnuCaKfdtndUhAHfwMz7BAR7Lf9bS3JASSDbeVQXytWFtfRSRoBr1zs 3Y7dX88zUvrlb4A0S3P9gwCo9pmvnKD6/BC/G2Zt4yxhpb1fi+HDES6KzICU5uYN TNcUqsDBfT9kQGb7qq/KKCIlqvScc58Di9MRSNs8+8XMt4BklTIEOcdOfmth4KyP by/PQg4qxiqIeSg1zxM6v05D5onfQ7uX0eFr46ZQPfslRJXnO9n40vPFqFZdP7eA GHQ+zpVEi1kJqyReS8CFiyf4DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8PGFPD GAYbbnC1W/EIiqnEEVwhMB8GA1UdIwQYMBaAFKohtpDB1jy/RBqjvRF+2LeGiCIp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJFMS9FNDZGRjQ5MEFF MkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BMOUVHcU85RVg3WXQ0YUlJ aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FpRzJrTUhXUEw5RUdxTzlFWDdZdDRhSUlpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJFMS9FNDZGRjQ5MEFFMkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BM OUVHcU85RVg3WXQ0YUlJaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBzIVoq1BD1ClmysFv/GoCBzxbI9S2Rz/vjHkPzLRgXDNZUUevk0Od 3Uz0G0vpUJuhhB0p83jeUY0CpLtMQSxaY9QmcydYiFwUKqUHOTqLOQYpTC/NTgP/ LC/bCH83n1CsuTTEhRaalcQ5IhDTTMA/+4Efz8BjpZP3/afiv5eCGZ76/F0Os33A qttjG3SmfoGYyqQOdPq0vhqUT0dV0uBQHmwkJnBTdQv+DeGi8EYzTz9f5JX/j6M7 yG/Jb+wO2S/BcFfjy049ulAFH4WCHzEHvoKyalNZw+HnoyyhPX8sHnHrfsODtqDS 3yeVaFPCqbf19gGPlLt7MSuyw0PYV4HJ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org