$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: fI9cLkAv2xN0PDYTWbbGPJiVRWi2MuF1kbPsnswzpJk= Subject key identifier: 09:18:EB:35:0B:3C:59:66:7E:0A:E5:2E:B0:07:F5:8A:1D:5C:CF:3B Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 15 Signing time: Thu 21 Nov 2024 06:07:36 +0000 Manifest this update: Thu 21 Nov 2024 06:07:35 +0000 Manifest next update: Thu 28 Nov 2024 06:07:35 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: 1IzFgl+zdW9miDK16BhdgcfuZ128NsbLkv6H1iaZQt4=) 2: C5B7E29491F111EFA1C14C61C4F9AE02.roa (hash: id6HTAhbs7lkZSnmnWxvojaKrloCyVbBox6Qwy3+IY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Nov 21 06:07:35 2024 GMT Not After : Nov 28 06:07:35 2024 GMT Subject: CN=673ece27-2b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:4d:b3:aa:98:37:82:d9:eb:f1:c4:b0:8e: b6:a5:3e:61:10:91:c2:40:2d:04:04:8e:23:4a:71: 12:a6:78:c9:bf:bd:71:bc:0c:de:7c:25:35:bf:59: 01:ed:4b:79:38:0d:b5:21:8b:e6:42:b8:54:58:75: 24:cf:44:52:24:e3:82:26:b2:6e:e9:4b:46:15:20: 91:95:29:89:42:83:e7:29:a6:45:6e:d6:71:43:c6: 63:9d:ec:91:84:5f:ab:9f:27:af:3f:49:55:4f:7e: 26:d8:33:90:75:23:0d:74:38:7d:bc:08:5b:58:c9: 00:03:15:d8:e2:ad:92:ab:62:ff:e9:ba:93:c1:18: b5:35:b0:7b:a0:2b:f0:11:5d:d4:95:a9:06:64:14: 6a:39:c5:45:d1:25:8e:62:78:03:9e:c3:b8:06:1c: 92:be:42:86:e7:aa:8e:6a:11:36:53:92:a8:b5:ba: 21:cb:0f:a8:b7:15:f7:11:a0:ef:a6:4c:8e:40:9e: e2:7c:04:f5:97:3c:ee:db:45:fa:7c:10:ef:4d:b9: 7e:de:da:b0:15:64:34:ca:9a:08:87:f1:3f:5f:57: e2:60:4b:76:1f:99:60:c4:5e:3a:c5:b6:7e:5f:88: c2:e7:66:27:39:15:a5:dc:a5:6b:c7:07:7f:c2:06: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:EB:35:0B:3C:59:66:7E:0A:E5:2E:B0:07:F5:8A:1D:5C:CF:3B X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e7:35:cb:15:96:ff:0c:57:a0:29:f4:5a:85:7b:a0:ed:6b: 30:72:1d:f3:79:48:03:58:05:b8:55:91:61:ac:c0:46:39:a8: 27:0f:a2:f9:87:06:fc:31:2d:0e:73:03:95:29:9c:05:a9:f1: dc:69:1a:cc:1f:27:b7:81:77:b8:91:a8:20:7c:a0:15:43:d8: 96:f2:3c:27:b7:e0:0a:99:4d:90:42:96:d9:41:65:a8:7a:0a: f6:b8:01:6e:77:24:86:51:21:b2:4b:de:26:d8:f8:31:ca:05: 5c:ff:34:17:17:34:01:68:eb:33:99:5e:a6:ab:84:9a:98:a3: e6:c2:dc:88:b3:61:1c:a7:8c:5b:63:02:48:0b:33:f9:6c:2b: 74:f0:1b:46:19:00:d4:90:e1:93:36:d6:2c:cd:04:85:6c:38: ba:e1:68:50:d4:39:83:fb:f6:99:73:99:f7:90:b5:21:1d:37: a1:e3:ac:df:8d:57:5c:f0:f9:42:86:de:49:2e:e3:23:59:95: 8c:fd:93:f9:19:3e:b7:12:40:c3:8b:04:f6:32:11:89:5a:74: a9:77:38:d5:97:3f:d8:00:cb:12:7f:d9:92:3f:d5:4e:56:f1: ac:18:6d:42:51:6b:ae:ea:41:46:33:d9:a6:2f:a3:55:9f:b0: 69:82:6e:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjBBNTExMC8GA1UEBRMoQUFFQzQ4ODc3MUQ3Qjk0MTg1QzhBOTBGRTM2RDI5N0RF NzZDODRCQzAeFw0yNDExMjEwNjA3MzVaFw0yNDExMjgwNjA3MzVaMBgxFjAUBgNV BAMTDTY3M2VjZTI3LTJiMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYtU2zqpg3gtnr8cSwjralPmEQkcJALQQEjiNKcRKmeMm/vXG8DN58JTW/WQHt S3k4DbUhi+ZCuFRYdSTPRFIk44Imsm7pS0YVIJGVKYlCg+cppkVu1nFDxmOd7JGE X6ufJ68/SVVPfibYM5B1Iw10OH28CFtYyQADFdjirZKrYv/pupPBGLU1sHugK/AR XdSVqQZkFGo5xUXRJY5ieAOew7gGHJK+Qobnqo5qETZTkqi1uiHLD6i3FfcRoO+m TI5AnuJ8BPWXPO7bRfp8EO9NuX7e2rAVZDTKmgiH8T9fV+JgS3YfmWDEXjrFtn5f iMLnZic5FaXcpWvHB3/CBvhTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCRjrNQs8 WWZ+CuUusAf1ih1czzswHwYDVR0jBBgwFoAUquxIh3HXuUGFyKkP420pfedshLww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MEE1Lzk5N0IzNjZFOTFG MDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hM dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXV4SWgzSFh1VUdGeUtrUDQyMHBmZWRzaEx3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MEE1Lzk5N0IzNjZFOTFGMDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVH RnlLa1A0MjBwZmVkc2hMdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnnNcsVlv8MV6Ap9FqFe6DtazByHfN5SANYBbhVkWGswEY5qCcPovmH BvwxLQ5zA5UpnAWp8dxpGswfJ7eBd7iRqCB8oBVD2JbyPCe34AqZTZBCltlBZah6 Cva4AW53JIZRIbJL3ibY+DHKBVz/NBcXNAFo6zOZXqarhJqYo+bC3IizYRynjFtj AkgLM/lsK3TwG0YZANSQ4ZM21izNBIVsOLrhaFDUOYP79plzmfeQtSEdN6HjrN+N V1zw+UKG3kku4yNZlYz9k/kZPrcSQMOLBPYyEYladKl3ONWXP9gAyxJ/2ZI/1U5W 8awYbUJRa67qQUYz2aYvo1WfsGmCbr8= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org