$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: a/5nY3XrUP23PKJDqxVOer8qeB6BUxbNS+IbMTclHfA= Subject key identifier: 0C:CD:02:32:C6:EC:15:D7:60:13:5A:46:7F:F5:48:DA:78:87:20:B9 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0A37 Signing time: Fri 22 Nov 2024 20:44:25 +0000 Manifest this update: Fri 22 Nov 2024 20:44:24 +0000 Manifest next update: Fri 29 Nov 2024 20:44:24 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: e4sinpkw37AKcpT/xHdkxgaT7SI90xsdQhDHvLvph9A=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Nov 22 20:44:24 2024 GMT Not After : Nov 29 20:44:24 2024 GMT Subject: CN=6740ed29-fb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:d0:88:d1:db:b0:57:59:67:9b:ec:1f:61: 06:73:d2:71:e0:42:bb:fe:55:e2:da:d8:6a:73:9f: 27:ee:58:cc:2d:39:e8:fd:e3:50:fc:57:7b:ac:50: b9:d9:6c:6d:9f:db:39:6c:10:8f:23:fd:e3:f8:af: 6f:81:17:c2:c1:02:dc:f1:14:44:c4:d8:4f:aa:25: 36:f2:02:6b:2d:f9:98:b1:c1:48:0d:a4:eb:b9:6b: 6a:d7:5d:d7:59:82:6a:41:50:6b:19:3b:90:8f:49: 0b:7d:67:84:8f:35:ff:8d:25:a0:67:76:02:d1:5c: d6:2e:d5:9d:24:61:2c:38:17:20:ff:3e:f1:f0:d0: d9:35:f6:b4:4f:b0:2d:31:e3:84:dc:ad:c0:07:eb: 12:66:86:76:cf:ab:01:60:f6:7d:db:43:da:2c:72: 97:33:89:9f:d7:e3:d6:1d:b2:95:8a:8e:85:48:a9: 49:87:a3:1a:79:b2:98:f6:7e:bc:f3:f2:a2:de:ed: b7:56:a5:e7:ed:f0:7f:c9:43:6c:b0:c4:df:da:cd: 2e:da:84:f1:7b:81:04:c1:0c:71:47:eb:1b:7c:f8: 03:cc:aa:bc:c3:20:20:92:c8:e2:a3:49:df:23:5f: cf:54:4a:30:f7:34:10:2f:37:25:59:63:f8:e1:5d: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:02:32:C6:EC:15:D7:60:13:5A:46:7F:F5:48:DA:78:87:20:B9 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a7:cb:46:3a:e3:3b:c5:e6:5b:fb:68:5e:47:50:ad:f0:fc: ab:71:65:03:94:8f:ea:f2:94:5b:c2:f6:33:fd:85:02:c2:d3: 83:ae:0a:d1:98:0e:32:32:80:8d:4b:90:99:05:6a:2c:ca:61: 64:8e:50:64:ea:de:b3:20:32:d0:a8:01:ba:3a:20:3c:0e:98: 5a:76:db:05:38:d3:d2:ea:46:9f:b3:bb:04:71:eb:8c:99:4e: 0c:a8:dd:8c:91:6d:7d:d1:63:a6:2d:86:57:bf:53:8a:7b:6c: 22:c6:5f:3e:cf:ca:75:c2:0b:c9:a2:9a:9f:ae:c6:de:6c:34: f7:0f:0c:58:02:54:18:27:f8:1c:a9:0e:fc:81:a9:d6:99:6f: 21:5a:4c:eb:b8:63:df:01:64:f1:dd:d0:04:17:76:d5:2e:47: 4b:ac:bf:12:03:5d:60:5c:d3:7a:84:47:99:e7:8b:c9:b5:b2: 57:7d:5f:dd:b5:46:45:54:a1:09:3b:44:5d:4a:1f:ae:1b:52: b6:19:65:55:14:eb:03:fb:39:08:a6:dd:60:55:ac:bf:ce:6f: e7:36:ef:67:c3:b3:a5:1b:b4:ab:d8:e8:3c:38:6c:84:32:63: ba:3f:53:2d:84:b9:9d:06:eb:4c:76:9c:9a:30:db:1e:f1:6e: 3d:f0:ad:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjQxMTIyMjA0NDI0WhcNMjQxMTI5MjA0NDI0WjAYMRYwFAYD VQQDEw02NzQwZWQyOS1mYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLbQiNHbsFdZZ5vsH2EGc9Jx4EK7/lXi2thqc58n7ljMLTno/eNQ/Fd7rFC5 2Wxtn9s5bBCPI/3j+K9vgRfCwQLc8RRExNhPqiU28gJrLfmYscFIDaTruWtq113X WYJqQVBrGTuQj0kLfWeEjzX/jSWgZ3YC0VzWLtWdJGEsOBcg/z7x8NDZNfa0T7At MeOE3K3AB+sSZoZ2z6sBYPZ920PaLHKXM4mf1+PWHbKVio6FSKlJh6MaebKY9n68 8/Ki3u23VqXn7fB/yUNssMTf2s0u2oTxe4EEwQxxR+sbfPgDzKq8wyAgksjio0nf I1/PVEow9zQQLzclWWP44V2VGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzNAjLG 7BXXYBNaRn/1SNp4hyC5MB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNp8tGOuM7xeZb+2heR1Ct8PyrcWUDlI/q8pRbwvYz/YUCwtODrgrR mA4yMoCNS5CZBWosymFkjlBk6t6zIDLQqAG6OiA8DphadtsFONPS6kafs7sEceuM mU4MqN2MkW190WOmLYZXv1OKe2wixl8+z8p1wgvJopqfrsbebDT3DwxYAlQYJ/gc qQ78ganWmW8hWkzruGPfAWTx3dAEF3bVLkdLrL8SA11gXNN6hEeZ54vJtbJXfV/d tUZFVKEJO0RdSh+uG1K2GWVVFOsD+zkIpt1gVay/zm/nNu9nw7OlG7Sr2Og8OGyE MmO6P1MthLmdButMdpyaMNse8W498K1p -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org