$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: WAZnrYnQliXYhTZon5lA/gbPSXCuMtiExKDgv3YQZ+M= Subject key identifier: 93:24:43:6C:21:9C:DC:CE:19:50:17:6D:D8:31:FF:14:CA:A8:B3:BD Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1D5F Signing time: Fri 22 Nov 2024 16:08:16 +0000 Manifest this update: Fri 22 Nov 2024 16:08:16 +0000 Manifest next update: Fri 29 Nov 2024 16:08:16 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: 3KBSNgo69c82UWjD3O8vKEUsmiBzkPMlyaTRHY/GC8A=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: vXP4jKoUAOc2qrnaEmUGViJDNj4Qv7pqxjaT1Vkbt9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7527 (0x1d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Nov 22 16:08:16 2024 GMT Not After : Nov 29 16:08:16 2024 GMT Subject: CN=6740ac70-0a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:f0:07:e0:6a:84:0e:9a:63:1f:2d:56:ab: a9:79:83:e3:fa:c2:08:1a:a2:1d:bf:6d:7e:dd:df: d5:bd:f2:cd:9a:47:ce:5a:26:de:25:0b:6c:39:73: fe:ab:90:ed:8f:45:31:a1:7d:57:9f:5f:43:7f:00: 16:c2:94:bf:fe:31:06:f2:62:4e:23:bc:25:9b:28: d7:5a:85:b2:a2:e2:66:ca:42:97:45:89:a7:c2:be: 40:49:c4:ac:6e:d8:90:86:27:44:7b:e2:03:13:8c: 15:d6:43:98:ee:aa:40:86:8e:05:f0:02:2c:b0:09: 83:4a:3d:35:f9:f2:51:66:6a:fd:06:7b:4c:fa:22: 96:18:c3:0c:22:5e:93:4d:c8:e5:9f:be:14:67:d0: 1f:21:62:57:71:01:6b:ed:84:0d:a9:ce:ac:d7:89: 87:2d:a3:ce:69:a7:2f:f0:5c:49:35:d6:8a:e3:49: 17:f6:d8:0e:ee:64:65:42:f5:ba:83:f2:b9:99:3d: b5:da:c7:a8:f5:a6:d7:6c:ed:1e:3a:c9:7a:78:50: 93:9a:0a:ba:5b:93:81:3a:df:29:fc:53:af:22:63: 21:29:8f:d4:dc:10:75:22:b7:7d:41:15:5b:f1:84: 26:8c:3a:c3:f4:1e:56:0b:12:e5:1e:60:96:70:82: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:24:43:6C:21:9C:DC:CE:19:50:17:6D:D8:31:FF:14:CA:A8:B3:BD X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:f8:b3:ae:bc:a1:22:25:6a:2c:bb:4a:2c:ea:ff:fb:56: 1b:56:d6:00:79:b1:07:7e:66:ce:ec:b7:4d:45:d6:c4:e8:e5: 65:93:06:92:e3:bf:7b:ac:22:a8:99:f2:15:f3:57:a2:39:ee: b9:ec:64:58:79:7c:2e:c9:df:47:3e:7f:5a:41:97:05:fa:61: f8:5a:5d:68:cf:68:0e:1d:34:0c:bf:57:d7:fc:05:50:e5:4b: b0:17:41:77:cc:d8:80:37:f3:79:01:f6:b9:11:33:cf:8a:20: 13:4a:ea:ba:25:6a:76:55:dc:aa:c3:25:b1:62:db:a0:02:7e: 7d:c5:78:e0:90:94:c2:81:b2:66:ce:64:d1:0e:6f:c8:b4:89: 62:6e:a6:6b:b8:2c:8d:34:e1:c9:0e:26:a1:e1:ea:38:ec:2c: 09:68:c9:94:f0:59:da:c5:a8:8e:5d:b2:0d:5a:73:24:bb:d4: 36:0a:cc:d9:c4:68:54:65:8d:2c:d9:88:d3:bc:7c:b5:b3:ff: f9:7b:4e:ac:39:35:8c:3b:f7:c4:9a:99:8a:1e:7b:84:47:9d: 0f:78:37:21:6c:d8:b8:63:89:c5:d9:a8:65:46:22:22:ab:e4: 56:5e:94:74:32:d4:33:04:67:0c:2e:2b:02:da:02:99:4f:84: 6f:d5:0c:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjQxMTIyMTYwODE2WhcNMjQxMTI5MTYwODE2WjAYMRYwFAYD VQQDEw02NzQwYWM3MC0wYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K7wB+BqhA6aYx8tVqupeYPj+sIIGqIdv21+3d/VvfLNmkfOWibeJQtsOXP+ q5Dtj0UxoX1Xn19DfwAWwpS//jEG8mJOI7wlmyjXWoWyouJmykKXRYmnwr5AScSs btiQhidEe+IDE4wV1kOY7qpAho4F8AIssAmDSj01+fJRZmr9BntM+iKWGMMMIl6T Tcjln74UZ9AfIWJXcQFr7YQNqc6s14mHLaPOaacv8FxJNdaK40kX9tgO7mRlQvW6 g/K5mT212seo9abXbO0eOsl6eFCTmgq6W5OBOt8p/FOvImMhKY/U3BB1Ird9QRVb 8YQmjDrD9B5WCxLlHmCWcIK7hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMkQ2wh nNzOGVAXbdgx/xTKqLO9MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1vizrryhIiVqLLtKLOr/+1YbVtYAebEHfmbO7LdNRdbE6OVlkwaS 4797rCKomfIV81eiOe657GRYeXwuyd9HPn9aQZcF+mH4Wl1oz2gOHTQMv1fX/AVQ 5UuwF0F3zNiAN/N5Afa5ETPPiiATSuq6JWp2VdyqwyWxYtugAn59xXjgkJTCgbJm zmTRDm/ItIlibqZruCyNNOHJDiah4eo47CwJaMmU8FnaxaiOXbINWnMku9Q2CszZ xGhUZY0s2YjTvHy1s//5e06sOTWMO/fEmpmKHnuER50PeDchbNi4Y4nF2ahlRiIi q+RWXpR0MtQzBGcMLisC2gKZT4Rv1Qzj -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org