$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: z7XZK4iE6iHDk76C+ktVH0KuijfES7tqWFCv2xYAKJY= Subject key identifier: 91:8A:C8:A2:E8:DD:1D:53:43:19:96:A2:9B:1E:3D:1F:AD:DD:57:14 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 045D Signing time: Fri 22 Nov 2024 23:42:22 +0000 Manifest this update: Fri 22 Nov 2024 23:42:21 +0000 Manifest next update: Fri 29 Nov 2024 23:42:21 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: pU+vsXf4sZoDMtPUEeSH0SaM9Tn6pN7HLeZDASlAiow=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: vTlreixIyByEZB7kEISmHGr1RyT4p8lVkdEoUi0bgqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Nov 22 23:42:21 2024 GMT Not After : Nov 29 23:42:21 2024 GMT Subject: CN=674116de-83aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:90:6e:ff:12:26:3c:c7:da:18:0d:13:3a:0a: 7d:5f:11:07:f0:cb:cd:6e:0e:94:6b:f7:69:0c:f9: 09:54:ea:35:39:34:68:3c:eb:1a:81:f2:6c:3b:17: b6:57:d2:22:27:12:a0:02:4e:5e:cd:e7:80:cd:3e: 76:99:19:02:2f:a3:57:f7:6b:8a:a7:77:c8:5c:bf: cb:cb:63:bb:27:9f:fb:af:66:01:1d:e0:d7:05:fc: 5b:93:d7:43:f9:cb:b5:e3:b0:ab:1e:8f:54:09:78: 69:89:10:d3:2a:d9:70:eb:e2:74:41:7d:63:54:4a: 11:f2:e8:f5:e4:fe:5a:bc:c1:00:9e:96:81:f9:08: 5f:fd:aa:da:59:c7:66:82:ee:00:23:32:f8:a4:91: 19:3e:a7:93:ae:d1:59:5f:e0:c1:35:eb:2e:45:9d: be:e5:ee:18:4d:9a:88:27:32:ad:3d:be:8d:5e:6f: 06:89:d8:25:77:3c:c5:b7:a3:ed:68:c4:9b:2c:25: 89:c8:b7:16:78:e8:72:c1:7d:7d:06:04:3e:aa:44: bc:a8:b7:7a:10:49:2d:8f:8b:04:23:15:bb:9e:81: 33:80:a2:0d:1b:3c:01:eb:3f:40:2e:9f:49:4d:2d: 03:b8:5d:60:f2:12:4a:de:f3:f6:da:a3:1a:6a:ec: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:C8:A2:E8:DD:1D:53:43:19:96:A2:9B:1E:3D:1F:AD:DD:57:14 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d2:30:ed:53:9d:76:08:f0:a6:16:7f:7b:95:39:57:54:88: 29:58:40:67:1f:a8:8c:5e:ed:d6:0e:1a:b9:aa:5c:a9:d3:d6: d1:1c:02:81:c3:f5:65:08:e2:7e:b2:bd:73:be:41:e1:a9:8c: d6:eb:fe:15:09:e2:3d:5b:89:b6:7f:1c:4a:9d:f7:ba:f4:40: 6d:e9:cd:ef:2c:77:75:9c:51:70:f5:03:fc:ab:59:8f:d1:e7: 1b:80:b4:95:5b:11:93:d7:94:03:a6:33:6b:3b:a2:5a:eb:de: bf:40:b4:61:24:1e:c1:67:c7:8c:57:e7:a2:db:ab:27:82:64: 95:c4:25:d0:ef:11:42:0b:54:aa:bb:82:41:41:4b:53:5a:ba: 31:90:80:05:93:9e:c2:7a:6a:6f:f8:e9:f8:a2:c4:f3:32:f9: b1:a0:c4:18:7f:94:6a:31:c0:94:69:7b:05:b3:c0:58:cc:2c: 53:ea:84:ad:3e:34:8f:d4:46:13:a7:7e:03:a8:fa:9c:c9:42: be:c6:0d:11:19:96:96:06:36:2b:6a:33:7f:6f:8c:5a:94:a2: e2:79:ab:c5:52:eb:81:ea:ba:44:59:b1:2c:e4:21:de:b6:ee: 8d:d9:6f:f4:b5:46:82:6a:55:e3:3d:1f:f3:ba:36:ce:61:82: 11:6e:e8:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjQxMTIyMjM0MjIxWhcNMjQxMTI5MjM0MjIxWjAYMRYwFAYD VQQDEw02NzQxMTZkZS04M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45Bu/xImPMfaGA0TOgp9XxEH8MvNbg6Ua/dpDPkJVOo1OTRoPOsagfJsOxe2 V9IiJxKgAk5ezeeAzT52mRkCL6NX92uKp3fIXL/Ly2O7J5/7r2YBHeDXBfxbk9dD +cu147CrHo9UCXhpiRDTKtlw6+J0QX1jVEoR8uj15P5avMEAnpaB+Qhf/araWcdm gu4AIzL4pJEZPqeTrtFZX+DBNesuRZ2+5e4YTZqIJzKtPb6NXm8GidgldzzFt6Pt aMSbLCWJyLcWeOhywX19BgQ+qkS8qLd6EEktj4sEIxW7noEzgKINGzwB6z9ALp9J TS0DuF1g8hJK3vP22qMaauybUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGKyKLo 3R1TQxmWopsePR+t3VcUMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ0jDtU512CPCmFn97lTlXVIgpWEBnH6iMXu3WDhq5qlyp09bRHAKB w/VlCOJ+sr1zvkHhqYzW6/4VCeI9W4m2fxxKnfe69EBt6c3vLHd1nFFw9QP8q1mP 0ecbgLSVWxGT15QDpjNrO6Ja696/QLRhJB7BZ8eMV+ei26sngmSVxCXQ7xFCC1Sq u4JBQUtTWroxkIAFk57Cempv+On4osTzMvmxoMQYf5RqMcCUaXsFs8BYzCxT6oSt PjSP1EYTp34DqPqcyUK+xg0RGZaWBjYrajN/b4xalKLieavFUuuB6rpEWbEs5CHe tu6N2W/0tUaCalXjPR/zujbOYYIRbuiP -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org