$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: WbSq1oy65DlXXbN9luSua64GskFjkOFGTCH4Co/YWEk= Subject key identifier: 63:15:19:17:27:0F:83:52:2F:7C:BA:97:A7:34:27:F8:BA:08:D1:C9 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 03AD Signing time: Sat 23 Nov 2024 00:17:25 +0000 Manifest this update: Sat 23 Nov 2024 00:17:25 +0000 Manifest next update: Sat 30 Nov 2024 00:17:25 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: WHT6HmuGgXblg+HE5RrnjKxSWuw15AAxH8cqqztw5m8=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: 2ZcrJfUo8iGbf+zRyErKxf9o0VcsflrpmejeHCyEHtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Nov 23 00:17:25 2024 GMT Not After : Nov 30 00:17:25 2024 GMT Subject: CN=67411f15-5a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:48:fb:ff:79:41:c1:60:71:37:ee:12:e9: b7:cf:da:6e:79:6a:3f:ed:2a:9a:70:22:b0:5d:a5: f7:a2:25:df:07:62:bd:f2:2d:03:3a:01:7c:42:e1: d4:95:9e:29:85:20:b6:a9:36:f7:1b:e3:3e:d3:ca: ff:f3:2f:53:c4:38:df:d2:64:a8:43:42:2a:40:45: bc:fb:2a:c6:70:a7:48:e3:56:df:ec:b4:86:ea:2f: 4e:6b:dc:0e:a9:4c:e6:4e:c4:5d:01:fd:8c:2a:06: 9a:a4:73:99:b5:3b:3b:7f:a1:0e:60:08:70:d2:75: 07:3f:8d:c1:3d:51:93:29:ec:01:db:59:68:14:6f: 64:c1:d9:a9:ec:de:e2:81:a5:9d:4f:14:20:73:41: 43:2a:4f:25:46:9b:13:b1:e5:5d:7c:60:77:da:c5: 42:7a:14:34:0c:71:3b:b6:3e:5d:84:11:d9:95:27: 30:bc:3a:6f:cd:0e:c8:77:a0:97:07:6d:e8:76:60: a7:44:b3:2b:38:0c:8a:3b:e1:da:8e:7b:87:90:32: 21:24:fb:cc:ef:4b:19:73:c1:da:18:f0:3a:70:80: 1f:2c:d6:fc:cd:bb:9a:35:b2:2b:77:37:f9:d6:a2: 28:70:ea:47:26:70:e6:f9:7b:7b:da:2a:81:45:2b: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:15:19:17:27:0F:83:52:2F:7C:BA:97:A7:34:27:F8:BA:08:D1:C9 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:93:5d:78:b0:36:88:b3:c4:16:eb:0a:b2:9c:19:54:a8:75: 78:c3:1d:9d:fd:ab:c0:d0:70:ef:60:2e:f8:df:f8:ef:63:68: 46:0f:f3:9a:61:34:48:39:82:50:f5:32:7a:80:d2:7b:47:ce: 74:37:d0:e9:a9:45:2a:46:c8:b9:5f:e2:48:45:5b:dc:68:e5: 37:51:b0:ab:d4:6a:b5:d5:f8:43:40:7b:59:d3:06:38:aa:f1: a6:14:06:df:8a:3e:ee:54:c1:0c:dc:82:80:ab:fd:fb:cb:2b: ee:95:bd:04:f6:44:29:be:20:5f:72:24:b5:2f:1d:06:d7:7f: 82:17:81:27:40:17:3e:58:8b:e6:12:56:64:1d:de:38:06:25: 28:1c:6f:a2:fb:cd:24:18:8f:42:46:2c:1d:05:23:f8:25:71: 2d:d4:da:fc:14:72:9d:5c:db:46:d9:33:3d:66:33:b2:30:46: fa:9e:a0:fb:e3:d7:39:d6:7a:2a:e1:a0:2f:7e:5d:84:bf:bb: 55:1b:cd:a6:8a:ad:d2:20:c2:b5:2b:b5:25:2a:7e:c4:03:66: 01:5d:60:2a:37:38:45:ab:51:ae:79:cd:7d:04:11:93:75:f6: d0:86:e2:1a:a6:95:ef:bc:42:11:1a:a8:8a:4a:f8:ad:2b:6f: da:59:4b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjQxMTIzMDAxNzI1WhcNMjQxMTMwMDAxNzI1WjAYMRYwFAYD VQQDEw02NzQxMWYxNS01YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mtI+/95QcFgcTfuEum3z9pueWo/7SqacCKwXaX3oiXfB2K98i0DOgF8QuHU lZ4phSC2qTb3G+M+08r/8y9TxDjf0mSoQ0IqQEW8+yrGcKdI41bf7LSG6i9Oa9wO qUzmTsRdAf2MKgaapHOZtTs7f6EOYAhw0nUHP43BPVGTKewB21loFG9kwdmp7N7i gaWdTxQgc0FDKk8lRpsTseVdfGB32sVCehQ0DHE7tj5dhBHZlScwvDpvzQ7Id6CX B23odmCnRLMrOAyKO+HajnuHkDIhJPvM70sZc8HaGPA6cIAfLNb8zbuaNbIrdzf5 1qIocOpHJnDm+Xt72iqBRSv6EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMVGRcn D4NSL3y6l6c0J/i6CNHJMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4k114sDaIs8QW6wqynBlUqHV4wx2d/avA0HDvYC743/jvY2hGD/Oa YTRIOYJQ9TJ6gNJ7R850N9DpqUUqRsi5X+JIRVvcaOU3UbCr1Gq11fhDQHtZ0wY4 qvGmFAbfij7uVMEM3IKAq/37yyvulb0E9kQpviBfciS1Lx0G13+CF4EnQBc+WIvm ElZkHd44BiUoHG+i+80kGI9CRiwdBSP4JXEt1Nr8FHKdXNtG2TM9ZjOyMEb6nqD7 49c51noq4aAvfl2Ev7tVG82miq3SIMK1K7UlKn7EA2YBXWAqNzhFq1Guec19BBGT dfbQhuIappXvvEIRGqiKSvitK2/aWUvy -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org