$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: P+02HpCOBbT/GLHClqvf65yLWzF8R50DjMf4shC6OEA= Subject key identifier: 07:67:BE:F5:17:56:24:64:8C:F4:9A:C3:2A:39:C6:06:A4:4F:F1:2D Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: 0E Signing time: Wed 25 Dec 2024 06:09:23 +0000 Manifest this update: Wed 25 Dec 2024 06:09:22 +0000 Manifest next update: Wed 01 Jan 2025 06:09:22 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: 8zgmTz8+Xr9sirC2yi3gKjSbZOIn8KIgjTfp+xGhAIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: Dec 25 06:09:22 2024 GMT Not After : Jan 1 06:09:22 2025 GMT Subject: CN=676ba192-ac94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:f3:4f:00:8e:98:1d:1e:0e:d2:7f:37:d2: d7:86:f8:21:54:ac:8c:c3:b4:43:45:bb:93:1b:9b: 5b:13:bd:37:29:96:0b:98:56:a3:5a:dd:12:52:88: 5f:34:bf:f6:59:9b:14:7d:d2:cb:81:0a:79:b8:70: c7:ca:5c:5a:8e:04:ce:f3:cb:e9:f3:c1:16:dd:21: a7:29:c7:d9:e9:20:4f:92:c4:6e:b8:c7:d3:6c:e6: dd:97:18:24:31:2d:6b:5e:20:df:de:d6:3d:7e:c9: 3a:fd:17:74:b9:31:c8:21:9f:be:5a:b5:00:5f:8b: 67:c8:81:4d:bf:28:5b:c9:dc:7b:6a:67:a8:42:d7: de:4f:b0:8e:67:09:58:0d:45:23:eb:9b:85:0a:c4: eb:39:58:e7:2a:3b:be:f0:3f:51:5c:e7:21:bf:9d: 08:ad:84:57:37:74:64:45:8e:a6:0e:28:9a:b9:73: 4d:b8:c8:70:4d:f1:06:41:4b:81:fd:77:ca:b0:47: 68:f1:49:9f:4f:54:d8:58:8f:8e:c5:2c:8f:5a:21: 46:83:e1:42:63:4c:98:a2:62:ff:aa:57:83:7e:c9: f1:51:e0:95:50:b4:93:41:10:53:ba:de:c0:ac:47: f9:c9:39:0e:00:1a:0a:e6:69:24:1e:9f:a3:e4:30: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:BE:F5:17:56:24:64:8C:F4:9A:C3:2A:39:C6:06:A4:4F:F1:2D X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:a4:0a:f9:82:53:1d:de:7c:ab:e7:4b:46:59:76:d0:4e:33: b7:e4:44:33:74:25:8d:86:94:17:26:95:85:79:68:aa:68:7f: 1a:91:8d:7b:15:95:6e:f6:ca:0a:a9:25:10:8a:44:34:a4:4d: 1b:f7:b7:6f:52:85:d6:14:7c:a1:d5:20:b1:d4:9d:59:62:e3: 41:61:17:ce:16:2b:96:a5:59:4f:34:6e:c6:de:20:16:c9:b8: 2b:d5:77:a8:93:59:7a:27:bb:98:f3:cc:00:33:2f:08:ed:e2: 69:a3:16:da:20:7c:13:db:39:46:4d:f6:41:a6:5e:5c:ef:8d: a4:5e:27:84:7f:81:e7:f1:7e:f1:1c:5a:b5:b7:c5:36:b3:95: a8:98:fa:10:6f:cb:10:6a:1e:55:54:37:5a:ab:dc:a4:33:9c: 2e:df:67:5b:85:67:12:28:73:c4:d7:46:09:23:78:8e:ee:4d: 5a:c9:a0:be:02:d6:05:7a:5a:4a:c6:99:90:75:8d:1e:ab:41: ad:d1:30:f1:3e:bb:7a:91:33:8d:cb:2d:80:bf:94:17:34:21: c3:6d:13:53:7b:0c:6e:19:df:fc:fd:2a:6e:5d:1e:4f:d2:c6: ec:c3:5c:2f:3b:b1:6b:2f:eb:6f:e7:86:f4:bb:53:8b:ea:ea: c7:52:92:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0 OTczM0ZGQzAeFw0yNDEyMjUwNjA5MjJaFw0yNTAxMDEwNjA5MjJaMBgxFjAUBgNV BAMTDTY3NmJhMTkyLWFjOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnFvNPAI6YHR4O0n830teG+CFUrIzDtENFu5Mbm1sTvTcplguYVqNa3RJSiF80 v/ZZmxR90suBCnm4cMfKXFqOBM7zy+nzwRbdIacpx9npIE+SxG64x9Ns5t2XGCQx LWteIN/e1j1+yTr9F3S5Mcghn75atQBfi2fIgU2/KFvJ3HtqZ6hC195PsI5nCVgN RSPrm4UKxOs5WOcqO77wP1Fc5yG/nQithFc3dGRFjqYOKJq5c024yHBN8QZBS4H9 d8qwR2jxSZ9PVNhYj47FLI9aIUaD4UJjTJiiYv+qV4N+yfFR4JVQtJNBEFO63sCs R/nJOQ4AGgrmaSQen6PkMHUBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB2e+9RdW JGSM9JrDKjnGBqRP8S0wHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1 MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANWkCvmCUx3efKvnS0ZZdtBOM7fkRDN0JY2GlBcmlYV5aKpofxqRjXsV lW72ygqpJRCKRDSkTRv3t29ShdYUfKHVILHUnVli40FhF84WK5alWU80bsbeIBbJ uCvVd6iTWXonu5jzzAAzLwjt4mmjFtogfBPbOUZN9kGmXlzvjaReJ4R/gefxfvEc WrW3xTazlaiY+hBvyxBqHlVUN1qr3KQznC7fZ1uFZxIoc8TXRgkjeI7uTVrJoL4C 1gV6WkrGmZB1jR6rQa3RMPE+u3qRM43LLYC/lBc0IcNtE1N7DG4Z3/z9Km5dHk/S xuzDXC87sWsv62/nhvS7U4vq6sdSkvo= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:08 2024 by rpki-client on console-ams.rpki-client.org