$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: 3vclJG28QBNh1rHEF52HR9IgqvEy7N0R4fXt8BC+nXE= Subject key identifier: 53:14:7D:85:9F:50:A7:D9:C7:1D:DA:DC:DA:39:90:FE:81:B6:EA:DA Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A06 Signing time: Fri 22 Nov 2024 19:38:36 +0000 Manifest this update: Fri 22 Nov 2024 19:38:35 +0000 Manifest next update: Fri 29 Nov 2024 19:38:35 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: MRrgqtICrHkbmEBVmncznJSWMWrhnYUc0+W+52EJPck=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: 7eyQ3NplMfQ7NeH3lqRBvpOppo5UvSFwpAIlHW8sg/M=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: FyzTLc6q4QxjkF8ADy/p1n3nRtCccHutyKoH8IBWzj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Nov 22 19:38:35 2024 GMT Not After : Nov 29 19:38:35 2024 GMT Subject: CN=6740ddbc-9995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:91:c7:69:8f:59:fb:38:e7:05:0c:33:c8: 9d:df:38:47:bb:ee:f5:68:e4:de:02:76:e6:d6:ae: 03:c1:52:69:b5:10:08:ec:d2:36:49:65:a9:50:43: fc:d1:72:71:0c:1a:7c:5c:f1:c5:1d:21:4b:17:ec: fb:22:8b:3d:24:5e:f8:64:50:00:d9:60:25:b9:29: dc:bc:77:52:eb:d0:8c:3c:08:88:fc:6f:f5:2c:ef: 99:fa:13:8f:73:3a:cc:4e:18:40:68:1f:ac:03:47: 58:22:da:b6:2d:15:fc:35:f0:a9:80:53:0e:a1:2e: e6:8d:46:45:a0:e3:17:7e:f5:77:50:c0:11:fe:b2: b1:94:da:98:a9:f6:15:4c:96:23:9f:42:59:9f:9c: 9f:37:bd:5d:03:54:39:6c:9f:9d:26:8e:47:8a:9a: 72:14:e2:e3:a4:d9:08:cf:ea:c5:76:c9:c4:26:1e: f3:4f:ef:ef:49:51:31:24:e0:86:7a:74:72:9a:e1: 14:de:e5:09:20:1c:c5:6e:30:71:c8:10:c0:ce:0e: 0e:03:7c:ad:f3:22:58:63:c7:60:39:e7:cd:ab:b6: c9:12:9b:25:75:35:a8:f6:ff:2b:47:59:bf:30:a0: 89:6e:1c:d7:a4:c7:00:8b:1a:99:31:83:54:bd:8f: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:7D:85:9F:50:A7:D9:C7:1D:DA:DC:DA:39:90:FE:81:B6:EA:DA X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:4b:3e:6d:f0:09:77:a2:80:10:49:89:ee:d5:9c:b2:ad: 15:f6:1f:bb:39:cf:4f:0f:6a:c3:e5:2c:81:c5:d1:ca:3b:06: 4f:30:56:a4:1a:87:37:45:93:0c:44:85:78:33:a0:db:d3:b1: 28:99:f5:02:80:39:f3:0b:bb:ae:c8:85:2b:ed:14:84:39:7d: db:79:7d:4c:5d:ef:11:fa:49:53:1a:fc:c4:da:d2:e4:97:64: d4:35:67:7f:f1:73:fe:53:fb:2a:93:02:68:ce:73:42:82:8e: 3e:86:22:fa:11:15:41:77:8d:97:1e:fc:c9:44:4b:8d:fb:29: 40:97:25:0c:51:0c:ee:76:7c:20:14:e3:bd:f9:eb:7d:35:b7: 06:14:96:f9:ef:f5:5d:fa:52:31:23:95:11:6a:60:9f:82:02: 4f:21:0c:e0:41:cd:24:02:40:73:e5:13:7e:d5:65:b4:18:78: 67:fb:9b:e9:b9:13:3c:e1:48:bc:25:ac:d1:df:5f:62:86:e8: bd:80:76:cc:8e:68:45:a0:65:69:02:c9:1c:64:c2:15:76:e7: 11:a8:6c:5a:28:ca:a1:48:35:46:b7:36:de:c0:d1:f4:41:f0: 4a:6d:1a:6f:03:a6:66:02:c2:33:4d:7c:b2:5e:f8:43:04:72: 68:07:7a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjQxMTIyMTkzODM1WhcNMjQxMTI5MTkzODM1WjAYMRYwFAYD VQQDEw02NzQwZGRiYy05OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutORx2mPWfs45wUMM8id3zhHu+71aOTeAnbm1q4DwVJptRAI7NI2SWWpUEP8 0XJxDBp8XPHFHSFLF+z7Ios9JF74ZFAA2WAluSncvHdS69CMPAiI/G/1LO+Z+hOP czrMThhAaB+sA0dYItq2LRX8NfCpgFMOoS7mjUZFoOMXfvV3UMAR/rKxlNqYqfYV TJYjn0JZn5yfN71dA1Q5bJ+dJo5HippyFOLjpNkIz+rFdsnEJh7zT+/vSVExJOCG enRymuEU3uUJIBzFbjBxyBDAzg4OA3yt8yJYY8dgOefNq7bJEpsldTWo9v8rR1m/ MKCJbhzXpMcAixqZMYNUvY+5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMUfYWf UKfZxx3a3No5kP6BturaMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed0s+bfAJd6KAEEmJ7tWcsq0V9h+7Oc9PD2rD5SyBxdHKOwZPMFak Goc3RZMMRIV4M6Db07EomfUCgDnzC7uuyIUr7RSEOX3beX1MXe8R+klTGvzE2tLk l2TUNWd/8XP+U/sqkwJoznNCgo4+hiL6ERVBd42XHvzJREuN+ylAlyUMUQzudnwg FOO9+et9NbcGFJb57/Vd+lIxI5URamCfggJPIQzgQc0kAkBz5RN+1WW0GHhn+5vp uRM84Ui8JazR319ihui9gHbMjmhFoGVpAskcZMIVducRqGxaKMqhSDVGtzbewNH0 QfBKbRpvA6ZmAsIzTXyyXvhDBHJoB3qC -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org