$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: ixW0Cg0WDsdsn7LGYLREVzdLoDilcp9Zkt00g2cmKFg= Subject key identifier: 5D:BA:A1:7D:BE:03:7E:0E:AC:B1:67:FC:76:78:48:A0:36:DE:9A:BB Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 035B Signing time: Sat 23 Nov 2024 00:30:58 +0000 Manifest this update: Sat 23 Nov 2024 00:30:58 +0000 Manifest next update: Sat 30 Nov 2024 00:30:58 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: k9gjfv/z8GsItENaCzIuaQ47Cs8d69itnlgkO6BKlIU=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: NmJNgM1TocJKXWdxIqSxjaeXJhysWvNCkav+9g71gx8=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: lZN8I9KZhIY+6zkUuDTd1f/VOr/7joqERe0PJi8R+bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Nov 23 00:30:58 2024 GMT Not After : Nov 30 00:30:58 2024 GMT Subject: CN=67412242-6129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:a4:7b:40:fe:38:6c:f9:7a:11:c6:b8:44: 00:1a:af:c5:48:0a:54:8b:6d:44:15:8c:48:f9:13: e5:52:af:91:fc:c4:f5:43:df:a5:e3:f7:9c:63:73: 58:85:1e:cb:03:bd:a0:e9:2a:9e:cf:da:4a:d6:0a: f0:66:3c:58:e0:78:d0:1a:57:d7:23:f6:86:e0:93: 64:b8:21:47:e2:c6:96:4e:fd:cb:84:31:4d:a0:8c: 0c:ec:31:1e:0c:a4:a2:05:7d:03:2f:0c:78:71:56: 69:4c:8e:7a:37:bf:aa:ae:60:1d:eb:82:d4:09:c2: cb:de:b5:0d:7f:13:a8:3e:cd:1b:df:26:a3:c6:19: 01:19:55:d1:8f:e8:b6:f9:5a:af:67:8a:40:27:93: 77:0a:71:00:8c:42:ff:16:c8:1a:71:24:c0:90:60: a5:ac:cd:f4:07:9d:d0:88:0b:35:99:16:c7:72:5c: 8b:11:46:3e:9d:5c:84:b7:9a:b5:0e:4e:8a:95:2d: a6:17:c3:a0:24:56:13:52:38:0c:85:11:71:e3:88: b8:31:83:cc:11:f5:0a:01:03:40:92:5a:2f:9a:0b: 11:55:1f:d8:ef:bb:8b:12:40:6c:77:c9:f4:13:e4: 54:4e:7c:4b:88:d2:45:82:ad:5a:87:b9:86:e9:80: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BA:A1:7D:BE:03:7E:0E:AC:B1:67:FC:76:78:48:A0:36:DE:9A:BB X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c7:d2:45:c2:b0:94:da:5d:cb:dc:21:3b:69:ea:27:63:bf: 3a:ab:b7:0a:e5:86:be:db:cb:ee:c3:f4:6a:f0:57:7b:a5:b5: 43:4d:b4:2b:b9:59:f2:9c:53:23:ad:4f:a1:d8:b4:e2:b6:11: 37:17:5a:48:27:cb:8b:90:54:df:c9:c2:2c:e8:83:ad:d3:3a: ce:9d:70:57:eb:f7:7f:4f:1a:74:ec:ef:10:26:29:ca:82:de: 2d:c2:19:c1:d8:05:ae:09:8e:82:0b:3a:1d:f2:38:8e:e0:1b: e4:a8:db:06:4e:91:95:e0:d9:4f:a2:19:11:68:79:7b:5c:c1: 8c:8f:c6:0b:8f:70:45:76:2d:8c:ff:2b:10:35:27:87:f7:ce: 53:47:ee:68:2f:2e:d5:d8:39:40:93:38:02:b4:82:1d:f8:8c: 67:5d:52:b3:23:fb:5c:df:d8:a8:b1:7d:dc:f0:21:1d:75:1c: b3:de:55:79:fb:b1:cf:d6:f0:42:d7:04:eb:ff:4b:c0:cb:db: 93:ed:ad:df:c1:b5:cd:57:da:f2:79:cb:eb:db:54:4a:0e:b4: 5c:59:c7:dd:8a:00:62:8b:a4:8f:8f:42:f7:04:65:6a:c0:e5: 64:3e:07:8b:60:72:dd:08:b9:6f:e9:19:2f:36:36:81:b6:d6: 31:18:76:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjQxMTIzMDAzMDU4WhcNMjQxMTMwMDAzMDU4WjAYMRYwFAYD VQQDEw02NzQxMjI0Mi02MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNqke0D+OGz5ehHGuEQAGq/FSApUi21EFYxI+RPlUq+R/MT1Q9+l4/ecY3NY hR7LA72g6Sqez9pK1grwZjxY4HjQGlfXI/aG4JNkuCFH4saWTv3LhDFNoIwM7DEe DKSiBX0DLwx4cVZpTI56N7+qrmAd64LUCcLL3rUNfxOoPs0b3yajxhkBGVXRj+i2 +VqvZ4pAJ5N3CnEAjEL/FsgacSTAkGClrM30B53QiAs1mRbHclyLEUY+nVyEt5q1 Dk6KlS2mF8OgJFYTUjgMhRFx44i4MYPMEfUKAQNAklovmgsRVR/Y77uLEkBsd8n0 E+RUTnxLiNJFgq1ah7mG6YA33QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF26oX2+ A34OrLFn/HZ4SKA23pq7MB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+x9JFwrCU2l3L3CE7aeonY786q7cK5Ya+28vuw/Rq8Fd7pbVDTbQr uVnynFMjrU+h2LTithE3F1pIJ8uLkFTfycIs6IOt0zrOnXBX6/d/Txp07O8QJinK gt4twhnB2AWuCY6CCzod8jiO4BvkqNsGTpGV4NlPohkRaHl7XMGMj8YLj3BFdi2M /ysQNSeH985TR+5oLy7V2DlAkzgCtIId+IxnXVKzI/tc39iosX3c8CEddRyz3lV5 +7HP1vBC1wTr/0vAy9uT7a3fwbXNV9ryecvr21RKDrRcWcfdigBii6SPj0L3BGVq wOVkPgeLYHLdCLlv6RkvNjaBttYxGHbS -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org