$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: l1bfe7Ihsf1mq0D0/YChp8PcE6duglhYADK5G9ivfzs= Subject key identifier: AC:28:09:AF:6F:9A:33:AB:A4:7C:10:DD:3E:EC:0D:8C:CA:79:9D:36 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 010D Signing time: Sat 23 Nov 2024 03:11:55 +0000 Manifest this update: Sat 23 Nov 2024 03:11:55 +0000 Manifest next update: Sat 30 Nov 2024 03:11:55 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: uU5Mmx8UrkVg39LYky7izUWhFMWPnWr84MZFF2porSU=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: bVFigoZ3x0JTyZjZCupe2tjJv5QUTmpZ1H+nraFSE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Nov 23 03:11:55 2024 GMT Not After : Nov 30 03:11:55 2024 GMT Subject: CN=674147fb-0db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:0a:e4:ab:75:de:e5:06:94:44:92:3c:05: 06:39:89:9a:da:1a:0f:b6:d2:d7:38:1f:c5:2e:00: 56:3d:79:5a:29:9c:a0:f7:ff:09:58:18:5c:48:4f: 71:7d:ef:16:ee:40:95:d9:ba:71:88:b3:21:30:c1: bb:c7:50:5d:1b:7f:0d:ed:bb:1a:02:8f:3f:4e:0b: b6:5b:48:18:2e:8b:35:4d:c5:f2:65:33:e3:2a:df: 51:18:9e:4b:b2:a3:73:81:ac:af:0b:5c:d9:50:6d: cb:d4:d2:26:8b:1f:06:1c:a9:45:bb:8d:3a:49:84: 2b:16:1a:32:a4:b5:1b:46:3a:33:07:70:50:b5:af: 4a:15:d0:4a:92:6a:f7:51:90:52:ba:58:8a:80:3b: c6:bd:2d:b4:03:69:3a:22:b5:bc:c3:5d:82:5e:77: b2:77:6d:c5:a0:20:35:69:03:f4:60:78:c8:d7:1c: 11:ed:d3:48:c5:3b:6b:90:e4:a1:79:62:db:1b:1a: f1:35:b8:bb:4e:e0:d6:72:4d:ce:f6:01:6e:8c:9d: 44:e7:fa:9f:21:7f:25:be:44:e1:4c:29:6f:93:1e: 17:30:ce:62:64:3f:5b:46:6b:51:26:3f:96:66:4e: e5:8e:14:af:d1:51:1b:c6:7a:4b:71:37:d4:67:3f: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:09:AF:6F:9A:33:AB:A4:7C:10:DD:3E:EC:0D:8C:CA:79:9D:36 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:53:a2:1e:ff:d2:7f:98:2d:7a:35:06:34:6a:13:f1:3e:0f: 02:60:01:01:f5:f9:ca:82:e3:5f:db:26:da:62:6b:c5:2b:19: 4a:49:e6:d7:34:c4:6b:bf:e7:b9:cf:28:0a:27:7a:fe:0d:41: e5:67:6d:4f:23:2d:94:f3:47:bc:81:00:5e:da:92:05:14:2c: be:07:4e:57:c0:13:14:e9:73:c2:2c:56:6d:56:34:3f:9b:5b: 69:91:05:02:ba:c1:3f:39:39:45:58:b6:99:f5:88:b6:72:63: 59:ec:8d:d0:c2:2a:b2:c9:8e:2f:9b:d9:87:9b:ad:a2:d6:be: fc:43:a7:f5:7c:1a:96:95:59:d7:7d:1a:a4:ce:6b:70:c4:59: 17:9b:89:f3:50:cb:22:66:f9:38:43:9e:1f:ab:e8:5b:3c:bb: 84:2d:89:6a:9c:5d:7a:1e:97:51:db:07:b6:2c:d9:e4:51:a1: 68:4c:05:78:a2:bb:51:5e:27:1e:78:58:94:ac:81:cb:99:34: 8f:9d:8f:77:38:02:47:84:3a:fc:a7:13:e1:dd:d9:21:d1:bb: a7:87:58:a1:59:da:a8:21:61:4d:14:cc:98:37:b2:10:18:f4: ef:c0:01:a2:c7:56:f2:8b:64:c8:94:2e:7b:67:a4:63:8f:7b: 31:90:b6:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjQxMTIzMDMxMTU1WhcNMjQxMTMwMDMxMTU1WjAYMRYwFAYD VQQDEw02NzQxNDdmYi0wZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDMK5Kt13uUGlESSPAUGOYma2hoPttLXOB/FLgBWPXlaKZyg9/8JWBhcSE9x fe8W7kCV2bpxiLMhMMG7x1BdG38N7bsaAo8/Tgu2W0gYLos1TcXyZTPjKt9RGJ5L sqNzgayvC1zZUG3L1NImix8GHKlFu406SYQrFhoypLUbRjozB3BQta9KFdBKkmr3 UZBSuliKgDvGvS20A2k6IrW8w12CXneyd23FoCA1aQP0YHjI1xwR7dNIxTtrkOSh eWLbGxrxNbi7TuDWck3O9gFujJ1E5/qfIX8lvkThTClvkx4XMM5iZD9bRmtRJj+W Zk7ljhSv0VEbxnpLcTfUZz/6YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwoCa9v mjOrpHwQ3T7sDYzKeZ02MB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABU6Ie/9J/mC16NQY0ahPxPg8CYAEB9fnKguNf2ybaYmvFKxlKSebX NMRrv+e5zygKJ3r+DUHlZ21PIy2U80e8gQBe2pIFFCy+B05XwBMU6XPCLFZtVjQ/ m1tpkQUCusE/OTlFWLaZ9Yi2cmNZ7I3QwiqyyY4vm9mHm62i1r78Q6f1fBqWlVnX fRqkzmtwxFkXm4nzUMsiZvk4Q54fq+hbPLuELYlqnF16HpdR2we2LNnkUaFoTAV4 ortRXiceeFiUrIHLmTSPnY93OAJHhDr8pxPh3dkh0bunh1ihWdqoIWFNFMyYN7IQ GPTvwAGix1byi2TIlC57Z6Rjj3sxkLY1 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org