$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: VP24OmmwA8miutlDajOFJBXD2MqKaRUZtBaneZlHg64= Subject key identifier: DD:B7:47:3D:8F:9E:1D:C8:0D:30:3E:62:89:C9:0F:58:1C:59:D5:B7 Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 013D Signing time: Wed 20 Nov 2024 15:55:39 +0000 Manifest this update: Wed 20 Nov 2024 15:55:38 +0000 Manifest next update: Wed 27 Nov 2024 15:55:38 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: H0DmDreEpmFDPU61bMNzTyiOOSPnsrsg1r6W24XzW/0=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: 2Sa4Qh8zy7UAIyROQUdYWBW/nS/7CVePmZ6lyfynp9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Nov 20 15:55:38 2024 GMT Not After : Nov 27 15:55:38 2024 GMT Subject: CN=673e067b-7ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:92:d8:85:3b:a9:1a:6a:3e:b0:29:ab:01:57: 72:3f:ef:46:61:11:6c:b1:34:88:0c:08:59:7f:90: d8:32:64:26:fa:c3:f1:72:d0:c4:e2:20:3e:1d:a4: 32:3b:63:e5:14:e0:0a:3c:b0:c0:52:e0:14:60:fd: 90:52:41:db:23:e7:cc:28:87:14:75:49:28:8a:78: e2:d3:d2:d1:b4:ae:dd:52:b0:a5:db:bd:a4:0b:14: 8d:a8:77:6f:f2:6a:6c:37:cc:f8:c2:8b:4c:a9:51: 1f:11:85:84:f2:c2:20:42:72:57:6a:f2:bc:b9:ff: 48:99:d1:c6:b6:34:bb:45:3f:5c:13:bc:fe:46:9c: f7:d3:ec:5f:f1:78:08:b5:f9:b7:e2:d6:c2:db:66: 17:90:5a:e1:f4:df:56:e5:ff:84:9f:18:f2:41:9d: 28:a2:1a:1e:b5:9b:ff:c1:fb:87:eb:38:ea:0d:91: 32:92:0c:2f:d8:4b:b5:7b:b0:4d:66:c7:71:bb:b7: 51:fe:38:2f:f5:b5:cb:f6:d2:ac:e1:5f:e7:39:52: 3b:2e:96:05:0e:93:1a:0a:14:3b:49:58:dd:df:d8: 24:1c:85:67:7a:09:39:61:c2:89:b7:76:d3:f0:fc: ba:3d:5c:eb:ac:9d:11:a8:7d:9a:7a:1e:c3:5f:49: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:47:3D:8F:9E:1D:C8:0D:30:3E:62:89:C9:0F:58:1C:59:D5:B7 X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:75:51:27:34:8c:07:58:65:64:28:80:2c:41:98:98:e3:c1: 76:a2:97:ab:31:d8:6a:ee:06:0a:67:c7:39:02:b1:ce:8a:1f: 03:5d:c8:33:c5:b7:c0:2c:7d:2a:c6:11:56:5a:44:ed:e6:d0: a1:e8:35:12:26:03:c9:6d:71:2f:13:ae:32:a0:17:2c:7d:0b: b0:04:a9:95:b5:36:e2:02:58:a0:62:2d:ec:26:bd:c9:f8:24: 68:33:4a:e9:87:fd:bd:e5:84:66:4f:0f:c1:7b:d4:f1:6e:12: 4f:55:be:b4:52:7f:dd:d9:5f:00:d2:f1:a5:4d:5a:eb:1c:5e: fd:d9:f8:ff:06:04:66:85:3f:25:ea:b0:8f:e1:24:79:bf:ec: 99:9b:df:46:52:6c:36:3e:9c:7e:c7:75:7d:86:6a:08:89:b5: 18:1b:d9:2e:c2:48:d8:ea:6a:8a:c8:a2:64:88:4f:68:26:fc: 5f:4d:ac:d4:3d:80:40:2c:fe:9f:40:1e:62:36:9d:2c:23:e5: 87:8a:b3:ba:6f:c1:f0:c6:cd:66:f0:85:bd:66:71:62:83:10: bf:8b:ab:71:3d:05:6d:ee:6e:9d:59:e3:3d:b7:c6:34:7f:93: a4:91:91:cf:d1:71:74:eb:03:91:fe:ae:8e:c9:7a:ad:d2:64: 41:b4:5c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjQxMTIwMTU1NTM4WhcNMjQxMTI3MTU1NTM4WjAYMRYwFAYD VQQDEw02NzNlMDY3Yi03YWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65LYhTupGmo+sCmrAVdyP+9GYRFssTSIDAhZf5DYMmQm+sPxctDE4iA+HaQy O2PlFOAKPLDAUuAUYP2QUkHbI+fMKIcUdUkoinji09LRtK7dUrCl272kCxSNqHdv 8mpsN8z4wotMqVEfEYWE8sIgQnJXavK8uf9ImdHGtjS7RT9cE7z+Rpz30+xf8XgI tfm34tbC22YXkFrh9N9W5f+EnxjyQZ0oohoetZv/wfuH6zjqDZEykgwv2Eu1e7BN Zsdxu7dR/jgv9bXL9tKs4V/nOVI7LpYFDpMaChQ7SVjd39gkHIVnegk5YcKJt3bT 8Py6PVzrrJ0RqH2aeh7DX0kmfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN23Rz2P nh3IDTA+YonJD1gcWdW3MB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2dVEnNIwHWGVkKIAsQZiY48F2operMdhq7gYKZ8c5ArHOih8DXcgz xbfALH0qxhFWWkTt5tCh6DUSJgPJbXEvE64yoBcsfQuwBKmVtTbiAligYi3sJr3J +CRoM0rph/295YRmTw/Be9TxbhJPVb60Un/d2V8A0vGlTVrrHF792fj/BgRmhT8l 6rCP4SR5v+yZm99GUmw2Ppx+x3V9hmoIibUYG9kuwkjY6mqKyKJkiE9oJvxfTazU PYBALP6fQB5iNp0sI+WHirO6b8Hwxs1m8IW9ZnFigxC/i6txPQVt7m6dWeM9t8Y0 f5OkkZHP0XF06wOR/q6OyXqt0mRBtFxl -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:12 2024 by rpki-client on console-ams.rpki-client.org