$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: 0DbLZ7J506nQBYVINpvP3SCOqN3H5Yi+2q8+6KN77sA= Subject key identifier: A5:88:AE:3F:81:BA:BF:68:98:F1:1E:6A:B4:68:44:80:4C:D0:88:A8 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 013F Signing time: Sun 24 Nov 2024 15:51:21 +0000 Manifest this update: Sun 24 Nov 2024 15:51:21 +0000 Manifest next update: Sun 01 Dec 2024 15:51:21 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: CDpCxQ0PWE90M9WVAnFVLRGYKPKSNvysurunYbL7vUE=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: wIUEQO5NPMHqkpPnW+KqLQoOshirDHVVKlc8ye6IXNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Nov 24 15:51:21 2024 GMT Not After : Dec 1 15:51:21 2024 GMT Subject: CN=67434b79-e0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:ea:0c:ca:35:51:9a:f9:c4:42:e7:17:ca: 69:9f:9f:46:a2:9c:b8:c2:3a:0a:60:20:4e:22:ef: 6b:c9:78:52:4e:fa:8d:5b:5e:14:b7:95:62:90:70: 6a:d1:5c:a9:20:ef:02:f9:a6:ee:ed:5f:a3:86:fc: fe:ca:78:aa:c2:2c:11:7a:15:3a:fb:ab:74:f8:82: f6:5d:55:7c:72:3d:8a:c7:67:2c:a1:cc:21:df:38: 95:ea:9a:31:44:80:00:f2:5a:7e:10:7f:4f:76:37: ae:a9:d7:89:0a:06:87:63:eb:97:6c:e7:c4:34:2c: a7:f6:b6:4f:c4:3b:c1:f1:14:cb:e3:20:49:50:34: 8d:b3:ac:62:1b:d0:43:19:2e:bd:87:43:5b:c4:61: 98:e5:41:f0:02:64:07:a6:e9:c4:7f:b3:60:71:28: e1:8a:e8:65:d0:16:1d:e4:93:d2:6d:2f:ff:ff:dd: 0e:84:cf:a1:be:8d:a0:53:c3:89:77:1d:7c:72:53: ca:31:3d:3b:40:7d:e8:85:d6:8a:76:b9:d1:d0:d4: 69:ef:2a:e2:bd:e6:72:5e:c7:b0:97:37:8b:47:ee: ee:5b:56:fe:17:08:cd:00:5c:16:b3:04:65:cc:87: 6b:e0:99:d6:40:a4:4f:d3:6b:ec:2c:8d:1f:93:5f: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:88:AE:3F:81:BA:BF:68:98:F1:1E:6A:B4:68:44:80:4C:D0:88:A8 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c9:61:4a:59:22:71:76:20:c4:05:d8:db:c8:64:e1:a6:d3: 9b:4c:3f:e7:6d:4d:db:61:36:2a:b8:7b:54:73:1d:d8:60:1f: 08:0a:84:09:f9:df:1e:34:33:1f:ee:5b:37:ac:13:97:6c:4c: 05:33:a7:37:33:51:d8:72:69:dd:ff:05:87:27:a2:db:7f:b6: 6b:a6:80:4f:5c:1f:a7:35:ae:d7:d0:72:df:e3:d5:5d:fc:97: a1:25:02:15:6e:98:c7:f6:d7:41:a2:61:54:45:46:be:78:20: 6f:cb:07:5c:c4:77:42:ad:b2:cb:30:87:44:93:9e:58:cc:dc: fb:83:54:bd:b3:9b:de:5e:14:84:ca:15:d1:80:a4:4c:a3:1d: 0c:94:e5:61:1a:2a:7c:5f:c9:12:81:9c:9e:da:9e:bb:df:fa: 8b:6f:09:2c:65:40:bc:25:33:ea:37:99:63:1c:bd:12:9f:58: 00:a5:60:52:ae:60:1c:f5:65:7e:72:c7:3d:de:f6:8b:54:c3: 81:45:16:f6:38:eb:56:27:a2:be:a4:b3:39:92:d1:81:ce:47: fd:ca:d6:59:b8:bf:97:a7:0a:e5:53:31:0b:5c:62:d9:01:5e: 0c:21:70:08:33:ef:04:4a:2b:e4:2a:4c:80:92:eb:bd:f9:73: 18:92:91:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjQxMTI0MTU1MTIxWhcNMjQxMjAxMTU1MTIxWjAYMRYwFAYD VQQDEw02NzQzNGI3OS1lMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxLqDMo1UZr5xELnF8ppn59Gopy4wjoKYCBOIu9ryXhSTvqNW14Ut5VikHBq 0VypIO8C+abu7V+jhvz+yniqwiwRehU6+6t0+IL2XVV8cj2Kx2csocwh3ziV6pox RIAA8lp+EH9PdjeuqdeJCgaHY+uXbOfENCyn9rZPxDvB8RTL4yBJUDSNs6xiG9BD GS69h0NbxGGY5UHwAmQHpunEf7NgcSjhiuhl0BYd5JPSbS///90OhM+hvo2gU8OJ dx18clPKMT07QH3ohdaKdrnR0NRp7yriveZyXsewlzeLR+7uW1b+FwjNAFwWswRl zIdr4JnWQKRP02vsLI0fk1+qtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWIrj+B ur9omPEearRoRIBM0IioMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6yWFKWSJxdiDEBdjbyGThptObTD/nbU3bYTYquHtUcx3YYB8ICoQJ +d8eNDMf7ls3rBOXbEwFM6c3M1HYcmnd/wWHJ6Lbf7ZrpoBPXB+nNa7X0HLf49Vd /JehJQIVbpjH9tdBomFURUa+eCBvywdcxHdCrbLLMIdEk55YzNz7g1S9s5veXhSE yhXRgKRMox0MlOVhGip8X8kSgZye2p673/qLbwksZUC8JTPqN5ljHL0Sn1gApWBS rmAc9WV+csc93vaLVMOBRRb2OOtWJ6K+pLM5ktGBzkf9ytZZuL+XpwrlUzELXGLZ AV4MIXAIM+8ESivkKkyAkuu9+XMYkpHu -----END CERTIFICATE-----Generated at Sun Nov 24 18:25:00 2024 by rpki-client on console-ams.rpki-client.org