$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: XTulD4rwULc5ii4v3vufGrY6MuP83eg4vDVZpEdbrjw= Subject key identifier: DD:BF:06:1A:E5:42:8D:ED:5A:FE:1A:7A:45:F3:F3:AE:38:15:1C:7B Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1B6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1B69 Signing time: Wed 20 Nov 2024 16:13:21 +0000 Manifest this update: Wed 20 Nov 2024 16:13:21 +0000 Manifest next update: Wed 27 Nov 2024 16:13:21 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: J+UZZ+E1ctc2dDnTz6jy3p5GsOOhsbbEvRg+f97SlXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7019 (0x1b6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Nov 20 16:13:21 2024 GMT Not After : Nov 27 16:13:21 2024 GMT Subject: CN=673e0aa1-9d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:8e:da:7b:00:ab:9d:f0:13:da:e5:86:68: 5f:e7:29:1e:0d:da:86:f1:26:6e:df:b8:e8:49:56: 9f:8a:29:45:8e:bc:79:de:a8:15:f4:60:ce:dd:f4: fa:1a:d2:07:93:b4:4c:fc:81:5a:ef:fa:15:78:e8: fd:5f:be:33:21:90:c9:b1:f7:ce:b9:21:b8:f1:56: 85:5a:ab:6f:fd:62:34:ab:87:aa:00:15:4b:9b:3a: 1b:fe:8f:47:7c:5a:ca:47:71:ce:31:6d:79:c9:15: 3c:78:8b:6b:a0:66:04:d7:3a:4f:59:2c:7b:53:cb: 5c:b1:0f:d4:c8:53:bb:ce:49:72:5d:1a:3c:dc:3d: bd:67:2b:27:9e:43:6f:15:d4:3a:7a:fa:8a:64:a3: 10:1a:ba:c8:8f:17:f5:1b:dc:14:6b:94:07:5d:90: 7c:cd:bc:bd:3e:e6:16:ae:5d:a2:91:c7:6f:50:cf: ab:20:0b:79:5b:fe:cb:c4:b1:a2:17:13:9e:41:bb: f3:0b:a0:a9:cc:26:6e:f2:ea:52:83:b6:5a:19:45: 2b:13:b9:ee:9d:a4:54:04:d1:5e:84:f0:0e:7b:34: bd:47:a2:24:e4:24:87:2b:96:69:f5:d2:2c:23:e5: 1a:d0:f6:a8:f9:5e:9f:86:b2:f1:de:ec:ee:22:64: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:06:1A:E5:42:8D:ED:5A:FE:1A:7A:45:F3:F3:AE:38:15:1C:7B X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c6:a5:c7:61:63:82:f6:42:16:e3:b6:2a:f6:05:b7:95:7d: d9:a9:55:55:76:f3:0a:5e:48:31:4f:61:4c:97:85:9c:8f:fd: cf:e3:74:3e:1b:13:99:52:98:1b:96:93:99:20:8b:d3:98:db: 49:65:33:6d:2b:bd:1a:8d:da:eb:3e:79:37:99:79:fb:ee:9a: b3:2b:20:07:38:7b:4b:ca:27:6d:23:73:1d:0e:76:3e:86:a9: 1f:1a:d2:7c:46:75:3a:e4:8f:9d:da:4c:3d:93:53:22:49:a0: 7d:93:48:1d:8c:13:8b:bd:bf:ed:09:72:ff:1f:c6:2c:9e:17: f0:a3:c4:c0:81:76:dd:c1:08:eb:e8:a0:04:43:0c:81:c6:ca: 99:5a:1f:85:0b:87:43:e3:94:79:5f:93:01:b7:b1:c3:db:7e: f1:9a:07:94:e7:bd:7c:a4:2b:52:b3:77:4d:5f:35:8a:3a:05: b5:4e:ec:a8:79:0d:95:45:41:6e:b4:fb:4a:1c:44:5d:86:39: 19:18:a3:8a:2b:75:11:58:ce:37:96:58:73:8b:43:44:5f:5c: 3b:ef:63:f7:73:6b:c8:35:e8:d8:85:ab:37:52:92:c8:5f:60: 00:52:a0:c3:45:e4:0a:03:57:af:0d:71:ab:51:a6:33:93:a9: 9d:21:de:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjQxMTIwMTYxMzIxWhcNMjQxMTI3MTYxMzIxWjAYMRYwFAYD VQQDEw02NzNlMGFhMS05ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqaO2nsAq53wE9rlhmhf5ykeDdqG8SZu37joSVafiilFjrx53qgV9GDO3fT6 GtIHk7RM/IFa7/oVeOj9X74zIZDJsffOuSG48VaFWqtv/WI0q4eqABVLmzob/o9H fFrKR3HOMW15yRU8eItroGYE1zpPWSx7U8tcsQ/UyFO7zklyXRo83D29ZysnnkNv FdQ6evqKZKMQGrrIjxf1G9wUa5QHXZB8zby9PuYWrl2ikcdvUM+rIAt5W/7LxLGi FxOeQbvzC6CpzCZu8upSg7ZaGUUrE7nunaRUBNFehPAOezS9R6Ik5CSHK5Zp9dIs I+Ua0Pao+V6fhrLx3uzuImRLuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2/Bhrl Qo3tWv4aekXz8644FRx7MB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxqXHYWOC9kIW47Yq9gW3lX3ZqVVVdvMKXkgxT2FMl4Wcj/3P43Q+ GxOZUpgblpOZIIvTmNtJZTNtK70ajdrrPnk3mXn77pqzKyAHOHtLyidtI3MdDnY+ hqkfGtJ8RnU65I+d2kw9k1MiSaB9k0gdjBOLvb/tCXL/H8Ysnhfwo8TAgXbdwQjr 6KAEQwyBxsqZWh+FC4dD45R5X5MBt7HD237xmgeU5718pCtSs3dNXzWKOgW1Tuyo eQ2VRUFutPtKHERdhjkZGKOKK3URWM43llhzi0NEX1w772P3c2vINejYhas3UpLI X2AAUqDDReQKA1evDXGrUaYzk6mdId7j -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:10 2024 by rpki-client on console-ams.rpki-client.org