$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: 1PWbMEZDJzRBTtxgX0EqeIZpY2B97vht/CMEAzag++Q= Subject key identifier: C9:15:1C:FE:41:B3:53:15:C8:01:0F:75:AF:BA:55:60:E5:C6:8B:AF Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0102 Signing time: Mon 25 Nov 2024 03:08:08 +0000 Manifest this update: Mon 25 Nov 2024 03:08:07 +0000 Manifest next update: Mon 02 Dec 2024 03:08:07 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: Fq9NT8rZ4wp8NsgDHaXzCQay7uI4hjFZDKMCs7BQB4w=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Nov 25 03:08:07 2024 GMT Not After : Dec 2 03:08:07 2024 GMT Subject: CN=6743ea17-53c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:d5:45:47:d8:1d:20:c1:9e:d7:c8:35:8e: 38:09:34:d7:e5:fa:60:21:82:03:18:07:47:6d:99: 37:71:5d:ed:75:8c:ea:dd:d2:5c:77:98:42:4f:f7: ce:dd:24:a1:23:1d:fe:da:0d:04:f2:57:62:fd:c4: 04:b0:0c:8c:b6:c9:87:8e:aa:37:c4:f4:f9:b5:9e: 6b:de:c8:63:0b:00:06:f4:f5:b1:c1:5b:3f:c9:9f: a3:79:58:ad:62:bd:58:de:b8:50:28:f6:5a:d2:3d: ad:df:8e:6f:2f:a5:ee:5b:a5:ea:69:20:3f:57:5d: 97:bd:e3:66:94:20:70:ee:8b:ed:0a:ee:71:64:a4: 46:34:13:cf:8e:d5:c4:66:65:f7:f1:54:f6:b2:4c: 69:71:43:10:aa:5f:96:5f:c8:d2:1b:ee:82:a1:11: 41:a6:03:a6:47:9a:84:7e:81:55:ce:cc:07:a7:6c: 99:66:75:22:60:06:4b:70:53:74:20:65:87:79:14: 3f:84:a8:b2:dd:bf:11:23:9f:2e:48:6e:12:db:fc: bc:c8:30:52:d3:30:62:53:dd:df:8b:b2:9a:5a:41: f2:8e:60:6e:05:a7:85:eb:88:35:ba:ab:0f:0e:35: 16:0a:29:68:3a:b6:44:a0:5a:9e:4e:64:38:d8:70: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:1C:FE:41:B3:53:15:C8:01:0F:75:AF:BA:55:60:E5:C6:8B:AF X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:77:cd:9d:c9:44:e2:e5:74:ba:11:a8:f9:13:25:76:9d:7f: 3b:9d:f9:c1:2b:33:2b:82:ac:b8:f4:fe:97:ac:87:5b:27:2d: 7d:a0:ee:59:4c:85:d5:35:74:1c:7e:11:40:79:0b:c0:5b:cd: 0b:73:7f:1a:a9:4c:51:94:43:9a:f6:8e:13:01:54:af:7f:e7: 5a:0b:7b:e8:0b:fb:be:78:2f:56:98:b2:e9:7a:f6:5b:d7:a6: f4:91:df:03:73:55:6c:b0:8a:08:6b:6f:34:87:45:94:1e:82: 76:55:3c:af:be:7b:4f:8a:42:3b:ec:88:5d:b4:c1:7e:cb:88: 29:12:62:dd:01:c6:b5:44:69:81:0d:ad:7a:59:2b:d2:e2:a0: 96:d8:d7:55:1c:35:60:64:66:cf:bc:2f:8b:bc:10:c7:d8:20: 55:d6:e8:45:ac:6c:fa:e1:13:1a:3d:ae:7c:47:a0:91:38:7c: 52:27:37:1d:0e:df:4f:02:95:4d:64:f6:ee:a3:96:80:2b:a8: 40:75:3d:0c:b4:79:43:f2:3a:85:a9:f9:cf:43:b1:3c:6b:6e: 92:86:11:98:e8:af:cd:9a:73:01:ea:66:2e:30:e1:f8:1c:8c: 60:9f:d6:d4:b6:5b:3d:ef:c3:a5:82:7a:d5:f8:7b:e6:83:d1: aa:00:d6:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjQxMTI1MDMwODA3WhcNMjQxMjAyMDMwODA3WjAYMRYwFAYD VQQDEw02NzQzZWExNy01M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLDVRUfYHSDBntfINY44CTTX5fpgIYIDGAdHbZk3cV3tdYzq3dJcd5hCT/fO 3SShIx3+2g0E8ldi/cQEsAyMtsmHjqo3xPT5tZ5r3shjCwAG9PWxwVs/yZ+jeVit Yr1Y3rhQKPZa0j2t345vL6XuW6XqaSA/V12XveNmlCBw7ovtCu5xZKRGNBPPjtXE ZmX38VT2skxpcUMQql+WX8jSG+6CoRFBpgOmR5qEfoFVzswHp2yZZnUiYAZLcFN0 IGWHeRQ/hKiy3b8RI58uSG4S2/y8yDBS0zBiU93fi7KaWkHyjmBuBaeF64g1uqsP DjUWCiloOrZEoFqeTmQ42HC9oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkVHP5B s1MVyAEPda+6VWDlxouvMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLd82dyUTi5XS6Eaj5EyV2nX87nfnBKzMrgqy49P6XrIdbJy19oO5Z TIXVNXQcfhFAeQvAW80Lc38aqUxRlEOa9o4TAVSvf+daC3voC/u+eC9WmLLpevZb 16b0kd8Dc1VssIoIa280h0WUHoJ2VTyvvntPikI77IhdtMF+y4gpEmLdAca1RGmB Da16WSvS4qCW2NdVHDVgZGbPvC+LvBDH2CBV1uhFrGz64RMaPa58R6CROHxSJzcd Dt9PApVNZPbuo5aAK6hAdT0MtHlD8jqFqfnPQ7E8a26ShhGY6K/NmnMB6mYuMOH4 HIxgn9bUtls978OlgnrV+Hvmg9GqANaJ -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:28 2024 by rpki-client on console-fra.rpki-client.org