$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: 30lBO5L70DLHiBFXQhWYtJpiojvXUHqJxhPULfJWSIo= Subject key identifier: C1:6F:16:E7:8C:67:AB:D6:79:DE:88:61:A9:15:DE:06:86:96:5F:66 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 3423 Signing time: Fri 22 Nov 2024 14:40:43 +0000 Manifest this update: Fri 22 Nov 2024 14:40:42 +0000 Manifest next update: Fri 29 Nov 2024 14:40:42 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: 6q7lQskig0FoFiqlyQySEAAD0ktqAn3vwD2wssWz4so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Nov 22 14:40:42 2024 GMT Not After : Nov 29 14:40:42 2024 GMT Subject: CN=674097eb-b435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:59:69:6e:2c:5c:4f:39:f5:73:97:4f:90:d4: 4e:fe:d3:ee:a0:aa:29:15:76:b9:6d:ed:3e:5e:83: 0c:35:d3:bd:3a:3b:59:d0:66:bb:03:67:ad:2f:07: 62:45:51:84:c0:c7:98:2e:0c:e6:c0:2f:be:b2:a9: 65:fe:f2:62:ce:67:76:69:ab:db:fa:13:3e:60:8d: d7:8b:2e:09:b1:ad:05:d3:4b:52:0b:58:ee:96:fd: 32:be:af:7b:9d:af:00:5e:f8:f5:46:c7:aa:bd:f9: f6:b3:55:54:96:77:b8:94:17:da:95:3c:aa:46:93: b4:38:77:54:c9:1c:2b:14:aa:0c:3a:ff:ab:8c:a3: 0b:99:eb:79:17:54:ed:29:7f:25:8e:b2:ec:15:a2: 0c:f7:32:22:7d:ea:23:f5:d3:82:f2:59:85:d0:7e: 49:a1:85:56:0c:01:e6:65:91:83:71:8f:ca:6f:cf: 42:89:62:ba:e5:b5:6c:fa:8e:11:e0:7a:47:da:8c: 3d:bc:9d:aa:4c:e9:c0:70:a2:50:b7:c0:5a:3e:9e: cd:6f:db:88:8e:66:fd:c2:b7:a7:07:2a:24:0a:bf: e9:20:56:c2:07:72:d9:60:fc:7e:46:c5:6e:b6:b8: 5a:3e:c0:77:d3:9f:b3:0b:06:d4:e9:da:74:bb:65: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:16:E7:8C:67:AB:D6:79:DE:88:61:A9:15:DE:06:86:96:5F:66 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:87:06:13:0b:d6:f9:a8:7d:3b:5f:ec:fa:26:1b:05:ce:07: 87:95:13:0f:0e:41:22:ad:df:49:eb:30:74:20:6c:3c:7b:c8: 5f:0f:f6:30:bd:5f:d3:d7:92:2d:05:c1:e6:7e:33:7d:28:b5: b8:97:1f:f9:5a:a6:07:d8:85:79:5d:f5:67:46:98:fa:47:45: 25:c2:cf:e2:10:a1:7b:c2:c7:11:16:5b:d3:9d:8d:ea:63:68: 2e:c1:4e:97:72:cd:bb:03:3f:0f:43:e4:b4:a5:da:96:98:fa: 99:3b:98:9b:39:c6:5f:ab:47:4f:ab:c7:75:a0:bb:17:49:48: 20:82:df:e5:10:9c:05:1a:c7:e4:ef:46:7f:7a:05:16:ab:b2: de:49:52:77:1d:50:8f:57:da:f5:7f:b9:8a:98:fc:c7:de:3c: 5e:8e:ff:38:4d:5e:2c:3f:cf:59:c5:8c:36:60:03:c1:66:9d: 05:eb:cf:12:85:af:5b:86:96:a3:fe:8e:69:be:f0:e3:ea:3a: a4:2f:0e:96:1f:8d:d2:c6:9d:5f:9b:7c:e9:9a:ec:d9:8a:a2: 31:2f:51:e9:c1:82:7a:23:78:9a:25:7b:3c:d4:b0:b3:07:69: 8c:a3:9a:6f:d3:ef:4b:92:46:40:c2:2c:20:1c:b8:62:7f:4e: c1:2f:77:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjQxMTIyMTQ0MDQyWhcNMjQxMTI5MTQ0MDQyWjAYMRYwFAYD VQQDEw02NzQwOTdlYi1iNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FlpbixcTzn1c5dPkNRO/tPuoKopFXa5be0+XoMMNdO9OjtZ0Ga7A2etLwdi RVGEwMeYLgzmwC++sqll/vJizmd2aavb+hM+YI3Xiy4Jsa0F00tSC1julv0yvq97 na8AXvj1Rseqvfn2s1VUlne4lBfalTyqRpO0OHdUyRwrFKoMOv+rjKMLmet5F1Tt KX8ljrLsFaIM9zIifeoj9dOC8lmF0H5JoYVWDAHmZZGDcY/Kb89CiWK65bVs+o4R 4HpH2ow9vJ2qTOnAcKJQt8BaPp7Nb9uIjmb9wrenByokCr/pIFbCB3LZYPx+RsVu trhaPsB305+zCwbU6dp0u2V8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFvFueM Z6vWed6IYakV3gaGll9mMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBohwYTC9b5qH07X+z6JhsFzgeHlRMPDkEird9J6zB0IGw8e8hfD/Yw vV/T15ItBcHmfjN9KLW4lx/5WqYH2IV5XfVnRpj6R0Ulws/iEKF7wscRFlvTnY3q Y2guwU6Xcs27Az8PQ+S0pdqWmPqZO5ibOcZfq0dPq8d1oLsXSUgggt/lEJwFGsfk 70Z/egUWq7LeSVJ3HVCPV9r1f7mKmPzH3jxejv84TV4sP89ZxYw2YAPBZp0F688S ha9bhpaj/o5pvvDj6jqkLw6WH43Sxp1fm3zpmuzZiqIxL1HpwYJ6I3iaJXs81LCz B2mMo5pv0+9LkkZAwiwgHLhif07BL3f2 -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org