$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json) Hash identifier: w/g785bVgBYzEhTi6ygbJ0loPA/E6afkxL3x66uktKk= Subject key identifier: 5D:CA:2A:81:68:6D:7C:D9:82:5D:9B:7C:06:02:4B:15:E8:25:B8:3A Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Certificate serial: 3421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft Manifest number: 3421 Signing time: Fri 22 Nov 2024 15:15:35 +0000 Manifest this update: Fri 22 Nov 2024 15:15:34 +0000 Manifest next update: Fri 29 Nov 2024 15:15:34 +0000 Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: 6EZPMOTUc6Xp7AL5wN4s+Kkr1BeN2+LLxeFhmFhihjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13345 (0x3421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Validity Not Before: Nov 22 15:15:34 2024 GMT Not After : Nov 29 15:15:34 2024 GMT Subject: CN=6740a016-f4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:0c:c8:b5:ad:53:f8:6b:ac:53:67:99:bf: 64:51:76:7a:a1:64:33:54:e3:fe:ce:27:be:02:45: 5c:ba:20:1e:12:c4:5d:d5:f6:e6:ba:0c:12:db:bb: 0f:11:2a:20:d3:02:3a:a9:96:e9:31:fd:33:2a:91: 18:a3:b1:e2:b8:ce:59:44:22:f2:0a:0e:11:60:1b: a3:3d:43:ac:08:60:39:48:70:99:8c:1f:d7:30:b3: 95:d1:1e:44:7c:c9:8b:4d:c4:24:98:0d:74:aa:19: 87:0d:0c:51:f4:bd:ae:54:d2:5b:42:5c:ea:51:d4: e2:33:67:d3:ea:f8:74:d2:4e:88:0f:e4:4a:11:a7: 98:20:ed:0b:d9:c2:d5:c6:f0:cd:16:90:32:ca:c1: 4a:83:de:35:60:d2:fb:5f:15:bd:1f:d5:4e:0e:ad: 27:aa:f2:d4:2b:21:00:98:bf:4f:a7:83:34:c2:38: ff:02:38:f7:4f:72:22:4c:92:42:aa:d7:82:26:78: 40:e4:22:89:4a:2c:1e:71:14:c4:20:d2:f6:5a:cc: c7:a8:28:73:1b:be:ef:3e:eb:ed:8d:60:87:61:6c: 52:49:f6:71:a5:9c:27:27:26:96:2d:d9:fe:32:5e: d8:9f:14:ec:e7:fb:6e:77:fb:5a:11:00:e0:db:1a: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:2A:81:68:6D:7C:D9:82:5D:9B:7C:06:02:4B:15:E8:25:B8:3A X509v3 Authority Key Identifier: keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6b:1b:dd:d8:f2:b9:49:cc:54:25:35:c8:07:60:53:be:1f: b7:9f:ab:b5:2d:98:56:3b:62:1b:fe:37:22:5a:17:c5:50:06: 3a:ec:be:e3:ac:7c:38:1f:d9:51:41:6f:76:87:33:24:de:14: a6:46:28:1c:36:a7:a4:9d:11:07:19:45:f5:d1:e8:f8:39:3a: e7:dd:93:57:bc:6c:da:33:14:29:a1:82:11:e4:21:e6:4c:3e: 1e:a7:70:6c:73:de:39:a2:e8:46:dc:b3:5d:03:d0:d1:e6:64: 7b:0e:e6:c5:1e:52:82:3c:6a:4b:f4:24:a9:a2:56:96:5a:8b: 03:0d:b8:0f:95:5a:c1:10:fe:d3:a3:ae:9a:28:89:64:48:22: d9:40:29:fb:dd:9e:02:d5:07:2d:e9:17:4a:23:6a:3f:52:ca: 59:e1:b0:5e:90:5d:f4:82:e9:6f:74:1f:f0:54:45:c0:46:f8: 8e:8b:20:e5:8f:a9:0e:b3:46:d9:68:6e:84:7f:5c:bb:10:77: 8d:ee:1b:6d:c5:34:80:80:8f:e7:21:33:24:07:a5:16:19:45: 8c:61:78:cc:ca:a0:76:b2:fa:3c:75:9c:f7:73:c7:35:78:94: 9e:f8:0c:90:3d:5e:9f:02:aa:35:00:95:1b:f6:3d:8d:85:90: 5d:aa:b7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0 N0Q2OEZGMTIwHhcNMjQxMTIyMTUxNTM0WhcNMjQxMTI5MTUxNTM0WjAYMRYwFAYD VQQDEw02NzQwYTAxNi1mNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAQMyLWtU/hrrFNnmb9kUXZ6oWQzVOP+zie+AkVcuiAeEsRd1fbmugwS27sP ESog0wI6qZbpMf0zKpEYo7HiuM5ZRCLyCg4RYBujPUOsCGA5SHCZjB/XMLOV0R5E fMmLTcQkmA10qhmHDQxR9L2uVNJbQlzqUdTiM2fT6vh00k6ID+RKEaeYIO0L2cLV xvDNFpAyysFKg941YNL7XxW9H9VODq0nqvLUKyEAmL9Pp4M0wjj/Ajj3T3IiTJJC qteCJnhA5CKJSiwecRTEINL2WszHqChzG77vPuvtjWCHYWxSSfZxpZwnJyaWLdn+ Ml7YnxTs5/tud/taEQDg2xqsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3KKoFo bXzZgl2bfAYCSxXoJbg6MB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0axvd2PK5ScxUJTXIB2BTvh+3n6u1LZhWO2Ib/jciWhfFUAY67L7j rHw4H9lRQW92hzMk3hSmRigcNqeknREHGUX10ej4OTrn3ZNXvGzaMxQpoYIR5CHm TD4ep3Bsc945ouhG3LNdA9DR5mR7DubFHlKCPGpL9CSpolaWWosDDbgPlVrBEP7T o66aKIlkSCLZQCn73Z4C1Qct6RdKI2o/UspZ4bBekF30gulvdB/wVEXARviOiyDl j6kOs0bZaG6Ef1y7EHeN7httxTSAgI/nITMkB6UWGUWMYXjMyqB2svo8dZz3c8c1 eJSe+AyQPV6fAqo1AJUb9j2NhZBdqrei -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:16 2024 by rpki-client on console-ams.rpki-client.org