$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: f9VOxUbiG4WQ9AO0aLtlEy3BlxXTVJ3wLwzte3OXiJ8= Subject key identifier: 02:DD:52:F2:F4:57:1C:01:5E:E6:DE:67:90:9D:1E:3E:BA:8F:9C:F3 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 15 Signing time: Sat 23 Nov 2024 05:56:59 +0000 Manifest this update: Sat 23 Nov 2024 05:56:58 +0000 Manifest next update: Sat 30 Nov 2024 05:56:58 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 5FUXi7WgE9YGpaSL0WRNizD1yRle7G/hij15MGEltxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Nov 23 05:56:58 2024 GMT Not After : Nov 30 05:56:58 2024 GMT Subject: CN=67416eab-3a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:a3:0d:4d:86:c7:9f:57:f9:74:35:0e:31: b8:6b:3d:8b:2a:90:e7:9d:ab:e4:20:22:28:1e:29: 98:bb:25:9a:ee:a7:90:32:18:8f:4f:27:54:15:5c: 32:21:cf:50:5a:b5:dd:dc:c5:c0:0f:7d:69:e2:82: 17:c1:81:66:b7:8b:b3:46:59:f1:e7:57:ab:b1:50: 52:c5:d1:2c:b9:85:8b:9a:cc:5d:b4:ed:61:e9:38: 25:e0:26:62:e3:1a:5a:25:49:5d:d6:84:c4:10:f0: b7:34:47:9e:b4:99:96:d4:0e:91:c5:7c:c8:2a:ea: b2:0f:6b:3e:94:3b:e3:6b:24:3c:26:15:77:92:cc: 78:4e:79:bc:6d:a4:8b:26:f9:6b:3e:35:01:6a:50: 7d:91:8d:8e:67:54:bb:9c:e0:1e:ca:28:3d:11:5e: 46:1d:99:ee:22:05:26:37:ad:21:87:37:3c:51:44: c6:23:f8:82:70:a2:b0:e6:d0:50:e8:9e:ad:63:06: 10:d2:24:47:8b:56:17:07:33:4c:2e:fd:76:55:79: 77:c5:be:d8:e9:f3:1e:fb:bd:18:d4:49:0e:ba:5f: 79:4f:d7:5c:07:a3:14:1f:5a:e4:a0:d2:9a:96:06: 89:12:ae:2e:04:ec:40:a6:98:3a:c6:df:76:00:cf: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:52:F2:F4:57:1C:01:5E:E6:DE:67:90:9D:1E:3E:BA:8F:9C:F3 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:30:a2:a6:90:80:d8:23:55:66:ab:33:21:18:73:8f:cd:08: 0b:f5:9a:7a:ce:53:6c:db:45:34:bf:2f:65:dd:c9:2e:eb:94: 8f:40:87:02:db:4e:7a:04:7c:92:ec:f9:c2:05:a3:b4:ad:13: 65:f7:40:19:66:59:76:f2:72:44:35:8c:70:80:da:62:48:e7: 9c:45:aa:69:2a:e5:57:04:ce:83:18:e3:f8:50:4f:4c:96:34: 36:fc:e5:7a:1b:ed:7e:38:40:2d:78:26:f0:1d:e4:5e:bc:58: 5a:9f:5c:fa:78:cd:d7:ab:14:70:f3:30:24:a9:99:b9:aa:33: e7:23:5f:16:3f:0f:24:5c:b4:c8:74:ba:ca:a8:8b:e9:1b:76: 4b:6c:4b:52:c5:cb:86:54:79:05:22:3f:da:11:e4:9c:16:8d: 39:31:f1:d2:c7:7c:de:10:ab:93:9c:4f:12:8c:a5:7f:ff:5e: f7:09:0d:9e:e4:60:a9:4d:12:a4:5e:4e:9b:b6:71:5f:f8:10: b8:0a:4c:40:62:59:dd:ba:59:e5:28:ff:15:1b:ce:10:8e:56: 43:dc:85:95:64:d1:2f:62:3c:6b:60:31:9e:4a:24:b8:76:96: 84:ca:3b:0b:5b:69:14:fc:a1:5d:fe:25:f3:59:76:10:54:c3: b6:f5:10:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNDExMjMwNTU2NThaFw0yNDExMzAwNTU2NThaMBgxFjAUBgNV BAMTDTY3NDE2ZWFiLTNhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFi6MNTYbHn1f5dDUOMbhrPYsqkOedq+QgIigeKZi7JZrup5AyGI9PJ1QVXDIh z1Batd3cxcAPfWnighfBgWa3i7NGWfHnV6uxUFLF0Sy5hYuazF207WHpOCXgJmLj GlolSV3WhMQQ8Lc0R560mZbUDpHFfMgq6rIPaz6UO+NrJDwmFXeSzHhOebxtpIsm +Ws+NQFqUH2RjY5nVLuc4B7KKD0RXkYdme4iBSY3rSGHNzxRRMYj+IJworDm0FDo nq1jBhDSJEeLVhcHM0wu/XZVeXfFvtjp8x77vRjUSQ66X3lP11wHoxQfWuSg0pqW BokSri4E7ECmmDrG33YAz0/XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAt1S8vRX HAFe5t5nkJ0ePrqPnPMwHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOMwoqaQgNgjVWarMyEYc4/NCAv1mnrOU2zbRTS/L2XdyS7rlI9AhwLb TnoEfJLs+cIFo7StE2X3QBlmWXbyckQ1jHCA2mJI55xFqmkq5VcEzoMY4/hQT0yW NDb85Xob7X44QC14JvAd5F68WFqfXPp4zderFHDzMCSpmbmqM+cjXxY/DyRctMh0 usqoi+kbdktsS1LFy4ZUeQUiP9oR5JwWjTkx8dLHfN4Qq5OcTxKMpX//XvcJDZ7k YKlNEqReTpu2cV/4ELgKTEBiWd26WeUo/xUbzhCOVkPchZVk0S9iPGtgMZ5KJLh2 loTKOwtbaRT8oV3+JfNZdhBUw7b1EDI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org