$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: gyVJWJraPkunYFDRXUHHxfbLZzPI1179tj43ISC2YIg= Subject key identifier: 1A:B7:D3:35:52:86:7C:43:AB:99:12:AE:6E:CF:6D:F7:18:16:02:52 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 059E Signing time: Fri 03 May 2024 00:26:02 +0000 Manifest this update: Fri 03 May 2024 00:26:02 +0000 Manifest next update: Fri 10 May 2024 00:26:02 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: peEfb6Q58ZL075E1u910/ps8AXorOkjjhVlVPQiWKbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: May 3 00:26:02 2024 GMT Not After : May 10 00:26:02 2024 GMT Subject: CN=66342f1a-5772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6e:66:e1:25:b7:b4:dc:b6:26:d1:fc:0b:51: 82:a3:7c:8a:82:8f:17:d7:cb:ce:f8:27:e8:53:9c: 9c:9b:91:78:8f:44:e6:08:18:b3:1a:1a:61:5e:14: 05:29:87:9a:21:ce:5b:1d:a7:6c:a7:72:14:64:12: e4:04:d8:b4:0f:57:8f:36:b8:c9:63:66:db:12:a8: 14:95:bf:9b:e4:2b:1d:16:b4:47:a4:58:c1:d1:6a: 19:45:06:41:c7:e9:63:f2:a6:75:fb:eb:dd:ea:e4: 83:23:95:c1:c7:95:1c:40:f0:40:fc:d3:e2:0a:b5: 0b:75:2e:58:0c:08:8d:d3:42:6d:f9:fc:f2:73:46: de:5c:e9:82:35:f9:9b:8c:ae:7d:7c:ee:d7:b8:18: 98:c3:cb:f1:78:e0:c5:b8:42:b4:93:f7:0c:50:2b: e0:cf:87:52:a1:06:f3:21:66:e8:5e:25:ff:ec:1d: 0c:ed:10:8d:e8:b3:15:83:69:36:1a:77:26:32:84: 0b:04:fd:74:bf:3b:dd:89:07:04:d4:bc:84:3b:28: c0:6b:92:18:25:ad:dc:c9:73:f4:ff:0f:ca:b2:78: 15:cf:da:a4:df:c0:6c:27:bc:7e:52:46:21:70:19: 88:e6:25:63:96:d2:6b:af:0d:93:36:87:1f:1b:8d: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B7:D3:35:52:86:7C:43:AB:99:12:AE:6E:CF:6D:F7:18:16:02:52 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:1a:e3:e5:da:89:82:f9:07:bd:bb:b8:95:0f:28:1f:ff: 89:8d:b5:7b:ad:80:3c:f6:60:b9:04:59:fa:b7:9d:56:43:ca: 63:44:66:f7:87:d9:b4:c5:2f:29:52:67:67:f7:f2:1a:33:e9: b9:e5:0e:6b:8f:a7:97:30:07:b2:be:ef:ec:36:91:0f:33:aa: a2:2a:eb:43:19:75:e2:17:07:91:e2:83:59:a1:33:77:39:62: f0:e6:44:ad:f3:c7:e3:a0:58:ad:2e:f1:47:83:86:87:a8:f1: 99:38:3d:49:e0:21:e3:aa:4f:b2:f1:2c:23:63:f5:41:d2:4e: a4:f2:fc:1e:4d:94:37:ca:7e:d9:2c:2e:81:d4:16:5a:84:b7: ef:e1:87:b9:fc:90:c1:30:79:a2:97:68:f8:64:bd:e7:66:13: 90:93:36:6a:82:3a:7a:b1:51:dd:b6:4b:da:a0:c2:aa:6f:95: 0e:da:9c:ea:7e:de:29:b2:23:e6:86:35:55:e8:b9:c4:68:e9: 0b:0a:6f:b2:3d:ad:6e:ec:3e:59:a3:7d:ff:e3:53:9c:c2:25: 4f:16:b9:0a:37:86:03:1b:89:71:ad:17:fd:5c:eb:71:5f:6f: 98:a8:be:93:7c:be:2a:45:a0:6e:fb:3a:55:57:a6:61:3b:11: e4:f5:da:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjQwNTAzMDAyNjAyWhcNMjQwNTEwMDAyNjAyWjAYMRYwFAYD VQQDEw02NjM0MmYxYS01NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+m5m4SW3tNy2JtH8C1GCo3yKgo8X18vO+CfoU5ycm5F4j0TmCBizGhphXhQF KYeaIc5bHadsp3IUZBLkBNi0D1ePNrjJY2bbEqgUlb+b5CsdFrRHpFjB0WoZRQZB x+lj8qZ1++vd6uSDI5XBx5UcQPBA/NPiCrULdS5YDAiN00Jt+fzyc0beXOmCNfmb jK59fO7XuBiYw8vxeODFuEK0k/cMUCvgz4dSoQbzIWboXiX/7B0M7RCN6LMVg2k2 GncmMoQLBP10vzvdiQcE1LyEOyjAa5IYJa3cyXP0/w/KsngVz9qk38BsJ7x+UkYh cBmI5iVjltJrrw2TNocfG43kIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq30zVS hnxDq5kSrm7PbfcYFgJSMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDIBrj5dqJgvkHvbu4lQ8oH/+JjbV7rYA89mC5BFn6t51WQ8pjRGb3 h9m0xS8pUmdn9/IaM+m55Q5rj6eXMAeyvu/sNpEPM6qiKutDGXXiFweR4oNZoTN3 OWLw5kSt88fjoFitLvFHg4aHqPGZOD1J4CHjqk+y8SwjY/VB0k6k8vweTZQ3yn7Z LC6B1BZahLfv4Ye5/JDBMHmil2j4ZL3nZhOQkzZqgjp6sVHdtkvaoMKqb5UO2pzq ft4psiPmhjVV6LnEaOkLCm+yPa1u7D5Zo33/41OcwiVPFrkKN4YDG4lxrRf9XOtx X2+YqL6TfL4qRaBu+zpVV6ZhOxHk9drK -----END CERTIFICATE-----Generated at Fri May 3 03:10:58 2024 by rpki-client on console-ams.rpki-client.org