$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: jRINWu2+INwuUfszkdvOqZbZD5PW47IgXsE9rIWFQKY= Subject key identifier: 8D:A3:87:EF:7B:BD:19:08:92:56:97:04:E8:15:44:68:CD:BE:03:8A Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 0606 Signing time: Fri 22 Nov 2024 22:13:21 +0000 Manifest this update: Fri 22 Nov 2024 22:13:20 +0000 Manifest next update: Fri 29 Nov 2024 22:13:20 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: 3l1hyZkPjjUC3ubdEsF/st2QxpipJt1E8ZPfKONZE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Nov 22 22:13:20 2024 GMT Not After : Nov 29 22:13:20 2024 GMT Subject: CN=67410200-4d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:0b:4a:fe:b1:7a:0f:0a:bd:ef:11:9a:38: d4:49:3d:4c:ae:31:d8:eb:9a:cd:67:19:0f:c8:d2: b7:e9:98:28:49:5c:2c:9b:43:cf:01:63:79:c0:07: cb:e0:51:19:9f:3f:f5:76:f6:9c:96:b6:c1:53:f9: e5:7c:6a:37:ac:44:ba:cc:f3:1b:15:a0:68:44:92: 31:66:cc:d2:41:15:0e:6e:be:66:8c:8d:79:a1:cc: 2f:d8:30:1c:60:43:80:70:d6:a8:a8:ad:de:c4:00: 76:7b:a0:22:d3:50:35:83:b1:a9:08:b1:35:98:25: 87:ef:e9:6d:95:7a:36:0c:a8:da:49:54:9e:b3:11: 4f:cb:5b:58:66:0e:f2:50:1e:0d:49:fc:de:92:07: 92:af:b8:b4:c2:40:ba:21:b5:00:99:69:a5:86:c5: 84:a1:35:81:e1:31:fb:40:87:4f:21:a4:de:dd:ac: e4:49:65:b1:1d:77:6a:a1:97:b8:e9:cb:f9:66:f5: 25:59:b6:78:71:88:33:30:79:1d:7a:94:36:de:88: 31:29:b3:83:05:8b:0b:5a:cd:ae:f4:5d:18:1b:cc: c3:6d:9b:13:79:a4:24:08:3e:06:1b:f0:cb:4d:80: bd:7c:03:9f:68:c7:06:3b:3b:b4:7e:4c:2c:39:d0: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A3:87:EF:7B:BD:19:08:92:56:97:04:E8:15:44:68:CD:BE:03:8A X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b2:ab:7d:de:92:cd:c9:e4:35:91:f4:22:6b:b6:e8:ba:7a: 10:6e:ea:de:45:53:cc:d9:b2:e0:24:9a:a4:c2:b1:6b:97:de: e6:e8:f2:85:8d:4b:b6:9c:85:a6:65:a0:6f:eb:36:c5:ea:88: 7d:8f:58:58:60:e2:11:c4:23:89:cb:65:6a:a7:a5:ec:53:1b: 73:0d:fb:d6:2b:0e:5f:f9:d6:22:dd:e5:96:0e:4d:2b:68:4a: be:86:92:b5:6f:20:de:83:9d:70:15:2b:1d:00:9f:8c:cf:fd: 10:4c:ce:35:e0:eb:0e:5e:8b:6a:f7:3f:2a:48:4a:2f:d4:57: 40:a9:c0:ea:f4:85:1c:86:6b:44:43:4e:bf:31:df:0d:48:dd: 66:ce:7d:57:af:44:2a:a6:34:4a:34:4d:85:b7:9c:94:f0:ad: 2a:61:12:d7:58:44:11:34:a7:2f:11:b9:a8:d2:60:92:ab:0b: 79:a0:2d:aa:1a:69:79:c4:9a:09:3d:19:c0:cd:ee:92:3f:e8: 37:a6:63:22:0a:ca:9d:72:1a:32:f0:b4:72:29:3e:07:ce:92: 2a:98:01:f8:92:7f:7e:3c:99:85:c4:2b:27:86:a5:23:f7:d3: 33:aa:e4:ee:9d:ba:fb:64:34:44:4b:ae:21:b4:5a:17:5a:42: 86:b5:a5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjQxMTIyMjIxMzIwWhcNMjQxMTI5MjIxMzIwWjAYMRYwFAYD VQQDEw02NzQxMDIwMC00ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6ILSv6xeg8Kve8RmjjUST1MrjHY65rNZxkPyNK36ZgoSVwsm0PPAWN5wAfL 4FEZnz/1dvaclrbBU/nlfGo3rES6zPMbFaBoRJIxZszSQRUObr5mjI15ocwv2DAc YEOAcNaoqK3exAB2e6Ai01A1g7GpCLE1mCWH7+ltlXo2DKjaSVSesxFPy1tYZg7y UB4NSfzekgeSr7i0wkC6IbUAmWmlhsWEoTWB4TH7QIdPIaTe3azkSWWxHXdqoZe4 6cv5ZvUlWbZ4cYgzMHkdepQ23ogxKbODBYsLWs2u9F0YG8zDbZsTeaQkCD4GG/DL TYC9fAOfaMcGOzu0fkwsOdAeKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2jh+97 vRkIklaXBOgVRGjNvgOKMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtsqt93pLNyeQ1kfQia7bounoQbureRVPM2bLgJJqkwrFrl97m6PKF jUu2nIWmZaBv6zbF6oh9j1hYYOIRxCOJy2Vqp6XsUxtzDfvWKw5f+dYi3eWWDk0r aEq+hpK1byDeg51wFSsdAJ+Mz/0QTM414OsOXotq9z8qSEov1FdAqcDq9IUchmtE Q06/Md8NSN1mzn1Xr0QqpjRKNE2Ft5yU8K0qYRLXWEQRNKcvEbmo0mCSqwt5oC2q Gml5xJoJPRnAze6SP+g3pmMiCsqdchoy8LRyKT4HzpIqmAH4kn9+PJmFxCsnhqUj 99MzquTunbr7ZDRES64htFoXWkKGtaUu -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org