$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: qYSw3t2NIDOaaJCtVUKPuqoTgQjqyOsj/j2ZJBSqZjE= Subject key identifier: 06:F1:CF:3D:9C:55:DA:81:B4:4F:76:8D:D0:57:CF:FF:B0:7D:D2:1F Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 0692 Signing time: Fri 22 Nov 2024 21:49:01 +0000 Manifest this update: Fri 22 Nov 2024 21:49:00 +0000 Manifest next update: Fri 29 Nov 2024 21:49:00 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: At4h1CN2Wq8CzsWGQJ7bjzn5UjPpP5OpjhYZAfJdMn8=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: kGN+nWN3WZljHWfAniUjjwoUZivzdARkQvl29DcwJgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Nov 22 21:49:00 2024 GMT Not After : Nov 29 21:49:00 2024 GMT Subject: CN=6740fc4c-6d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:8b:36:51:56:32:98:b2:21:80:d4:64:42: e8:c2:5c:16:d1:9e:f5:8e:7b:4d:7b:13:86:d3:df: c4:cc:19:3d:c1:b6:c4:ca:e8:a6:ce:8f:8d:f7:f9: 65:69:f9:db:4c:42:16:5b:34:e6:4c:aa:c3:4c:32: 5c:25:fc:ba:58:aa:e7:a4:d2:dd:eb:98:a4:c3:d1: 2f:36:7f:1d:d8:05:ba:f6:fd:e9:fb:17:bb:85:7e: 59:22:8e:c4:c3:c6:92:62:86:d2:8c:7b:13:09:e2: 6d:3c:b4:01:c4:7b:7f:53:c8:4f:54:a6:43:d0:0d: 96:fa:1c:98:0d:bc:18:ff:09:4d:0a:5c:10:d7:ff: 9b:72:49:4c:b3:5a:33:46:d8:7e:f7:55:42:7a:05: b7:aa:19:67:b2:f5:2d:94:00:02:e8:d9:00:77:e8: 62:40:d0:97:7b:ce:d2:1e:eb:f6:31:ef:99:b7:19: f6:b7:17:d6:d9:09:62:33:4d:49:e1:c8:ed:44:da: 92:52:50:01:16:4a:7e:41:96:99:a0:84:ee:81:87: b4:08:85:d8:85:a4:cb:2d:98:62:72:69:99:91:7b: bc:93:aa:24:7d:79:93:89:b1:8d:a2:e5:3f:23:73: 46:83:60:bb:19:0f:20:89:b5:a0:fa:bd:07:5b:d3: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:CF:3D:9C:55:DA:81:B4:4F:76:8D:D0:57:CF:FF:B0:7D:D2:1F X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:28:0e:9b:ab:92:92:45:81:8e:f7:f0:4a:7f:ee:49:59: a0:e8:ab:72:26:4e:0d:b6:83:e5:13:78:5b:7f:5b:47:1c:36: 1d:73:3a:3c:da:b9:1f:ec:07:10:27:cc:80:5d:1e:c6:a8:1b: 88:03:ba:f0:f7:9e:fc:4e:c4:21:6b:79:68:f6:72:68:8e:d1: 33:7a:c3:75:d9:9c:6e:56:9a:ba:bf:69:93:bb:6b:66:9a:39: 99:a6:d3:c4:d5:43:2f:ea:fd:a9:b3:e4:5f:8c:a7:3e:80:53: a2:51:54:61:12:45:ea:f4:73:34:6e:31:c4:c9:2a:34:b5:85: 45:14:ea:a3:02:33:13:74:1d:3b:33:3c:c0:df:35:dd:af:55: 67:ad:d9:e9:5a:1b:a7:aa:51:cc:e8:0f:ab:dc:e9:e3:ad:b7: 0f:16:fd:85:b3:89:d1:32:65:4e:2c:8d:28:ac:62:5e:80:fe: df:57:85:5a:4f:06:88:48:73:be:a7:85:fc:13:5b:0a:ea:80: 20:b6:1d:e0:62:92:28:c7:82:d0:72:b4:d4:e9:28:9e:72:9f: b4:9b:56:22:99:81:19:ee:04:3d:9b:d0:a4:78:17:6a:3d:fe: a4:2b:bf:df:53:35:74:c8:06:12:bd:36:47:f9:05:b3:76:ed: 63:5e:83:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjQxMTIyMjE0OTAwWhcNMjQxMTI5MjE0OTAwWjAYMRYwFAYD VQQDEw02NzQwZmM0Yy02ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb6LNlFWMpiyIYDUZELowlwW0Z71jntNexOG09/EzBk9wbbEyuimzo+N9/ll afnbTEIWWzTmTKrDTDJcJfy6WKrnpNLd65ikw9EvNn8d2AW69v3p+xe7hX5ZIo7E w8aSYobSjHsTCeJtPLQBxHt/U8hPVKZD0A2W+hyYDbwY/wlNClwQ1/+bcklMs1oz Rth+91VCegW3qhlnsvUtlAAC6NkAd+hiQNCXe87SHuv2Me+Ztxn2txfW2QliM01J 4cjtRNqSUlABFkp+QZaZoITugYe0CIXYhaTLLZhicmmZkXu8k6okfXmTibGNouU/ I3NGg2C7GQ8gibWg+r0HW9PDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbxzz2c VdqBtE92jdBXz/+wfdIfMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe0igOm6uSkkWBjvfwSn/uSVmg6KtyJk4NtoPlE3hbf1tHHDYdczo8 2rkf7AcQJ8yAXR7GqBuIA7rw9578TsQha3lo9nJojtEzesN12ZxuVpq6v2mTu2tm mjmZptPE1UMv6v2ps+RfjKc+gFOiUVRhEkXq9HM0bjHEySo0tYVFFOqjAjMTdB07 MzzA3zXdr1VnrdnpWhunqlHM6A+r3OnjrbcPFv2Fs4nRMmVOLI0orGJegP7fV4Va TwaISHO+p4X8E1sK6oAgth3gYpIox4LQcrTU6Siecp+0m1YimYEZ7gQ9m9CkeBdq Pf6kK7/fUzV0yAYSvTZH+QWzdu1jXoNH -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org