$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: U6/eIRvsksJgtN0vTdEVJfkjEQTz8zihowvdnZtQwbg= Subject key identifier: 31:FB:DA:AA:39:AE:41:F5:D4:7B:83:DC:6C:DC:C1:9D:6C:E0:E5:EB Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0D60 Signing time: Fri 22 Nov 2024 17:55:26 +0000 Manifest this update: Fri 22 Nov 2024 17:55:26 +0000 Manifest next update: Fri 29 Nov 2024 17:55:26 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: rTRg9KOHTixLbEfyfyzyJRmpcvY9q7eff9fPAC7TcI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Nov 22 17:55:26 2024 GMT Not After : Nov 29 17:55:26 2024 GMT Subject: CN=6740c58e-b2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:ad:e2:c6:36:53:07:c0:61:f2:dc:6c:22: 3e:56:23:ca:ca:7d:05:73:a1:56:71:6c:75:51:31: 1b:23:d8:bd:ba:7e:e5:43:21:56:d5:52:73:5c:0b: e0:5e:21:cc:b7:f8:67:72:b1:d3:a2:c2:98:33:7d: ac:26:b0:2f:6b:87:38:d4:59:05:32:40:90:2d:0a: 5e:7a:6a:04:46:1d:f9:63:01:d1:c0:dc:53:28:3e: 49:4a:f9:15:fd:fd:38:aa:05:3e:ff:a5:77:f6:17: d0:e5:7b:7d:95:12:74:56:dd:75:70:6d:95:21:c6: fc:38:d5:4f:70:00:f7:e5:f8:19:e9:2b:9d:6d:cd: a9:54:99:5c:9b:f4:a7:81:a4:94:c6:e2:c1:e9:6d: 93:16:a8:78:46:0a:13:30:29:f4:35:ef:75:87:e8: a5:60:85:93:ba:bf:4a:5a:a8:45:7a:cf:46:39:da: ff:ea:be:40:51:b0:3f:a2:77:b2:74:6f:fd:78:ca: 79:e0:e2:06:c4:b0:a6:bd:69:89:8e:b0:86:d4:93: 31:14:17:71:66:9e:ee:9a:fd:e7:88:90:48:43:63: b2:ce:7f:2f:07:af:ea:d4:f7:7f:ac:1e:af:7e:62: 9e:82:ae:8c:9b:c6:0e:d2:4b:da:3c:27:f0:0c:68: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:DA:AA:39:AE:41:F5:D4:7B:83:DC:6C:DC:C1:9D:6C:E0:E5:EB X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:07:43:9f:2a:23:d8:42:c3:30:b6:24:1b:b9:e4:11:18:4d: 36:32:2f:74:5b:8c:ad:2d:ea:41:e3:44:51:94:78:3c:eb:e5: b3:01:6c:a4:68:cd:3d:c1:c7:6f:15:8e:f9:0e:de:31:0a:aa: 4b:e2:f0:31:b0:58:18:41:d0:5e:77:0e:67:93:4b:73:60:aa: 9c:fc:ff:3d:61:af:69:cc:71:1e:b2:a1:f6:4b:a8:10:b1:12: 6e:a7:43:c1:04:52:27:e7:21:6f:05:c7:14:b4:2e:61:72:ae: 89:f7:31:16:e0:93:ac:eb:ca:a3:26:ff:9b:0d:c2:29:db:98: 5d:cf:7e:51:d0:49:65:bd:00:d4:91:c2:8d:ba:71:10:95:d4: 61:fc:9c:8d:db:2b:6f:bd:3d:cb:6e:a2:22:1e:b8:bc:f1:38: 9c:b7:11:fd:1d:b9:6a:ec:69:55:18:f9:0f:d0:bc:bd:d3:80: d3:8f:8e:b7:ea:d0:7b:e7:12:a9:52:48:24:97:34:52:be:60: b6:d8:f4:01:fe:c4:93:df:ce:00:97:5c:68:d6:97:22:43:a3: 52:2b:d0:8f:39:4d:90:f9:7a:98:e5:f6:cd:77:04:21:eb:47: 65:a2:d1:01:fc:e5:3a:bb:15:65:6d:fa:ad:0b:43:ce:d3:56: 44:54:67:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjQxMTIyMTc1NTI2WhcNMjQxMTI5MTc1NTI2WjAYMRYwFAYD VQQDEw02NzQwYzU4ZS1iMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGat4sY2UwfAYfLcbCI+ViPKyn0Fc6FWcWx1UTEbI9i9un7lQyFW1VJzXAvg XiHMt/hncrHTosKYM32sJrAva4c41FkFMkCQLQpeemoERh35YwHRwNxTKD5JSvkV /f04qgU+/6V39hfQ5Xt9lRJ0Vt11cG2VIcb8ONVPcAD35fgZ6Sudbc2pVJlcm/Sn gaSUxuLB6W2TFqh4RgoTMCn0Ne91h+ilYIWTur9KWqhFes9GOdr/6r5AUbA/oney dG/9eMp54OIGxLCmvWmJjrCG1JMxFBdxZp7umv3niJBIQ2Oyzn8vB6/q1Pd/rB6v fmKegq6Mm8YO0kvaPCfwDGheowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH72qo5 rkH11HuD3GzcwZ1s4OXrMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbB0OfKiPYQsMwtiQbueQRGE02Mi90W4ytLepB40RRlHg86+WzAWyk aM09wcdvFY75Dt4xCqpL4vAxsFgYQdBedw5nk0tzYKqc/P89Ya9pzHEesqH2S6gQ sRJup0PBBFIn5yFvBccUtC5hcq6J9zEW4JOs68qjJv+bDcIp25hdz35R0EllvQDU kcKNunEQldRh/JyN2ytvvT3LbqIiHri88TictxH9Hblq7GlVGPkP0Ly904DTj463 6tB75xKpUkgklzRSvmC22PQB/sST384Al1xo1pciQ6NSK9CPOU2Q+XqY5fbNdwQh 60dlotEB/OU6uxVlbfqtC0PO01ZEVGdz -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org