$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: wjeJG9en5fDofMfjmQnapOBDQscsTt/SkF2sm2Gcwko= Subject key identifier: 4B:08:E4:CE:AE:A2:AC:A8:A5:63:4C:9B:8F:3C:A9:8A:A2:E4:59:21 Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 095E Signing time: Fri 22 Nov 2024 20:09:58 +0000 Manifest this update: Fri 22 Nov 2024 20:09:57 +0000 Manifest next update: Fri 29 Nov 2024 20:09:57 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: 8IIhVpe8XX6VZtVPJJ98iBJqYI5NidrohHIMbquFKEE=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Nov 22 20:09:57 2024 GMT Not After : Nov 29 20:09:57 2024 GMT Subject: CN=6740e515-cb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:ba:07:46:5c:b6:80:77:12:30:bd:8b:04: 7f:86:97:46:d6:ad:27:c8:db:6b:fe:12:f9:17:66: c9:cd:91:94:72:e3:d4:b8:62:0f:dc:94:fa:cd:08: 70:66:9f:6e:42:1d:27:f7:3d:78:0f:27:d7:6e:25: 31:9d:d0:67:88:23:82:33:33:b2:a2:31:7b:50:7d: 7c:41:e5:16:db:21:f6:db:7b:14:47:8e:5e:bf:32: 48:08:d0:8b:e4:8f:73:be:ce:b5:58:93:14:b9:e3: 7d:42:4b:cf:bc:14:10:db:21:84:73:24:e5:51:ff: 3e:04:fd:87:b5:d8:e9:0e:19:d4:49:ed:3e:bf:c6: d2:e2:85:f3:0a:4b:d3:88:df:46:0b:20:a6:0a:2c: 1a:b1:40:35:bc:71:c3:bd:4f:f5:6f:00:ef:03:75: f0:6e:7a:a8:de:ef:d8:97:90:e9:b0:4b:a6:99:fd: fa:95:48:2c:bf:50:41:00:3d:35:1f:36:40:0d:e2: 88:83:e8:5b:05:0b:d0:42:77:10:4a:6d:43:f2:32: 2e:48:77:de:30:9a:3e:62:64:d3:69:9e:9a:fa:4c: 4b:26:0a:01:cb:7a:85:07:37:4a:98:b0:22:8d:4a: b0:9e:98:74:79:ee:75:7c:fa:b9:68:58:30:a9:24: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:08:E4:CE:AE:A2:AC:A8:A5:63:4C:9B:8F:3C:A9:8A:A2:E4:59:21 X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b4:03:4e:2c:53:74:e9:c0:c2:23:9e:c6:a2:c8:04:c4:9e: b1:8c:b3:75:c0:37:d1:cf:d5:5b:ff:29:ed:0b:8b:f2:7b:6e: 8e:de:80:36:8c:fa:9b:2d:30:69:c7:81:43:d9:71:12:41:bd: 48:45:84:d9:ec:52:cb:d4:69:48:e0:6a:25:1f:c9:e1:45:45: 6f:73:bf:09:a5:bb:53:0d:68:ce:e1:d5:a5:37:05:e7:86:ab: 64:9a:be:b7:df:92:be:73:76:e6:2f:34:59:79:18:f7:64:4f: 1a:8f:24:17:bc:0c:d6:35:06:4a:0e:dc:1f:04:8f:58:d9:62: 1a:7a:2c:3d:40:33:a4:e9:df:1d:da:e0:d8:64:57:55:f3:f6: a7:81:6c:d9:6c:68:31:85:37:00:bc:51:fc:ef:3d:ed:63:d7: f6:2a:f9:04:a8:4a:c8:c6:e8:ca:66:9f:36:66:bb:9b:82:cb: 79:ab:ef:54:85:a1:3a:58:02:8b:60:2b:d1:c9:ee:7d:f6:9d: 32:38:93:61:27:80:72:20:05:8f:60:55:9c:39:60:36:5e:ce: 9e:3f:99:29:79:f3:1d:a2:94:0d:74:a8:15:eb:10:f3:33:04: 76:fe:c2:61:6d:60:6f:cd:15:92:d5:ae:d1:1a:b1:a8:d0:73: 06:78:3a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjQxMTIyMjAwOTU3WhcNMjQxMTI5MjAwOTU3WjAYMRYwFAYD VQQDEw02NzQwZTUxNS1jYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqa6B0ZctoB3EjC9iwR/hpdG1q0nyNtr/hL5F2bJzZGUcuPUuGIP3JT6zQhw Zp9uQh0n9z14DyfXbiUxndBniCOCMzOyojF7UH18QeUW2yH223sUR45evzJICNCL 5I9zvs61WJMUueN9QkvPvBQQ2yGEcyTlUf8+BP2HtdjpDhnUSe0+v8bS4oXzCkvT iN9GCyCmCiwasUA1vHHDvU/1bwDvA3Xwbnqo3u/Yl5DpsEummf36lUgsv1BBAD01 HzZADeKIg+hbBQvQQncQSm1D8jIuSHfeMJo+YmTTaZ6a+kxLJgoBy3qFBzdKmLAi jUqwnph0ee51fPq5aFgwqSR8IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsI5M6u oqyopWNMm488qYqi5FkhMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9tANOLFN06cDCI57GosgExJ6xjLN1wDfRz9Vb/yntC4vye26O3oA2 jPqbLTBpx4FD2XESQb1IRYTZ7FLL1GlI4GolH8nhRUVvc78JpbtTDWjO4dWlNwXn hqtkmr6335K+c3bmLzRZeRj3ZE8ajyQXvAzWNQZKDtwfBI9Y2WIaeiw9QDOk6d8d 2uDYZFdV8/angWzZbGgxhTcAvFH87z3tY9f2KvkEqErIxujKZp82Zrubgst5q+9U haE6WAKLYCvRye599p0yOJNhJ4ByIAWPYFWcOWA2Xs6eP5kpefMdopQNdKgV6xDz MwR2/sJhbWBvzRWS1a7RGrGo0HMGeDoX -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org