$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: XyhgKwK2hzVaQvoenEgRrnlsaguKe9jMKUp0ou87mEM= Subject key identifier: 40:DC:95:69:58:70:4A:51:D9:04:53:5F:07:E3:D8:94:43:86:F1:03 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0BE6 Signing time: Fri 22 Nov 2024 18:24:27 +0000 Manifest this update: Fri 22 Nov 2024 18:24:26 +0000 Manifest next update: Fri 29 Nov 2024 18:24:26 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: Q3/U1yHcn+pAir3Etexy1Ddur8uGhDme4FT8Ih/1RpM=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: RucjPZzTbGDJdlGQIFIquuY8AQ91dPmBUeP0p5s4V7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Nov 22 18:24:26 2024 GMT Not After : Nov 29 18:24:26 2024 GMT Subject: CN=6740cc5a-032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:0a:e0:df:b8:24:fe:2b:79:a8:96:2d:40: 95:fb:75:c7:09:7f:d7:54:80:82:9c:76:df:cb:85: e2:4f:94:8f:65:2e:f4:a4:3b:58:43:e6:59:cd:4a: e5:8a:70:2d:f8:ef:cf:b6:90:46:4f:7f:a9:87:9e: ab:72:09:58:40:3c:7d:95:60:02:71:59:c8:96:35: f3:a8:a0:5e:b9:90:d3:28:d3:7e:bb:a1:ba:89:e4: 53:92:7f:88:ce:c2:b3:cb:56:69:ce:35:93:80:63: dd:5e:33:4a:ea:dd:01:3e:c0:d9:cc:57:ec:21:3c: 50:fb:70:5e:3b:31:99:97:0d:b7:a5:0e:48:27:33: ea:36:3d:0b:3f:d5:d2:bc:b5:44:e0:d1:9d:99:44: 4f:64:46:3c:ed:93:d0:12:86:83:e2:d3:d4:66:ed: 67:b3:e9:4c:4f:64:ae:7c:20:bb:db:a6:45:0a:7d: bc:b0:44:c8:05:27:42:37:bd:b3:79:8f:f0:4f:7b: d7:a0:7d:dc:ee:3c:7e:0a:dc:42:cb:9a:2b:e0:4c: b4:00:6e:8a:be:b3:7f:30:39:a4:b3:5b:9a:d8:f8: e2:18:3c:bc:d2:7d:e8:42:48:5f:fd:74:39:eb:73: 28:8f:00:ea:2d:0e:80:19:fb:37:e7:b9:33:ed:ab: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:95:69:58:70:4A:51:D9:04:53:5F:07:E3:D8:94:43:86:F1:03 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:3f:c8:6f:56:91:f1:4a:07:7f:ad:42:ad:9f:bc:6a:63: 77:5b:4c:e8:9e:3a:f6:38:77:a2:0c:09:b4:20:f6:3b:3b:0e: ed:33:45:33:f5:b8:32:63:cb:d8:7a:f8:da:f0:be:67:a1:ee: a3:d4:76:67:fa:11:99:ac:cb:0c:d2:c3:90:6a:2f:91:79:52: 58:cd:f0:3c:e4:7f:c7:86:08:21:89:f0:fe:43:1d:89:3d:b7: 74:b4:ab:fc:8b:7a:dd:db:44:20:75:22:b0:8d:08:4a:e9:da: a8:71:24:76:bb:f8:ee:bf:43:23:15:19:ae:d8:b0:bf:0d:c3: 56:81:55:7a:9a:1e:86:de:22:ea:bf:bc:8f:37:c4:ed:58:5e: c5:5f:a7:3e:c5:51:a9:92:2b:fa:fa:02:4e:46:fe:56:f3:5f: 29:71:64:d5:3f:13:f7:28:8a:1e:86:58:5c:34:5a:8d:d9:d8: 0a:af:b0:77:53:b3:e6:2b:1e:77:65:c0:9e:0f:d7:d8:fa:3e: eb:2a:c3:d4:86:fd:7e:0f:c0:c0:97:cd:30:28:c0:dd:8d:a2: cf:82:04:87:d3:3c:ca:ad:86:7a:33:8e:da:f2:59:98:bf:da: f8:d1:57:1f:7a:83:62:15:57:03:5d:a1:0a:2f:0d:21:0f:3d: fb:a6:42:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjQxMTIyMTgyNDI2WhcNMjQxMTI5MTgyNDI2WjAYMRYwFAYD VQQDEw02NzQwY2M1YS0wMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+4K4N+4JP4reaiWLUCV+3XHCX/XVICCnHbfy4XiT5SPZS70pDtYQ+ZZzUrl inAt+O/PtpBGT3+ph56rcglYQDx9lWACcVnIljXzqKBeuZDTKNN+u6G6ieRTkn+I zsKzy1ZpzjWTgGPdXjNK6t0BPsDZzFfsITxQ+3BeOzGZlw23pQ5IJzPqNj0LP9XS vLVE4NGdmURPZEY87ZPQEoaD4tPUZu1ns+lMT2SufCC726ZFCn28sETIBSdCN72z eY/wT3vXoH3c7jx+CtxCy5or4Ey0AG6KvrN/MDmks1ua2PjiGDy80n3oQkhf/XQ5 63MojwDqLQ6AGfs357kz7avo0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDclWlY cEpR2QRTXwfj2JRDhvEDMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DD/Ib1aR8UoHf61CrZ+8amN3W0zonjr2OHeiDAm0IPY7Ow7tM0Uz 9bgyY8vYevja8L5noe6j1HZn+hGZrMsM0sOQai+ReVJYzfA85H/HhgghifD+Qx2J Pbd0tKv8i3rd20QgdSKwjQhK6dqocSR2u/juv0MjFRmu2LC/DcNWgVV6mh6G3iLq v7yPN8TtWF7FX6c+xVGpkiv6+gJORv5W818pcWTVPxP3KIoehlhcNFqN2dgKr7B3 U7PmKx53ZcCeD9fY+j7rKsPUhv1+D8DAl80wKMDdjaLPggSH0zzKrYZ6M47a8lmY v9r40VcfeoNiFVcDXaEKLw0hDz37pkK2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org