$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: mThigw5eUPzLyLQdTPDsb320yF4H7e5b4nujFQjwgFg= Subject key identifier: 0F:39:6A:F4:13:35:6B:CD:F7:AD:E7:60:2C:6D:4B:D1:2F:70:31:84 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0212 Signing time: Sat 23 Nov 2024 01:32:16 +0000 Manifest this update: Sat 23 Nov 2024 01:32:15 +0000 Manifest next update: Sat 30 Nov 2024 01:32:15 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: 8MhFGroLMZL0N8Nd6U63pJW2Ar/zstDYfTv54n65778=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Nov 23 01:32:15 2024 GMT Not After : Nov 30 01:32:15 2024 GMT Subject: CN=674130a0-e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:85:d1:e8:87:a8:cb:41:3d:2e:2f:ab:ad: 34:51:14:eb:94:c5:fb:bb:93:3a:87:87:77:1a:06: c7:78:73:42:da:66:b3:cb:82:d2:25:5f:7a:28:e2: c9:01:b8:cc:f5:e9:0e:59:b5:a0:02:86:ac:51:58: 65:77:89:74:88:68:df:e7:fb:f4:f0:a5:d3:c4:eb: e9:0c:db:f7:ec:ba:e3:ea:04:07:26:c5:73:6a:a2: e3:a6:ca:55:4c:1e:9b:e9:57:99:4d:59:bc:28:17: 02:52:28:76:3d:c7:70:3c:e7:71:72:ec:15:a5:9b: ce:61:28:d6:72:8d:e5:cf:cb:63:06:2e:11:26:ef: f9:55:ae:e6:f5:59:f5:4c:f7:fb:71:6c:8e:6e:48: 2f:39:40:3c:6d:8c:be:b9:06:8d:a8:d5:7f:2b:57: eb:4e:af:e0:71:8a:d5:97:20:a8:06:4a:93:81:33: c6:9b:02:fd:7f:17:74:3b:05:ac:82:b2:46:3c:51: e8:4e:d1:2d:c8:8c:56:c3:54:d0:7a:3c:fc:c1:8a: cd:44:fc:6f:e4:1b:c0:9c:45:e6:eb:ed:7e:a8:8a: 8d:3c:1c:74:3c:49:5d:1a:b3:4f:d8:f0:c3:85:95: 22:ad:d9:e5:db:86:df:58:29:7a:a3:5d:47:f8:39: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:39:6A:F4:13:35:6B:CD:F7:AD:E7:60:2C:6D:4B:D1:2F:70:31:84 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e6:e5:6e:7f:58:ea:93:27:20:89:dc:dc:1e:18:46:0b:bb: 2e:14:3c:0b:e5:ae:d9:8e:e7:e8:b1:e8:91:b8:a9:7b:38:ed: 50:6b:03:ca:f2:ad:9f:0a:47:80:1e:cb:76:a7:27:65:ff:36: 0f:91:fa:92:14:36:1c:23:c2:36:24:fb:32:61:e6:64:59:61: f0:b5:a9:76:8d:61:52:bd:39:5b:84:0e:eb:19:9c:6b:95:72: 9b:05:c7:b1:27:2f:6b:a2:e7:58:fe:0c:90:22:0a:87:1e:2f: 08:ab:23:75:aa:5a:6e:ee:2d:36:e8:31:fe:30:89:4c:1f:4d: 30:0b:e7:b2:0a:0b:25:a2:d6:2e:60:62:47:d2:07:c2:ce:8c: 62:a9:13:b8:f9:fd:c4:f6:8b:73:ec:95:b9:bf:b9:27:16:09: 6f:50:6c:06:60:40:57:b5:b1:0e:e7:77:42:d1:48:ad:fa:c9: f2:57:38:92:f2:4b:7f:f4:c5:47:87:b9:fb:db:65:1a:3b:8b: 21:7f:d0:56:0a:23:ac:3d:f0:c1:bf:25:aa:70:ed:5d:2a:db: ea:37:d0:7b:1e:bd:73:10:8a:9e:e2:67:65:11:5c:a4:c2:1d: 81:03:21:15:44:23:8d:13:87:b3:69:d3:f0:0c:d7:99:9d:44: bd:94:3e:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjQxMTIzMDEzMjE1WhcNMjQxMTMwMDEzMjE1WjAYMRYwFAYD VQQDEw02NzQxMzBhMC1lN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiOF0eiHqMtBPS4vq600URTrlMX7u5M6h4d3GgbHeHNC2mazy4LSJV96KOLJ AbjM9ekOWbWgAoasUVhld4l0iGjf5/v08KXTxOvpDNv37Lrj6gQHJsVzaqLjpspV TB6b6VeZTVm8KBcCUih2PcdwPOdxcuwVpZvOYSjWco3lz8tjBi4RJu/5Va7m9Vn1 TPf7cWyObkgvOUA8bYy+uQaNqNV/K1frTq/gcYrVlyCoBkqTgTPGmwL9fxd0OwWs grJGPFHoTtEtyIxWw1TQejz8wYrNRPxv5BvAnEXm6+1+qIqNPBx0PEldGrNP2PDD hZUirdnl24bfWCl6o11H+Dm9oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA85avQT NWvN963nYCxtS9EvcDGEMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA35uVuf1jqkycgidzcHhhGC7suFDwL5a7ZjufoseiRuKl7OO1QawPK 8q2fCkeAHst2pydl/zYPkfqSFDYcI8I2JPsyYeZkWWHwtal2jWFSvTlbhA7rGZxr lXKbBcexJy9roudY/gyQIgqHHi8IqyN1qlpu7i026DH+MIlMH00wC+eyCgslotYu YGJH0gfCzoxiqRO4+f3E9otz7JW5v7knFglvUGwGYEBXtbEO53dC0Uit+snyVziS 8kt/9MVHh7n722UaO4shf9BWCiOsPfDBvyWqcO1dKtvqN9B7Hr1zEIqe4mdlEVyk wh2BAyEVRCONE4ezadPwDNeZnUS9lD4+ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org