$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: NpRXP4FjgbYqV8Lprtc8LdUNtyi0kg/5znQwDhqTmxo= Subject key identifier: F1:42:00:7C:03:BB:70:9F:73:1B:59:4E:18:19:71:E2:3E:50:B1:13 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: 51 Signing time: Sat 23 Nov 2024 05:10:07 +0000 Manifest this update: Sat 23 Nov 2024 05:10:07 +0000 Manifest next update: Sat 30 Nov 2024 05:10:07 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: S6L1PySObZV61e4Qmb4VIRuI4qDWYkYQcXeO9eBBzlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Nov 23 05:10:07 2024 GMT Not After : Nov 30 05:10:07 2024 GMT Subject: CN=674163af-f531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:da:0e:04:d8:4e:c7:79:ed:67:8f:b6:3b: 79:ab:5e:d4:a6:ab:e0:e4:3e:ee:fd:aa:b3:2b:a1: d7:0e:17:74:c6:93:5d:ec:62:f0:60:59:6a:9e:88: 83:72:17:23:e6:06:18:11:55:69:33:d8:f7:a7:b5: 42:87:37:f3:b2:23:d2:58:86:09:14:2b:47:95:98: 4f:e0:11:73:96:09:72:18:f5:bb:2e:59:94:12:e5: ed:c9:7c:5f:d3:68:4f:57:25:b1:9c:b4:6a:3c:7a: bd:a5:69:c8:21:a4:63:1f:1a:f0:67:6a:d5:ee:4b: 09:38:c0:e9:ab:e4:5d:dc:45:37:8b:58:5b:73:6d: 2d:ed:2b:4a:cc:83:7d:5e:e8:94:90:46:b7:d5:bf: 95:63:df:17:63:e8:44:ab:18:ff:0d:1e:15:e2:39: c1:bf:54:d1:5f:86:ee:f4:58:90:e4:7b:86:43:33: 57:a0:d0:ad:74:46:6c:a5:fd:58:36:6b:23:e7:f3: 7e:45:ca:cb:81:3e:98:91:d9:7a:63:5e:57:9f:14: 8f:1b:11:68:5a:e2:ce:0e:d1:d8:95:39:ef:92:d5: f7:a1:e4:3c:26:a3:d6:8c:b6:44:49:1e:92:e9:02: da:3a:7f:66:5c:14:10:2e:bc:0d:7f:48:bc:ce:23: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:00:7C:03:BB:70:9F:73:1B:59:4E:18:19:71:E2:3E:50:B1:13 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:17:dc:34:f9:b2:8b:b1:ed:b2:5f:40:06:bd:54:74:88:0c: 16:9b:4a:d0:57:30:f4:f0:1c:e0:38:4f:04:c1:1c:e6:e3:73: 5c:b0:47:21:0a:be:2f:02:fc:be:12:c4:2e:de:86:9d:f6:ae: d9:01:a0:40:60:fa:e5:2d:03:8c:a2:28:9b:92:ac:94:7b:48: 0a:2b:98:85:a6:1e:58:d9:87:55:c3:c7:cd:16:4e:5c:4b:d3: e6:de:ad:76:af:27:ec:53:cb:64:dc:67:a7:71:49:9a:33:53: 04:22:db:31:61:33:64:e1:fb:41:70:c6:fd:b5:67:e2:ae:fb: 78:ca:47:ea:2a:94:1e:6f:f7:a8:49:56:9a:54:75:6f:be:77: 08:19:0d:ee:e1:a9:35:30:a4:b3:36:4e:83:53:b4:8e:cc:c7: ee:7f:46:67:5b:2b:31:13:c3:b4:ca:f8:d8:46:8d:03:12:62: 02:b6:49:e3:4d:c1:45:00:18:a4:9d:05:53:0f:e6:b0:78:ee: 19:77:65:c1:fa:6c:f1:41:fa:79:a1:99:2b:e9:e0:8b:41:e8: 68:f8:4b:2d:34:cb:5e:c3:3c:46:76:ec:27:76:0a:f5:41:e3: 68:4d:e4:db:f6:5b:3d:4c:8e:d2:82:df:27:13:a2:18:e0:44: f1:a5:ad:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzIzOTExMC8GA1UEBRMoQ0M2RjQ0QzFFMjVGMzdBM0FERjc2MjdCOTc3N0RGQTE3 N0Q5RDFFODAeFw0yNDExMjMwNTEwMDdaFw0yNDExMzAwNTEwMDdaMBgxFjAUBgNV BAMTDTY3NDE2M2FmLWY1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5D9oOBNhOx3ntZ4+2O3mrXtSmq+DkPu79qrMrodcOF3TGk13sYvBgWWqeiINy FyPmBhgRVWkz2PentUKHN/OyI9JYhgkUK0eVmE/gEXOWCXIY9bsuWZQS5e3JfF/T aE9XJbGctGo8er2lacghpGMfGvBnatXuSwk4wOmr5F3cRTeLWFtzbS3tK0rMg31e 6JSQRrfVv5Vj3xdj6ESrGP8NHhXiOcG/VNFfhu70WJDke4ZDM1eg0K10Rmyl/Vg2 ayPn835FysuBPpiR2XpjXlefFI8bEWha4s4O0diVOe+S1feh5Dwmo9aMtkRJHpLp Ato6f2ZcFBAuvA1/SLzOI2NRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8UIAfAO7 cJ9zG1lOGBlx4j5QsRMwHwYDVR0jBBgwFoAUzG9EweJfN6Ot92J7l3ffoXfZ0egw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMjM5LzdEMTI5QjU4MkYw MjExRUY4QzdBNTg3MEM0RjlBRTAyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBl Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekc5RXdlSmZONk90OTJKN2wzZmZvWGZaMGVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MjM5LzdEMTI5QjU4MkYwMjExRUY4QzdBNTg3MEM0RjlBRTAyL3pHOUV3ZUpmTjZP dDkySjdsM2Zmb1hmWjBlZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAX3DT5soux7bJfQAa9VHSIDBabStBXMPTwHOA4TwTBHObjc1ywRyEK vi8C/L4SxC7ehp32rtkBoEBg+uUtA4yiKJuSrJR7SAormIWmHljZh1XDx80WTlxL 0+berXavJ+xTy2TcZ6dxSZozUwQi2zFhM2Th+0Fwxv21Z+Ku+3jKR+oqlB5v96hJ VppUdW++dwgZDe7hqTUwpLM2ToNTtI7Mx+5/RmdbKzETw7TK+NhGjQMSYgK2SeNN wUUAGKSdBVMP5rB47hl3ZcH6bPFB+nmhmSvp4ItB6Gj4Sy00y17DPEZ27Cd2CvVB 42hN5Nv2Wz1MjtKC3ycTohjgRPGlrRs= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org