$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json) Hash identifier: LXOflvfn7Bug7pIizTu8HtVSaLS/SpkAIoGH0/QaJRQ= Subject key identifier: EA:4E:F7:07:6C:E6:A3:65:FE:50:3D:FA:42:C4:71:E4:0C:6E:51:02 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft Manifest number: 02BC Signing time: Sat 23 Nov 2024 01:00:08 +0000 Manifest this update: Sat 23 Nov 2024 01:00:07 +0000 Manifest next update: Sat 30 Nov 2024 01:00:07 +0000 Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: RN++SVCbQ+PD6tnpkWNODCL6nzaBhU18KuP/40/gfQU=) 2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: Nov 23 01:00:07 2024 GMT Not After : Nov 30 01:00:07 2024 GMT Subject: CN=67412918-b530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:99:02:48:92:c8:b5:30:d9:58:bc:01:a6: bc:e9:5f:15:92:ca:c7:b8:61:db:1c:c8:91:7d:c2: 4c:97:63:12:20:38:cc:73:94:db:91:3c:0a:45:cd: fd:fb:60:d5:1b:bf:c2:ee:1f:b2:ed:98:bf:e3:12: 5b:f8:23:62:34:37:57:cf:a8:6f:ae:46:1a:2b:fc: fa:66:f3:5f:eb:c5:d7:02:c5:35:66:3a:3f:7c:67: d6:b1:7f:fb:12:58:f7:0c:b4:92:85:96:fa:6d:0a: 4a:c7:44:c6:2b:56:a1:d0:3c:4a:ee:60:88:e6:c1: e5:c6:f5:78:c3:ca:4c:cc:aa:54:b8:49:6b:5a:2f: 28:1b:16:2f:82:11:e6:b3:51:30:0a:a0:af:c1:16: 2b:e3:c9:5e:8d:0b:49:eb:d2:dc:d2:2c:c3:d2:1f: 62:fa:e8:1d:a0:e7:70:33:0a:5d:14:82:ba:71:dd: 4e:9f:10:81:da:bf:c2:2a:8a:d2:bb:64:e7:e0:a3: 7e:4a:71:d9:08:55:37:9e:9e:d3:0d:0c:ff:a9:64: ac:ba:56:1f:3e:b5:1d:cf:00:94:dd:45:26:7f:80: e6:9d:a7:69:e6:28:b9:f2:07:65:d1:57:f9:52:62: 8c:65:70:f7:15:4a:b2:92:90:b0:61:f6:3f:29:e9: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4E:F7:07:6C:E6:A3:65:FE:50:3D:FA:42:C4:71:E4:0C:6E:51:02 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0f:df:c7:c8:9b:29:6f:53:3f:bc:db:15:91:bd:a6:ae:53: 75:1b:53:52:89:26:48:d7:a3:0e:ed:ae:20:89:fc:1d:4d:29: db:73:4d:05:a6:fb:55:53:53:40:e5:ed:51:88:0c:8c:6f:d5: f3:72:e5:4a:cd:a2:ac:7c:a6:af:09:32:48:aa:f2:cc:f9:8d: 80:6c:d2:55:40:2a:97:01:f4:23:15:6c:f4:b0:9f:5e:57:73: 79:4e:3d:6e:a9:4f:dd:96:33:2d:83:91:98:df:a3:2d:19:da: 0e:3d:16:cd:91:01:5a:22:33:32:f5:6d:61:87:a3:28:54:ee: 06:b2:ba:92:42:d4:7e:eb:49:78:1d:a7:d3:7c:be:c9:c5:2f: f8:5a:25:21:24:61:2f:e9:87:1a:e5:f4:a2:e5:59:7a:52:29: 19:4c:29:c4:e9:fd:77:80:ed:d3:c4:a8:a8:ba:a4:0d:2e:98: e5:6b:0b:33:4a:b0:46:a1:1f:f8:15:db:68:7b:7e:0f:18:aa: e4:e0:19:ec:e4:ca:6f:b5:40:dd:33:0c:2a:9b:8b:7b:05:f3: e2:50:ab:7d:19:5c:8d:d6:24:d1:99:a3:08:48:bd:d2:bc:b5: 34:35:f2:39:ae:1a:17:65:9d:3f:7f:7e:58:c3:ca:e8:09:e0: eb:64:67:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjQxMTIzMDEwMDA3WhcNMjQxMTMwMDEwMDA3WjAYMRYwFAYD VQQDEw02NzQxMjkxOC1iNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRKZAkiSyLUw2Vi8Aaa86V8VksrHuGHbHMiRfcJMl2MSIDjMc5TbkTwKRc39 +2DVG7/C7h+y7Zi/4xJb+CNiNDdXz6hvrkYaK/z6ZvNf68XXAsU1Zjo/fGfWsX/7 Elj3DLSShZb6bQpKx0TGK1ah0DxK7mCI5sHlxvV4w8pMzKpUuElrWi8oGxYvghHm s1EwCqCvwRYr48lejQtJ69Lc0izD0h9i+ugdoOdwMwpdFIK6cd1OnxCB2r/CKorS u2Tn4KN+SnHZCFU3np7TDQz/qWSsulYfPrUdzwCU3UUmf4Dmnadp5ii58gdl0Vf5 UmKMZXD3FUqykpCwYfY/KenBGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpO9wds 5qNl/lA9+kLEceQMblECMB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxRC9DNkI2MTJCMkNEMDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlB QTBGVGN6VTF0S3FMT2dBYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7D9/HyJspb1M/vNsVkb2mrlN1G1NSiSZI16MO7a4gifwdTSnbc00F pvtVU1NA5e1RiAyMb9XzcuVKzaKsfKavCTJIqvLM+Y2AbNJVQCqXAfQjFWz0sJ9e V3N5Tj1uqU/dljMtg5GY36MtGdoOPRbNkQFaIjMy9W1hh6MoVO4GsrqSQtR+60l4 HafTfL7JxS/4WiUhJGEv6Yca5fSi5Vl6UikZTCnE6f13gO3TxKiouqQNLpjlawsz SrBGoR/4Fdtoe34PGKrk4Bns5MpvtUDdMwwqm4t7BfPiUKt9GVyN1iTRmaMISL3S vLU0NfI5rhoXZZ0/f35Yw8roCeDrZGcL -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org