$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: p4zm1fI2GN9wvnyAcEi+gHzV++oEpM+WwYUDw0AHFh8= Subject key identifier: 2C:9A:E9:DC:0B:9A:3F:6C:E2:28:62:FC:99:5A:CF:8C:EC:11:D0:73 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0C49 Signing time: Fri 22 Nov 2024 18:09:11 +0000 Manifest this update: Fri 22 Nov 2024 18:09:11 +0000 Manifest next update: Fri 29 Nov 2024 18:09:11 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: fq3C43TtKfD5yzPCkxO2OEgl8rsfeNb53sMYNamaUME=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: +d8JTMdE/OZF41ywsfLWbdDiFe60dYPx5jzZe3nPzII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Nov 22 18:09:11 2024 GMT Not After : Nov 29 18:09:11 2024 GMT Subject: CN=6740c8c7-fd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:c1:0d:18:e8:2a:b9:f6:ee:8f:9b:7e:13: 29:cd:bc:15:4f:56:9d:89:b9:fd:dc:6b:30:aa:03: a4:e7:bf:03:7a:5c:27:60:88:b2:e9:1c:41:0a:65: d7:52:e7:48:f0:77:0b:90:38:f8:82:1c:23:73:08: ed:14:67:ce:0c:d9:1c:7f:b9:29:de:05:a1:89:4d: 02:77:e2:43:73:0c:83:1a:a1:3c:8f:41:59:38:0f: f9:69:04:17:d3:ad:a6:80:a4:0f:9b:c0:d0:da:25: 78:8f:af:4c:28:d0:2f:47:cd:92:9e:0c:ff:53:f7: 7b:96:fa:4d:59:ad:2b:20:c7:05:7d:c9:12:14:c6: 32:0a:c5:51:87:36:af:61:20:42:86:42:27:82:9f: 92:57:9a:b8:7a:8b:8d:73:ba:78:62:a3:11:fb:6e: ac:56:33:1a:28:26:51:06:70:ab:c8:35:40:8a:44: 2b:f5:e7:22:9f:1e:c0:f5:96:35:b5:86:20:dc:82: dc:76:2b:6a:08:4e:08:bb:69:e7:c8:a4:fb:f7:2d: 34:59:1c:8f:c2:0b:14:c0:c3:7f:92:2b:74:80:a9: 60:ff:79:9d:58:c7:db:fe:79:94:ad:d2:2c:4e:d3: 01:f5:3d:5b:41:70:13:49:ae:61:c5:77:fa:08:45: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:E9:DC:0B:9A:3F:6C:E2:28:62:FC:99:5A:CF:8C:EC:11:D0:73 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f0:39:0f:4e:5f:fc:df:a8:3b:78:0a:c1:2a:52:34:d9:d1: fe:47:a2:a3:07:d1:af:bd:5e:81:42:a6:7d:04:98:d8:29:ce: 72:9d:12:37:9a:37:52:2c:7b:4a:fe:1f:b9:5a:98:bd:51:bf: b7:76:27:98:1e:76:75:2e:85:9f:28:9b:a9:42:4c:67:fe:3b: 14:a0:af:a4:5a:87:bd:35:2e:16:a4:9c:09:eb:e8:fc:48:e8: ba:91:28:2a:99:a1:7f:dc:aa:a2:6f:fd:42:3c:18:2a:e7:eb: b4:e2:bf:d2:28:33:21:3e:08:69:22:40:72:69:2f:ea:43:4b: 11:ec:85:3e:e4:8f:9c:d1:35:9c:d5:00:f5:20:e8:ca:32:3e: 1b:00:6f:e3:f4:82:cb:b7:78:4f:6a:78:f9:7d:ad:29:2c:ca: b6:11:83:de:97:0b:d9:4b:9d:6c:40:a5:bd:34:ae:df:c8:e8: b1:08:3a:a3:ce:d9:6c:2d:9a:e1:94:2f:af:3a:8a:cc:02:a9: 42:7c:ef:97:36:49:4b:7b:07:f7:cf:09:38:c7:77:55:37:26: b8:53:fb:7a:7d:24:d7:df:35:21:66:1b:8e:74:5e:93:c0:5c: b9:30:b1:ce:11:6d:eb:e3:13:1e:7a:58:08:0f:c2:5f:ab:66: c3:1a:df:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjQxMTIyMTgwOTExWhcNMjQxMTI5MTgwOTExWjAYMRYwFAYD VQQDEw02NzQwYzhjNy1mZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8nBDRjoKrn27o+bfhMpzbwVT1adibn93GswqgOk578DelwnYIiy6RxBCmXX UudI8HcLkDj4ghwjcwjtFGfODNkcf7kp3gWhiU0Cd+JDcwyDGqE8j0FZOA/5aQQX 062mgKQPm8DQ2iV4j69MKNAvR82Sngz/U/d7lvpNWa0rIMcFfckSFMYyCsVRhzav YSBChkIngp+SV5q4eouNc7p4YqMR+26sVjMaKCZRBnCryDVAikQr9ecinx7A9ZY1 tYYg3ILcditqCE4Iu2nnyKT79y00WRyPwgsUwMN/kit0gKlg/3mdWMfb/nmUrdIs TtMB9T1bQXATSa5hxXf6CEVxBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCya6dwL mj9s4ihi/Jlaz4zsEdBzMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN8DkPTl/836g7eArBKlI02dH+R6KjB9GvvV6BQqZ9BJjYKc5ynRI3 mjdSLHtK/h+5Wpi9Ub+3dieYHnZ1LoWfKJupQkxn/jsUoK+kWoe9NS4WpJwJ6+j8 SOi6kSgqmaF/3Kqib/1CPBgq5+u04r/SKDMhPghpIkByaS/qQ0sR7IU+5I+c0TWc 1QD1IOjKMj4bAG/j9ILLt3hPanj5fa0pLMq2EYPelwvZS51sQKW9NK7fyOixCDqj ztlsLZrhlC+vOorMAqlCfO+XNklLewf3zwk4x3dVNya4U/t6fSTX3zUhZhuOdF6T wFy5MLHOEW3r4xMeelgID8Jfq2bDGt84 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org