$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: PqRRkkOmRn+n1Nd/2VUjnEpRs1Q+w9eo/vIKG9V7Gz4= Subject key identifier: 2D:A3:2A:61:83:59:DF:85:67:17:8D:C4:2F:B5:64:0A:6D:89:15:57 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: F9 Signing time: Sat 23 Nov 2024 03:21:51 +0000 Manifest this update: Sat 23 Nov 2024 03:21:51 +0000 Manifest next update: Sat 30 Nov 2024 03:21:51 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: oyTqMzpHIqDfDzJePRrQenQER/+/TKr3nZ0saCxP2oA=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Nov 23 03:21:51 2024 GMT Not After : Nov 30 03:21:51 2024 GMT Subject: CN=67414a4f-b3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:f8:07:26:13:d3:18:32:6c:1f:6a:1e:24: 31:d2:09:dc:2c:b0:d4:c3:e0:e7:28:e0:87:35:d8: 94:e2:46:d2:f4:89:4f:d1:b1:3f:14:e7:8d:71:85: 5d:4e:03:7a:a6:41:d4:84:51:dd:0e:07:0b:bb:14: 7d:4a:d1:2c:85:6b:34:45:59:2d:58:de:a8:fa:a3: 64:5d:79:08:ae:21:51:a4:c7:1c:ed:39:e4:f4:0d: 37:4f:42:e3:a8:f2:14:33:ea:54:39:5b:47:a2:7b: aa:ac:10:41:c5:8f:33:9b:6f:a8:bf:db:d6:0c:88: 07:d9:18:f0:7b:a5:06:0d:bb:85:42:a0:a4:ce:00: e2:ce:a7:d9:1e:12:33:f9:ed:d5:fd:7a:9c:3c:09: 78:ee:02:c4:46:37:70:9a:04:76:30:b1:89:b8:9d: c0:38:1c:b7:0f:de:62:ae:3e:a3:fd:e8:3c:e0:47: 05:9b:1f:5b:b9:4b:af:91:f8:62:59:d5:8a:88:50: ed:ef:91:94:47:8d:93:10:74:67:04:1c:31:8d:3c: e6:56:ec:b9:bc:2e:7b:18:95:9c:05:cc:94:72:b3: 55:66:8f:87:15:e2:0c:69:72:81:4c:10:81:f6:b9: 2d:0b:bd:20:33:2f:05:51:37:8e:88:5f:4d:e8:a0: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A3:2A:61:83:59:DF:85:67:17:8D:C4:2F:B5:64:0A:6D:89:15:57 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d8:60:87:3a:ea:e2:60:41:40:54:68:4f:19:6f:73:2a:9a: 3d:29:f0:a9:ab:c4:66:6a:ed:b3:1a:8d:fe:07:b9:63:c1:4c: e3:5e:cf:be:06:7e:a6:1c:54:ab:dd:4c:6e:80:11:33:af:ca: 6a:78:57:7c:f4:bb:ea:57:b5:82:dd:6c:8b:9f:8a:ef:5a:10: 90:9d:6e:2e:56:3d:30:db:40:56:58:69:cb:94:72:77:0f:c0: ff:8b:03:e4:4e:ac:42:bb:2c:3a:cb:c6:ae:20:01:f4:ab:61: 77:9a:62:84:78:23:ed:ae:16:61:4d:f3:f5:e4:5c:e6:65:4c: e3:10:ea:a8:8e:46:37:ec:ce:40:b2:8b:72:6d:c0:9a:14:a9: 50:f0:b1:a9:15:62:cc:a8:8b:f6:f6:51:e6:98:87:e2:13:71: fb:16:81:bd:35:3d:8b:92:49:a5:0e:70:4a:df:70:b6:49:d3: aa:d5:87:a6:3f:58:90:38:fe:dd:43:66:d6:7f:d4:03:c5:2f: 03:d5:68:02:42:8c:2a:a6:51:45:65:9a:95:8c:95:06:79:43: 61:c4:99:70:52:f7:f3:4e:ed:91:c6:d7:6b:9c:e2:a9:30:fb: 26:30:c8:9b:f1:b4:b0:47:87:24:78:2d:9d:74:44:89:af:e0: 57:18:88:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjQxMTIzMDMyMTUxWhcNMjQxMTMwMDMyMTUxWjAYMRYwFAYD VQQDEw02NzQxNGE0Zi1iM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM34ByYT0xgybB9qHiQx0gncLLDUw+DnKOCHNdiU4kbS9IlP0bE/FOeNcYVd TgN6pkHUhFHdDgcLuxR9StEshWs0RVktWN6o+qNkXXkIriFRpMcc7Tnk9A03T0Lj qPIUM+pUOVtHonuqrBBBxY8zm2+ov9vWDIgH2Rjwe6UGDbuFQqCkzgDizqfZHhIz +e3V/XqcPAl47gLERjdwmgR2MLGJuJ3AOBy3D95irj6j/eg84EcFmx9buUuvkfhi WdWKiFDt75GUR42TEHRnBBwxjTzmVuy5vC57GJWcBcyUcrNVZo+HFeIMaXKBTBCB 9rktC70gMy8FUTeOiF9N6KC9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2jKmGD Wd+FZxeNxC+1ZAptiRVXMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg2GCHOuriYEFAVGhPGW9zKpo9KfCpq8Rmau2zGo3+B7ljwUzjXs++ Bn6mHFSr3UxugBEzr8pqeFd89LvqV7WC3WyLn4rvWhCQnW4uVj0w20BWWGnLlHJ3 D8D/iwPkTqxCuyw6y8auIAH0q2F3mmKEeCPtrhZhTfP15FzmZUzjEOqojkY37M5A sotybcCaFKlQ8LGpFWLMqIv29lHmmIfiE3H7FoG9NT2LkkmlDnBK33C2SdOq1Yem P1iQOP7dQ2bWf9QDxS8D1WgCQowqplFFZZqVjJUGeUNhxJlwUvfzTu2RxtdrnOKp MPsmMMib8bSwR4ckeC2ddESJr+BXGIiz -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org