$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: W8ig/bh1rwxAKc/G9yNGfPDBWgIptbJgBDF7ywOTOXo= Subject key identifier: B1:7B:E8:E7:83:6F:C4:58:92:0B:9C:7B:60:AA:3C:DE:8D:0B:BA:DB Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 071B Signing time: Fri 22 Nov 2024 21:20:09 +0000 Manifest this update: Fri 22 Nov 2024 21:20:08 +0000 Manifest next update: Fri 29 Nov 2024 21:20:08 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: 4/y9D5qmpaRlOnS7kHbyN953376A24tKGNjMGeRCxrI=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: TzkugJlacHGyiBaVtRQBiu7LPTpF6lMkRll4d2il6cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Nov 22 21:20:08 2024 GMT Not After : Nov 29 21:20:08 2024 GMT Subject: CN=6740f589-baea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:f8:ff:f2:f2:70:8d:bb:04:5f:a1:8d:f2: d6:d1:c0:08:d6:f3:6f:85:7f:c9:31:1c:68:11:26: 85:3d:59:6b:92:48:f1:5d:a8:d4:87:42:4e:1a:00: 4e:5e:0c:cd:c0:c2:9f:9a:19:93:62:a5:ae:e6:34: 02:ff:5d:da:13:34:29:8a:bf:54:07:6a:3d:c0:12: 57:d7:4c:91:46:0d:91:2c:38:cc:e6:27:8f:ef:d4: b5:d7:4b:fc:c9:18:7d:89:53:99:69:d5:74:a9:46: 4e:53:40:b5:31:07:07:38:ed:ae:4f:a1:cc:fb:a6: ff:c1:bc:8c:b3:6a:ae:4b:95:e7:cb:e4:f5:ac:23: 80:f6:cd:ee:23:82:64:e8:33:0e:80:79:d3:8f:c2: fb:62:64:21:8d:dd:95:4f:84:b4:9a:b4:64:4e:2f: 51:f5:07:3a:3a:3f:9f:da:74:74:3b:4b:a4:d2:fd: 6f:b8:39:63:da:a4:37:db:be:24:c7:6d:81:63:d1: 29:c6:7e:44:64:84:fc:0c:33:9b:67:5c:2a:21:8d: 37:e2:41:76:b1:4d:29:9e:bd:4d:fb:3c:c0:eb:17: 6e:ab:6f:a8:93:78:44:6c:91:e4:01:a8:6d:18:b3: 34:91:f9:36:0a:b5:89:73:eb:cb:0d:ae:70:7d:04: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7B:E8:E7:83:6F:C4:58:92:0B:9C:7B:60:AA:3C:DE:8D:0B:BA:DB X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:5f:01:f1:33:81:e0:b8:43:12:2c:24:c5:af:cc:6b:84: 91:02:be:f4:9e:04:73:b4:0b:98:60:c0:fd:b1:f5:e3:a1:8a: b0:88:b0:a5:54:9a:ba:96:74:59:d8:27:96:8d:38:22:ec:a7: a2:b1:96:26:34:8c:5b:de:a0:05:a6:96:50:4e:32:fc:9d:f5: d1:00:cb:bc:02:aa:79:69:c9:34:0c:0a:19:54:64:8a:e1:c6: d0:c4:1f:9b:7d:95:35:43:b9:a6:30:6d:15:9e:c3:61:97:23: 05:66:96:8e:89:67:98:e5:15:0b:b7:1f:c4:3c:ae:be:14:b8: bb:76:e2:fb:0a:1c:d7:de:83:a5:67:0b:71:8d:99:91:1b:5e: 34:ef:e1:aa:18:0c:da:68:da:81:f2:b4:76:d2:09:01:05:83: fd:d1:e8:53:68:99:37:55:63:e1:48:48:80:a7:e4:18:1a:a0: e4:d5:94:1b:a5:f2:5e:55:8a:9e:89:46:42:bc:52:7e:c4:31: 5e:4b:d3:d2:63:97:c5:6f:97:3c:93:18:2b:8a:00:d4:9a:4b: 37:e0:a4:70:ed:81:45:ba:2b:5f:a5:f6:ed:ee:4b:55:9b:20: b4:2d:5e:bb:7a:8d:25:6b:80:57:af:d8:34:36:ed:4c:10:66: 4f:a4:e8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjQxMTIyMjEyMDA4WhcNMjQxMTI5MjEyMDA4WjAYMRYwFAYD VQQDEw02NzQwZjU4OS1iYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoev4//LycI27BF+hjfLW0cAI1vNvhX/JMRxoESaFPVlrkkjxXajUh0JOGgBO XgzNwMKfmhmTYqWu5jQC/13aEzQpir9UB2o9wBJX10yRRg2RLDjM5ieP79S110v8 yRh9iVOZadV0qUZOU0C1MQcHOO2uT6HM+6b/wbyMs2quS5Xny+T1rCOA9s3uI4Jk 6DMOgHnTj8L7YmQhjd2VT4S0mrRkTi9R9Qc6Oj+f2nR0O0uk0v1vuDlj2qQ3274k x22BY9Epxn5EZIT8DDObZ1wqIY034kF2sU0pnr1N+zzA6xduq2+ok3hEbJHkAaht GLM0kfk2CrWJc+vLDa5wfQSmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF76OeD b8RYkguce2CqPN6NC7rbMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi7F8B8TOB4LhDEiwkxa/Ma4SRAr70ngRztAuYYMD9sfXjoYqwiLCl VJq6lnRZ2CeWjTgi7KeisZYmNIxb3qAFppZQTjL8nfXRAMu8Aqp5ack0DAoZVGSK 4cbQxB+bfZU1Q7mmMG0VnsNhlyMFZpaOiWeY5RULtx/EPK6+FLi7duL7ChzX3oOl ZwtxjZmRG1407+GqGAzaaNqB8rR20gkBBYP90ehTaJk3VWPhSEiAp+QYGqDk1ZQb pfJeVYqeiUZCvFJ+xDFeS9PSY5fFb5c8kxgrigDUmks34KRw7YFFuitfpfbt7ktV myC0LV67eo0la4BXr9g0Nu1MEGZPpOiu -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org