$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: B1EUblytLsjyqv8Jy7SKRW9PAcGrknYVujlXPDIen8s= Subject key identifier: 48:29:44:F7:B7:50:58:26:1D:0D:A6:31:94:12:8E:73:8E:7D:06:90 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0958 Signing time: Fri 22 Nov 2024 19:56:22 +0000 Manifest this update: Fri 22 Nov 2024 19:56:21 +0000 Manifest next update: Fri 29 Nov 2024 19:56:21 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: 8wSSEOv4Z9BhM/sM0JkEFLB04aRR+FjnYHJ291BFGjM=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: Lv3s/tDzwoH6gl7nLzqYDd9D8Hirj2BDnbGE+1t61zg=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: J0+zE9SmlQGpzIqcvJUCPulCa8uAwpw7BcVDFzghz4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Nov 22 19:56:21 2024 GMT Not After : Nov 29 19:56:21 2024 GMT Subject: CN=6740e1e6-a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:1e:6b:2d:04:15:1d:04:02:f6:fb:8c:5f: 57:4b:de:2f:4f:e9:81:b0:bd:0b:25:3c:58:0b:a0: dd:00:8e:fb:ce:89:5b:ef:13:ce:3e:91:9b:94:a4: e8:c9:52:3a:42:c3:0a:13:6b:19:eb:04:77:ff:93: 81:19:a2:12:83:1d:a7:4b:6a:84:a2:2a:8a:e7:22: 04:1a:b3:33:24:30:e4:6f:44:fd:fc:5a:59:dd:e6: fe:be:c3:03:c1:dd:23:c6:6d:91:44:03:03:84:39: 94:47:5a:36:1c:11:14:a7:41:0c:97:39:68:21:3c: 58:cc:e4:72:10:4e:f2:34:41:53:db:dc:40:93:a9: ff:85:ae:ec:3c:4e:2c:52:22:cd:c4:8a:03:21:12: 37:d5:c2:10:bb:7c:f3:03:cc:62:ba:5f:58:ed:4f: fb:9d:58:d7:8e:52:bc:20:6b:dc:3c:65:41:2a:19: 95:05:e5:d9:ca:02:87:09:b7:49:1c:bc:16:16:12: 1b:68:ed:c1:9c:58:97:9a:b4:4e:24:c2:b4:c4:da: 6a:aa:65:1b:14:67:a3:a5:c6:c0:e9:27:b6:fc:4b: 28:b2:6b:45:88:7b:81:33:40:a4:00:02:c7:7c:1a: 91:a4:ab:21:9e:d4:fc:e6:cc:11:ce:7f:b8:26:aa: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:29:44:F7:B7:50:58:26:1D:0D:A6:31:94:12:8E:73:8E:7D:06:90 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:76:2a:a0:d4:63:47:0c:bf:8c:9d:56:07:4f:f3:6f:c1:6c: ad:fa:44:bb:0c:26:50:50:e3:f8:71:75:1a:48:85:16:6c:42: b7:16:de:b4:2a:b7:ba:bc:48:54:f4:13:82:92:b9:78:69:c8: a3:5e:7d:f0:d8:36:ce:91:b6:04:04:7c:02:c0:5f:b6:ab:3a: 4e:3a:ab:c9:56:83:22:91:8b:f0:a5:eb:51:1f:80:4d:47:b4: 2c:d2:d7:e1:a6:01:09:a0:86:ef:3a:f6:ea:34:aa:fe:8d:59: 61:97:29:a1:0f:19:54:e2:7a:6c:c8:c2:35:a6:a8:d6:37:44: d6:94:29:2e:e4:04:6a:88:43:32:82:8a:51:87:8d:52:1f:4a: a6:bf:49:63:e2:f9:d2:6a:92:95:a1:0e:4b:84:9b:ea:aa:a6: be:bc:8a:15:33:fc:b7:15:21:90:eb:fe:78:5a:72:d9:6b:15: 30:1c:c6:47:02:14:a3:93:71:2c:c2:21:57:fa:ed:fc:9a:bf: e3:5b:9b:3f:e5:ea:13:fc:57:8d:a6:06:32:14:97:29:ca:5a: a8:44:33:bb:4e:27:fe:3e:7b:5e:e7:db:38:fc:70:4e:02:0e: 0f:2f:8e:2e:b2:09:da:87:f1:5e:0d:53:7d:cb:01:8c:d7:c9: 65:73:2d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjQxMTIyMTk1NjIxWhcNMjQxMTI5MTk1NjIxWjAYMRYwFAYD VQQDEw02NzQwZTFlNi1hNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/Qeay0EFR0EAvb7jF9XS94vT+mBsL0LJTxYC6DdAI77zolb7xPOPpGblKTo yVI6QsMKE2sZ6wR3/5OBGaISgx2nS2qEoiqK5yIEGrMzJDDkb0T9/FpZ3eb+vsMD wd0jxm2RRAMDhDmUR1o2HBEUp0EMlzloITxYzORyEE7yNEFT29xAk6n/ha7sPE4s UiLNxIoDIRI31cIQu3zzA8xiul9Y7U/7nVjXjlK8IGvcPGVBKhmVBeXZygKHCbdJ HLwWFhIbaO3BnFiXmrROJMK0xNpqqmUbFGejpcbA6Se2/EsosmtFiHuBM0CkAALH fBqRpKshntT85swRzn+4Jqry6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgpRPe3 UFgmHQ2mMZQSjnOOfQaQMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATdiqg1GNHDL+MnVYHT/NvwWyt+kS7DCZQUOP4cXUaSIUWbEK3Ft60 Kre6vEhU9BOCkrl4acijXn3w2DbOkbYEBHwCwF+2qzpOOqvJVoMikYvwpetRH4BN R7Qs0tfhpgEJoIbvOvbqNKr+jVlhlymhDxlU4npsyMI1pqjWN0TWlCku5ARqiEMy gopRh41SH0qmv0lj4vnSapKVoQ5LhJvqqqa+vIoVM/y3FSGQ6/54WnLZaxUwHMZH AhSjk3EswiFX+u38mr/jW5s/5eoT/FeNpgYyFJcpylqoRDO7Tif+Pnte59s4/HBO Ag4PL44usgnah/FeDVN9ywGM18llcy1S -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org