$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json) Hash identifier: Fj1wPFzv7paqpCRxhUVvpt7PJt77H/zKXT0gLTex2UQ= Subject key identifier: 1F:5C:16:76:CA:50:B3:C0:CA:F8:04:C1:DB:6B:C4:4C:33:43:E8:AF Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft Manifest number: 0710 Signing time: Fri 22 Nov 2024 21:25:02 +0000 Manifest this update: Fri 22 Nov 2024 21:25:01 +0000 Manifest next update: Fri 29 Nov 2024 21:25:01 +0000 Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: 3Mavi3aVfzAjbhZgjS9aZGiScFFpI3q2gnIIX122Msc=) 2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: t6Ge3iMSSEepvK+Lc1zDSD/DIuC0nX4IWGHRYnQrK6k=) 3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: nsBI5aAcb8LJy1OAbfgsAYYYF1PowIy7VZxwvaix1FI=) 4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: hVGpRvhX5Ju9BqJwvLilMW82myywekIMm4EdIHToKkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Validity Not Before: Nov 22 21:25:01 2024 GMT Not After : Nov 29 21:25:01 2024 GMT Subject: CN=6740f6ad-449d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:cd:d1:d5:ba:2b:dc:c8:ba:54:8f:a9:32: 6d:de:92:59:69:94:2b:0f:b5:f8:55:d9:ad:5e:1c: 79:6a:f0:cd:86:b2:4b:71:45:4f:37:11:b7:e0:47: 65:64:09:62:6c:b8:64:aa:47:f3:e3:25:56:2e:69: 71:f8:84:f0:1e:87:4c:15:52:e2:ef:e5:6f:43:8b: d3:a1:52:d0:cb:6f:68:b5:90:58:63:cc:4d:76:57: 64:12:2d:c4:4e:88:c4:af:a4:8c:af:e5:39:99:ae: f8:5b:b8:10:4c:ec:51:2a:21:f5:55:b5:11:72:b9: 6a:b5:d2:78:89:18:28:00:a7:7e:6a:79:3d:70:48: 4e:9d:5a:4e:00:f7:4c:7e:bb:94:d2:60:1f:ca:5d: 10:5f:c0:34:60:9e:9c:ec:72:d1:03:a2:f2:bd:14: c2:98:49:55:5a:f1:9c:8d:e1:5f:fb:c3:ec:ec:ad: c8:1e:d3:1f:24:42:4a:c8:22:fb:08:a8:fb:5c:d6: 6c:ec:39:e2:83:20:90:d6:88:f1:79:35:83:8d:3c: d5:92:5d:c0:c2:91:90:74:64:ee:fe:70:d2:4c:5a: 4e:2c:b4:ff:65:2f:7a:5d:8a:a3:93:62:56:ee:98: e3:f3:4e:31:ea:d2:d3:76:5d:16:ae:d5:bd:19:a1: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:16:76:CA:50:B3:C0:CA:F8:04:C1:DB:6B:C4:4C:33:43:E8:AF X509v3 Authority Key Identifier: keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:79:f9:f3:c1:e2:c3:ed:9a:81:ec:a0:1e:de:31:d0:99:0b: 95:81:fb:2d:83:f7:1d:73:d6:5e:6e:78:5c:cb:ea:13:89:bf: 60:3c:60:21:8a:78:a0:2f:6f:58:a1:55:a1:49:4f:35:82:41: 56:e1:81:53:ae:4e:8d:73:c0:b7:a9:99:32:89:73:e8:c3:93: 1c:58:1f:a0:f4:2a:13:1d:fd:14:fe:2b:ed:b9:44:d1:1a:2e: c4:2d:da:11:41:82:fd:bb:3d:39:ca:bd:eb:0c:5e:b5:db:e2: 00:72:62:24:64:64:18:12:9d:6e:0c:22:e2:b4:4c:94:1a:2a: ea:09:48:3c:68:86:f4:c0:34:99:22:10:63:c2:00:fa:b4:38: d6:33:22:56:9a:cf:de:e5:76:fc:df:0d:c0:3e:28:47:23:0f: eb:7d:23:c2:5a:fe:53:9c:cf:8f:dc:ce:b3:6c:27:41:03:4f: 42:21:53:54:99:9f:d2:fd:fd:b8:7e:6d:96:aa:68:16:dc:f2: 73:7d:f0:84:2e:17:d2:73:a3:f0:7e:89:e7:0c:67:fd:df:23: 8f:48:0c:4f:e2:17:47:bf:24:d7:04:57:3b:3e:50:bb:bf:86: d6:18:0c:8e:bf:eb:af:e0:7c:76:b8:eb:ca:94:98:25:26:a0: bb:16:30:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3 RUFFRkExNjgwHhcNMjQxMTIyMjEyNTAxWhcNMjQxMTI5MjEyNTAxWjAYMRYwFAYD VQQDEw02NzQwZjZhZC00NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQDN0dW6K9zIulSPqTJt3pJZaZQrD7X4VdmtXhx5avDNhrJLcUVPNxG34Edl ZAlibLhkqkfz4yVWLmlx+ITwHodMFVLi7+VvQ4vToVLQy29otZBYY8xNdldkEi3E TojEr6SMr+U5ma74W7gQTOxRKiH1VbURcrlqtdJ4iRgoAKd+ank9cEhOnVpOAPdM fruU0mAfyl0QX8A0YJ6c7HLRA6LyvRTCmElVWvGcjeFf+8Ps7K3IHtMfJEJKyCL7 CKj7XNZs7DnigyCQ1ojxeTWDjTzVkl3AwpGQdGTu/nDSTFpOLLT/ZS96XYqjk2JW 7pjj804x6tLTdl0WrtW9GaGg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9cFnbK ULPAyvgEwdtrxEwzQ+ivMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5 OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/efnzweLD7ZqB7KAe3jHQmQuVgfstg/cdc9Zebnhcy+oTib9gPGAh inigL29YoVWhSU81gkFW4YFTrk6Nc8C3qZkyiXPow5McWB+g9CoTHf0U/ivtuUTR Gi7ELdoRQYL9uz05yr3rDF612+IAcmIkZGQYEp1uDCLitEyUGirqCUg8aIb0wDSZ IhBjwgD6tDjWMyJWms/e5Xb83w3APihHIw/rfSPCWv5TnM+P3M6zbCdBA09CIVNU mZ/S/f24fm2WqmgW3PJzffCELhfSc6PwfonnDGf93yOPSAxP4hdHvyTXBFc7PlC7 v4bWGAyOv+uv4Hx2uOvKlJglJqC7FjCF -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org