$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json) Hash identifier: vMINQknzCSbjZx+e53doXIw6IJwIpuuBk5YXrXVOr5s= Subject key identifier: C6:F3:96:5F:5D:86:E9:3B:3A:EA:D1:0A:31:AB:12:ED:4E:7F:2C:09 Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft Manifest number: 05EC Signing time: Fri 22 Nov 2024 22:23:16 +0000 Manifest this update: Fri 22 Nov 2024 22:23:15 +0000 Manifest next update: Fri 29 Nov 2024 22:23:15 +0000 Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: bvj485NH80jt2FatA0lQtc89eb+7/wlqz5ckPXY6tOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D Validity Not Before: Nov 22 22:23:15 2024 GMT Not After : Nov 29 22:23:15 2024 GMT Subject: CN=67410453-ac9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:2f:73:5d:94:f1:ce:78:8e:7d:af:09:fa: b2:0c:14:15:b8:79:0d:5f:d8:37:9c:86:1c:83:39: 3c:a4:45:f9:5c:cf:b9:e0:0e:5f:a2:54:c1:d1:30: 94:9d:e6:97:89:69:4f:4a:5b:c6:ed:ae:a6:c4:9d: e8:ea:f7:9d:b4:68:3d:42:f1:28:a0:b9:dd:8c:25: 81:69:ff:fe:b8:76:7c:25:3a:5f:11:5a:21:2c:00: a6:da:39:56:9e:c7:d9:2b:5e:91:5a:02:c0:4b:3b: cd:0d:e9:f1:84:24:d8:64:e1:85:78:9d:6e:7d:b5: 38:7f:02:fe:5b:37:1d:95:42:4e:df:a3:0b:42:59: 97:44:f5:ab:95:91:f5:8f:37:9a:25:2b:87:27:a7: 41:6e:e9:9e:94:18:b1:5c:75:b0:d9:40:d2:a1:64: 15:d8:ac:a8:11:55:7d:ff:f4:f6:50:93:01:84:4e: 97:a7:da:3c:36:55:ec:20:07:ef:8d:1c:d5:42:2c: 44:16:c7:92:15:cf:db:2c:3f:8c:9d:4c:36:4b:38: 5e:2b:84:c9:15:2f:2a:1f:9e:f8:84:4d:30:18:d8: 57:25:1c:f9:b1:dd:8e:68:a3:23:c8:5d:23:46:b9: 9b:c0:ac:c8:86:96:15:f7:75:ad:7c:df:01:ff:c0: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F3:96:5F:5D:86:E9:3B:3A:EA:D1:0A:31:AB:12:ED:4E:7F:2C:09 X509v3 Authority Key Identifier: keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:49:2c:8a:85:84:80:1d:e0:a2:ac:a2:7b:96:f8:99:84: 4e:64:51:29:93:a7:fd:21:04:d3:4f:5a:66:ac:98:24:fb:6c: 1d:5e:bd:77:ab:d3:d5:d7:25:29:54:64:7e:1f:68:11:db:25: b7:b6:bd:ce:bc:42:ba:32:44:d5:13:3b:c9:d8:bc:86:d7:5f: d1:2a:31:c9:aa:c9:1a:f4:bc:12:a2:03:e3:38:eb:dc:82:47: 90:db:8c:77:5d:6e:3f:72:26:b5:30:e4:ba:70:d2:48:f6:0b: 86:d6:99:99:35:df:a5:15:61:57:ed:ed:f6:36:b2:80:e3:38: c5:12:25:ff:a6:0f:e0:1d:78:be:d1:e6:b2:18:1d:34:78:e6: 65:4c:bc:70:8d:3b:ed:0a:1a:0a:19:b3:29:ee:f3:b8:7b:95: 5a:c0:5c:3f:09:17:e9:96:a8:90:b3:52:51:90:cb:fd:59:8d: f9:71:75:09:22:cc:88:53:d8:02:ef:8d:07:78:f4:8c:b2:87: 6e:43:fb:2d:83:33:19:c2:5e:70:97:e8:d0:72:54:ba:e8:8a: 2d:4d:ad:1b:6e:9c:76:31:f8:fd:67:f4:cb:ea:c9:5d:45:68: f7:7a:1e:ea:f7:0a:9d:66:cd:97:d3:f7:17:bc:6a:82:31:45: 90:f5:a2:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk5QkIxMTAvBgNVBAUTKDY1RjYxNjFDNzM2RDFBOUM0MTkxRkRGQ0M3QTRGODI0 Q0UxMTIzMkQwHhcNMjQxMTIyMjIyMzE1WhcNMjQxMTI5MjIyMzE1WjAYMRYwFAYD VQQDEw02NzQxMDQ1My1hYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRIvc12U8c54jn2vCfqyDBQVuHkNX9g3nIYcgzk8pEX5XM+54A5folTB0TCU neaXiWlPSlvG7a6mxJ3o6vedtGg9QvEooLndjCWBaf/+uHZ8JTpfEVohLACm2jlW nsfZK16RWgLASzvNDenxhCTYZOGFeJ1ufbU4fwL+WzcdlUJO36MLQlmXRPWrlZH1 jzeaJSuHJ6dBbumelBixXHWw2UDSoWQV2KyoEVV9//T2UJMBhE6Xp9o8NlXsIAfv jRzVQixEFseSFc/bLD+MnUw2SzheK4TJFS8qH574hE0wGNhXJRz5sd2OaKMjyF0j RrmbwKzIhpYV93WtfN8B/8Cj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbzll9d huk7OurRCjGrEu1OfywJMB8GA1UdIwQYMBaAFGX2FhxzbRqcQZH9/Mek+CTOESMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTlCQi84OEMyRjE1RTg4 NTgxMUVCOTZDRTY4MTdDNEY5QUUwMi9aZllXSEhOdEdweEJrZjM4eDZUNEpNNFJJ eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmWVdISE50R3B4QmtmMzh4NlQ0Sk00Ukl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTlCQi84OEMyRjE1RTg4NTgxMUVCOTZDRTY4MTdDNEY5QUUwMi9aZllXSEhOdEdw eEJrZjM4eDZUNEpNNFJJeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgEksioWEgB3goqyie5b4mYROZFEpk6f9IQTTT1pmrJgk+2wdXr13 q9PV1yUpVGR+H2gR2yW3tr3OvEK6MkTVEzvJ2LyG11/RKjHJqska9LwSogPjOOvc gkeQ24x3XW4/cia1MOS6cNJI9guG1pmZNd+lFWFX7e32NrKA4zjFEiX/pg/gHXi+ 0eayGB00eOZlTLxwjTvtChoKGbMp7vO4e5VawFw/CRfplqiQs1JRkMv9WY35cXUJ IsyIU9gC740HePSMsoduQ/stgzMZwl5wl+jQclS66IotTa0bbpx2Mfj9Z/TL6sld RWj3eh7q9wqdZs2X0/cXvGqCMUWQ9aJI -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org