$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: aNTIjMCVKX/q7QqyVZJ1c/BT9DsBPoHP/ksl45FtucQ= Subject key identifier: 6A:C9:9E:E2:A9:64:B2:DB:E1:7C:18:A7:7B:D0:04:D9:95:4A:85:BD Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0F51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0F40 Signing time: Sun 24 Nov 2024 17:25:49 +0000 Manifest this update: Sun 24 Nov 2024 17:25:48 +0000 Manifest next update: Sun 01 Dec 2024 17:25:48 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: wimD7BZwsiMSzoxoy9JygU3U3oZWEJKx3fki2aSHOEU=) 2: 4DF4371066B111E98B2CD954C4F9AE02.roa (hash: wnwOcdr/H0vin2k8D2HczrFn5eNuey06OLgo+xwiEHw=) 3: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (hash: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3921 (0xf51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Nov 24 17:25:48 2024 GMT Not After : Dec 1 17:25:48 2024 GMT Subject: CN=6743619c-b48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:56:e6:75:6a:88:a5:d4:b2:f5:5a:ff:54: 6e:ad:6a:41:4e:b9:67:91:6f:55:de:9e:92:4d:b8: 70:da:31:cf:a4:84:0b:26:fd:04:d6:7c:41:c8:21: 92:f2:bf:f7:a4:f1:ce:4f:6d:b2:4e:f4:18:ba:3b: 6b:ad:21:26:9f:62:ba:7a:3a:82:65:2e:38:ea:39: 82:bf:38:fa:07:25:7e:c7:0f:89:1d:91:7d:03:5c: 22:82:e1:5f:76:9b:80:78:a2:18:96:b1:0b:27:ac: e6:6c:b7:ec:aa:d3:82:17:2a:77:2a:f2:8c:19:3c: 28:2c:46:f5:82:e0:f4:e0:2c:eb:83:54:86:e1:46: 37:cc:e7:cd:f8:c8:83:b3:fd:f7:e4:4e:91:f1:6c: af:03:85:11:76:5f:f8:ca:60:4f:4e:f3:d8:82:f8: 51:a6:3c:4d:44:3a:e5:29:69:32:56:db:08:61:58: d3:23:2d:a7:7a:d5:d7:1f:60:94:32:b6:d9:4f:86: b7:84:36:83:2c:b0:3b:0f:54:69:40:a9:42:41:70: 2f:bf:4c:15:89:c6:af:fc:77:3f:75:5a:59:53:91: 23:37:00:60:a1:9d:fc:14:e9:53:82:8b:22:24:e1: 2f:a5:b1:27:90:49:77:02:23:74:3c:27:6a:70:e6: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C9:9E:E2:A9:64:B2:DB:E1:7C:18:A7:7B:D0:04:D9:95:4A:85:BD X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:98:a6:4c:8e:b2:f4:9f:4c:38:f7:ff:c5:81:83:20:f9: e5:c5:24:70:c1:35:6f:03:fe:55:dd:3f:64:88:ab:46:73:a9: 42:6c:17:50:4e:e5:57:0d:54:6a:a7:28:ac:5f:d5:92:8f:88: 3f:f4:b6:e6:a8:6d:0c:fc:6d:3f:90:4f:0e:b5:83:9f:39:e6: 8d:05:8d:3e:21:0d:43:61:b0:11:53:88:64:ae:92:44:50:3e: f0:d9:81:29:43:46:2a:a4:66:26:d4:ea:5f:c9:3e:ce:e0:c3: 89:9d:2e:36:8b:59:ed:4e:91:56:9b:56:28:4b:19:8d:dc:a2: 53:b0:26:f6:5f:1f:52:5f:aa:71:5d:1a:67:ef:6e:8f:e2:db: 73:5d:9a:c7:0e:4c:c1:5d:fb:90:31:83:e9:e9:8d:48:3b:41: d7:64:dd:3d:7c:a5:7a:0a:5e:e4:3f:c6:4e:80:de:f7:c0:5b: 1e:8d:0b:ac:92:49:b5:0d:27:55:66:0b:8b:c7:c1:8f:e2:de: 7f:ef:80:84:81:92:7f:42:3b:47:ac:3e:62:86:85:80:83:02: 27:67:a8:03:36:f0:aa:01:b0:41:8b:63:6f:2c:e7:4f:c0:28: a0:62:c4:d4:ae:9c:87:77:dc:e8:19:5f:cb:b7:38:ab:a6:d9: 56:84:71:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjQxMTI0MTcyNTQ4WhcNMjQxMjAxMTcyNTQ4WjAYMRYwFAYD VQQDEw02NzQzNjE5Yy1iNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsptW5nVqiKXUsvVa/1RurWpBTrlnkW9V3p6STbhw2jHPpIQLJv0E1nxByCGS 8r/3pPHOT22yTvQYujtrrSEmn2K6ejqCZS446jmCvzj6ByV+xw+JHZF9A1wiguFf dpuAeKIYlrELJ6zmbLfsqtOCFyp3KvKMGTwoLEb1guD04Czrg1SG4UY3zOfN+MiD s/335E6R8WyvA4URdl/4ymBPTvPYgvhRpjxNRDrlKWkyVtsIYVjTIy2netXXH2CU MrbZT4a3hDaDLLA7D1RpQKlCQXAvv0wVicav/Hc/dVpZU5EjNwBgoZ38FOlTgosi JOEvpbEnkEl3AiN0PCdqcOZePQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrJnuKp ZLLb4XwYp3vQBNmVSoW9MB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACjJimTI6y9J9MOPf/xYGDIPnlxSRwwTVvA/5V3T9kiKtGc6lCbBdQ TuVXDVRqpyisX9WSj4g/9LbmqG0M/G0/kE8OtYOfOeaNBY0+IQ1DYbARU4hkrpJE UD7w2YEpQ0YqpGYm1OpfyT7O4MOJnS42i1ntTpFWm1YoSxmN3KJTsCb2Xx9SX6px XRpn726P4ttzXZrHDkzBXfuQMYPp6Y1IO0HXZN09fKV6Cl7kP8ZOgN73wFsejQus kkm1DSdVZguLx8GP4t5/74CEgZJ/QjtHrD5ihoWAgwInZ6gDNvCqAbBBi2NvLOdP wCigYsTUrpyHd9zoGV/LtzirptlWhHGn -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:52 2024 by rpki-client on console-ams.rpki-client.org