$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: iFSHkZT5GH1UqnUnjKpeXI9CPtXddE2wuL0wyz9210Y= Subject key identifier: 84:6B:BC:B0:08:93:71:9E:F1:F4:DA:85:EC:A3:2A:2A:92:BE:AA:21 Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 0182 Signing time: Sat 23 Nov 2024 02:00:48 +0000 Manifest this update: Sat 23 Nov 2024 02:00:48 +0000 Manifest next update: Sat 30 Nov 2024 02:00:48 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: PalldOvaSfCS6CNjIg5012ZDnRTtbFK1ftp1oYm7kWc=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: 142xVbcZ3GeGLp8Rd6SuyuN/pBZCXBBhtE27OphHCOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Nov 23 02:00:48 2024 GMT Not After : Nov 30 02:00:48 2024 GMT Subject: CN=67413750-8254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:9b:2a:db:bf:f2:c9:48:0d:cd:c5:c0:5a: f9:1f:b7:ca:5f:4a:b3:01:f7:c3:43:a0:5e:cf:f0: fd:00:e8:a0:ac:0b:c9:02:7f:9a:ce:85:83:49:74: c3:bd:6a:e9:d7:50:22:7e:f5:13:7f:c9:3a:e0:75: 02:ab:bf:c4:a2:af:a0:f5:49:c9:6b:61:bf:c3:2b: 87:68:64:1a:55:70:39:b3:01:8e:c4:c3:7f:58:d8: 6f:50:42:fa:43:74:d9:1c:f6:2a:f8:8b:de:84:54: 42:b7:bc:b9:67:ba:41:f9:5c:97:75:8e:1b:5d:3a: 01:cd:8a:c6:8a:f5:2b:0a:55:60:7a:65:74:03:7f: 8e:b4:4d:74:af:ee:8c:f0:65:e0:b4:49:d0:5a:7e: 92:69:d3:0f:67:0e:3d:e2:88:c5:30:d9:49:cb:12: d9:70:56:85:48:13:de:a1:74:fb:62:fd:cf:50:f1: e7:de:48:f6:c8:04:5e:78:82:49:bc:3d:51:3e:cd: dc:4e:da:98:bd:db:42:b2:82:2c:97:54:1f:42:4c: 3a:d2:53:be:14:d6:a0:dd:21:27:1b:71:11:b6:8c: 1c:c1:83:0e:33:f9:21:10:b6:35:47:22:0c:e9:ba: 3b:67:75:5a:f5:18:08:0d:cf:7d:fa:a4:f2:be:b1: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6B:BC:B0:08:93:71:9E:F1:F4:DA:85:EC:A3:2A:2A:92:BE:AA:21 X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:25:66:0a:6e:b6:9f:78:e7:8b:00:8f:05:80:dd:62:06: 49:72:62:3e:aa:22:d6:44:9c:a0:5d:ec:6e:8c:7a:5e:69:6c: d8:be:28:d6:26:25:47:d0:2b:73:7a:b6:b8:55:9f:d0:b8:15: 7a:df:d0:c2:f1:ba:d5:3f:1c:88:c5:a6:dd:fa:1a:1b:03:9e: 81:3b:7f:61:11:b4:2b:cf:95:29:e4:42:ba:24:df:68:f2:db: 3a:3a:ad:90:bc:b2:f8:f0:8d:e8:c0:42:96:1c:67:03:ab:73: 29:58:5d:de:50:93:46:61:30:fe:54:61:f1:e1:6f:9f:ab:91: 13:c5:60:f5:b0:9f:db:e6:47:1b:af:a9:95:6f:2e:5d:9e:31: 3d:1f:02:a6:1b:99:05:f8:67:7e:95:ed:2f:35:2e:a9:31:15: 24:7c:b4:8b:cc:e3:a9:d8:8b:fc:fb:67:38:72:2e:ee:d9:05: 39:6f:57:53:07:0b:b8:d9:0c:62:e5:3c:3b:00:de:08:1a:d5: 37:63:31:ee:cb:bc:03:38:73:9c:e9:65:8d:3f:00:b0:77:49: 04:a6:11:1c:92:28:c1:ef:77:d4:4b:47:8b:04:e0:e7:a3:19: 7c:fe:fc:be:ed:38:58:2d:44:af:1f:ff:25:61:74:0a:a4:b3: 27:61:08:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjQxMTIzMDIwMDQ4WhcNMjQxMTMwMDIwMDQ4WjAYMRYwFAYD VQQDEw02NzQxMzc1MC04MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpKbKtu/8slIDc3FwFr5H7fKX0qzAffDQ6Bez/D9AOigrAvJAn+azoWDSXTD vWrp11AifvUTf8k64HUCq7/Eoq+g9UnJa2G/wyuHaGQaVXA5swGOxMN/WNhvUEL6 Q3TZHPYq+IvehFRCt7y5Z7pB+VyXdY4bXToBzYrGivUrClVgemV0A3+OtE10r+6M 8GXgtEnQWn6SadMPZw494ojFMNlJyxLZcFaFSBPeoXT7Yv3PUPHn3kj2yAReeIJJ vD1RPs3cTtqYvdtCsoIsl1QfQkw60lO+FNag3SEnG3ERtowcwYMOM/khELY1RyIM 6bo7Z3Va9RgIDc99+qTyvrHrYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRrvLAI k3Ge8fTaheyjKiqSvqohMB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKiVmCm62n3jniwCPBYDdYgZJcmI+qiLWRJygXexujHpeaWzYvijW JiVH0Ctzera4VZ/QuBV639DC8brVPxyIxabd+hobA56BO39hEbQrz5Up5EK6JN9o 8ts6Oq2QvLL48I3owEKWHGcDq3MpWF3eUJNGYTD+VGHx4W+fq5ETxWD1sJ/b5kcb r6mVby5dnjE9HwKmG5kF+Gd+le0vNS6pMRUkfLSLzOOp2Iv8+2c4ci7u2QU5b1dT Bwu42Qxi5Tw7AN4IGtU3YzHuy7wDOHOc6WWNPwCwd0kEphEckijB73fUS0eLBODn oxl8/vy+7ThYLUSvH/8lYXQKpLMnYQht -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org