$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: CD+3KJ7ypPGQxB2jIDZH18H9lxARG015KHWpSceHSVI= Subject key identifier: 2F:16:BF:7B:AA:51:AB:0D:1A:13:9C:5D:8A:2A:EB:B2:1F:0E:1E:34 Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 05D6 Signing time: Fri 22 Nov 2024 22:31:16 +0000 Manifest this update: Fri 22 Nov 2024 22:31:16 +0000 Manifest next update: Fri 29 Nov 2024 22:31:16 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: +Nvr/p3FCRc4ao7UUwSng69qXIRJJaDh0Rkh4HfYMBQ=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: xxTbwjHg1QikAjf8vr4+JJb23plKRbhPg2PJNBw2Jn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: Nov 22 22:31:16 2024 GMT Not After : Nov 29 22:31:16 2024 GMT Subject: CN=67410634-4107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:81:18:25:08:9c:8f:ae:f1:f2:1a:a4:c5: 47:58:61:24:5b:1f:d2:18:46:6a:5d:d2:bb:c4:c7: 88:91:c3:33:fb:40:9d:7c:96:ea:28:43:39:2a:3e: b8:74:95:c3:98:0e:7f:27:98:48:b9:9d:84:57:6a: 25:09:a6:af:b9:e2:f5:7e:51:ff:51:2b:90:e3:9d: ab:e6:a7:77:95:36:99:99:2d:da:6f:27:30:a0:8c: 7f:d6:b4:36:0a:c7:45:a6:9f:fb:ef:82:a4:b2:17: ec:c7:e1:81:96:86:4b:04:f0:07:ca:69:a9:db:84: 06:03:2e:57:ea:09:dd:94:a6:56:e4:6e:4c:d2:2e: 9c:41:7c:90:d2:7f:bc:f8:64:a7:91:b2:0a:2c:1e: 86:d8:81:37:65:08:70:23:21:3e:da:92:bb:3a:cf: 2a:20:30:92:b9:15:a7:e2:8a:66:29:e8:95:e9:3c: 57:a6:bf:5f:37:7d:21:c5:42:42:18:a2:e0:81:60: 82:34:e7:00:a4:ee:c5:6f:11:13:57:d6:38:fc:b0: 6e:04:69:b2:49:16:61:fd:ca:8c:03:3c:d0:d2:43: b2:e1:3b:c9:ae:b8:2f:12:e4:80:12:47:cd:56:69: 68:4a:20:8c:8e:15:63:ab:1d:61:1a:9d:97:45:ac: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:BF:7B:AA:51:AB:0D:1A:13:9C:5D:8A:2A:EB:B2:1F:0E:1E:34 X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:13:b5:03:ea:5b:00:59:56:5f:61:48:28:83:ef:59:7c:1d: b8:5d:d8:3c:77:17:9f:34:a1:a9:e1:7b:51:cd:86:68:03:bf: 1d:16:1e:48:ec:ca:4e:20:cc:fe:53:04:39:95:02:1c:c3:18: 9a:b5:f8:f4:4b:12:fd:bb:f4:71:08:86:6b:f4:93:d8:25:be: 1f:3f:14:bb:35:c2:f9:8c:a3:36:14:c5:6e:ab:3d:bb:db:b4: f8:ab:31:84:08:e4:7c:29:95:51:36:ec:1b:3e:71:86:3a:c0: 3f:c8:00:d9:62:46:f2:b9:1c:bc:6d:ce:b6:1a:a3:43:31:b5: 25:80:51:20:17:36:7c:d7:17:ea:5c:6e:d1:c2:fe:b2:da:32: 19:9c:16:b8:70:47:22:fe:df:c3:01:d0:f5:20:40:41:9a:29: 06:33:f5:0d:d9:d6:8d:4b:3d:92:4b:4c:a5:bc:52:47:07:3b: 4b:46:e6:9e:d8:ed:84:84:39:56:17:61:fa:ee:af:53:da:55: 0d:d9:f4:04:4f:4d:61:5f:46:79:b6:e2:d6:62:9a:5b:6d:4b: 20:63:a9:63:69:d8:77:f9:ba:d0:37:35:4f:7e:30:db:1d:e0: b0:6c:8f:0a:34:75:88:36:1e:cd:05:ab:06:40:68:a0:57:38: a2:1f:e1:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjQxMTIyMjIzMTE2WhcNMjQxMTI5MjIzMTE2WjAYMRYwFAYD VQQDEw02NzQxMDYzNC00MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0yBGCUInI+u8fIapMVHWGEkWx/SGEZqXdK7xMeIkcMz+0CdfJbqKEM5Kj64 dJXDmA5/J5hIuZ2EV2olCaavueL1flH/USuQ452r5qd3lTaZmS3abycwoIx/1rQ2 CsdFpp/774Kkshfsx+GBloZLBPAHymmp24QGAy5X6gndlKZW5G5M0i6cQXyQ0n+8 +GSnkbIKLB6G2IE3ZQhwIyE+2pK7Os8qIDCSuRWn4opmKeiV6TxXpr9fN30hxUJC GKLggWCCNOcApO7FbxETV9Y4/LBuBGmySRZh/cqMAzzQ0kOy4TvJrrgvEuSAEkfN VmloSiCMjhVjqx1hGp2XRawa5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8Wv3uq UasNGhOcXYoq67IfDh40MB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtE7UD6lsAWVZfYUgog+9ZfB24Xdg8dxefNKGp4XtRzYZoA78dFh5I 7MpOIMz+UwQ5lQIcwxiatfj0SxL9u/RxCIZr9JPYJb4fPxS7NcL5jKM2FMVuqz27 27T4qzGECOR8KZVRNuwbPnGGOsA/yADZYkbyuRy8bc62GqNDMbUlgFEgFzZ81xfq XG7Rwv6y2jIZnBa4cEci/t/DAdD1IEBBmikGM/UN2daNSz2SS0ylvFJHBztLRuae 2O2EhDlWF2H67q9T2lUN2fQET01hX0Z5tuLWYppbbUsgY6ljadh3+brQNzVPfjDb HeCwbI8KNHWINh7NBasGQGigVziiH+HF -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:32 2024 by rpki-client on console-fra.rpki-client.org