$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: omcQVn9d/7ndWRfHiKslTizGdjreHeHRh0ApGBQOLlA= Subject key identifier: D0:1F:00:D5:AC:B8:F0:5C:38:3B:0A:22:73:68:E9:27:78:4D:D5:46 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 0163 Signing time: Sat 23 Nov 2024 02:21:18 +0000 Manifest this update: Sat 23 Nov 2024 02:21:17 +0000 Manifest next update: Sat 30 Nov 2024 02:21:17 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: weOmiIAlHt5jun54LWePtvQCXz5WAC5xH8oACzod8Ns=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: 4hy1f5KhPhwHVnBrwdKHHsp/qGx5VbOvDT16foHwuRM=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: l3pw7Z4d1Nkw0APH0xp6K2791IsFOtCcx1C4farScNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 23 02:21:17 2024 GMT Not After : Nov 30 02:21:17 2024 GMT Subject: CN=67413c1d-0ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:15:fb:aa:d9:ef:7e:98:07:eb:2e:2f:af: d8:73:57:59:29:68:f9:b0:10:44:2b:f8:1b:54:ea: 75:7e:10:39:4e:b8:da:89:b4:3c:6b:3b:39:78:40: 06:a9:f3:b2:2f:32:7d:79:cf:d1:49:27:a4:54:65: c6:57:73:b7:0a:98:8c:dd:7d:4c:c1:5a:f0:76:24: 5c:5c:d2:0b:72:36:ed:b6:2c:e6:70:90:50:eb:80: 19:83:d0:de:77:fb:36:00:c0:ed:16:59:95:2c:19: cf:15:df:df:4f:b1:34:12:78:bf:cb:ab:1b:02:2a: e4:32:38:12:d7:da:08:a2:c7:51:83:01:7a:ca:96: bc:28:4f:10:5f:20:1a:26:e0:09:37:cf:6e:05:d6: b8:ab:f3:f0:e7:68:1d:44:f6:17:1c:c2:d3:d6:d2: f3:98:1e:55:61:47:de:6f:b6:a3:e9:e2:f3:f9:8e: b5:02:57:42:d3:36:4e:2a:5b:1a:d5:96:63:0d:29: 0c:28:e4:00:5d:7b:b5:4b:c9:22:ab:17:a6:b6:7b: b6:0b:68:f9:c8:1b:52:57:9d:00:cb:57:55:97:ff: c0:66:b1:ee:fa:8f:f9:bb:d5:11:7b:be:d9:49:64: b9:24:e6:6a:83:14:34:08:db:78:bb:c0:7a:a2:56: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1F:00:D5:AC:B8:F0:5C:38:3B:0A:22:73:68:E9:27:78:4D:D5:46 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:59:f1:82:0f:84:37:36:1d:cd:63:d6:43:78:86:9b:92:0d: 91:13:de:96:2d:ba:c3:2c:43:96:ce:7b:cd:7d:35:26:fa:ed: 3a:9c:98:38:b2:b8:98:3a:2a:5a:9a:ed:26:3e:0f:56:fa:12: 4d:50:30:1f:24:61:f5:5b:db:7f:50:07:5f:4a:2a:cf:a3:c5: d0:27:db:18:62:08:73:55:df:b5:65:be:4f:ce:15:33:07:25: ec:1c:78:e9:f8:c9:80:90:3a:2a:a5:ff:57:6a:52:53:89:18: f8:ea:88:90:a5:97:54:9f:48:40:c3:0e:70:54:a7:b3:27:d4: e4:8b:d1:63:8c:73:5c:dc:97:39:3a:e6:38:09:23:5c:4e:3f: 5d:a1:a6:dd:ce:01:82:bd:a9:dc:a6:09:68:81:3a:c8:e1:d9: b2:61:33:6b:5a:af:8e:66:31:a0:76:01:8c:4b:48:82:a7:e5: 44:38:d3:70:1d:7d:5e:9f:78:38:67:f9:e0:a7:32:ba:61:90: de:6b:73:24:bd:9a:89:3f:96:54:ea:70:4e:a5:df:f1:cb:55: ad:3d:c6:75:77:c0:ce:cd:97:8f:5a:a0:73:0b:e8:f6:96:e4: a6:ee:cc:74:ef:7e:db:13:63:f1:8f:96:cd:5e:5c:b8:cf:95: 7f:4f:f9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjQxMTIzMDIyMTE3WhcNMjQxMTMwMDIyMTE3WjAYMRYwFAYD VQQDEw02NzQxM2MxZC0wZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYoV+6rZ736YB+suL6/Yc1dZKWj5sBBEK/gbVOp1fhA5TrjaibQ8azs5eEAG qfOyLzJ9ec/RSSekVGXGV3O3CpiM3X1MwVrwdiRcXNILcjbttizmcJBQ64AZg9De d/s2AMDtFlmVLBnPFd/fT7E0Eni/y6sbAirkMjgS19oIosdRgwF6ypa8KE8QXyAa JuAJN89uBda4q/Pw52gdRPYXHMLT1tLzmB5VYUfeb7aj6eLz+Y61AldC0zZOKlsa 1ZZjDSkMKOQAXXu1S8kiqxemtnu2C2j5yBtSV50Ay1dVl//AZrHu+o/5u9URe77Z SWS5JOZqgxQ0CNt4u8B6olYAKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAfANWs uPBcODsKInNo6Sd4TdVGMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGWfGCD4Q3Nh3NY9ZDeIabkg2RE96WLbrDLEOWznvNfTUm+u06nJg4 sriYOipamu0mPg9W+hJNUDAfJGH1W9t/UAdfSirPo8XQJ9sYYghzVd+1Zb5PzhUz ByXsHHjp+MmAkDoqpf9XalJTiRj46oiQpZdUn0hAww5wVKezJ9Tki9FjjHNc3Jc5 OuY4CSNcTj9doabdzgGCvancpglogTrI4dmyYTNrWq+OZjGgdgGMS0iCp+VEONNw HX1en3g4Z/ngpzK6YZDea3MkvZqJP5ZU6nBOpd/xy1WtPcZ1d8DOzZePWqBzC+j2 luSm7sx0737bE2Pxj5bNXly4z5V/T/mg -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org