$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: jnl8W49T1ewcdsmd19uecScD2/AHezd2bQmj2JKGNiM= Subject key identifier: 01:47:BE:BB:79:02:AB:5E:59:E6:76:AD:34:FE:94:47:89:1F:5A:31 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 0524 Signing time: Fri 22 Nov 2024 23:09:48 +0000 Manifest this update: Fri 22 Nov 2024 23:09:48 +0000 Manifest next update: Fri 29 Nov 2024 23:09:48 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: AiudwKLrmSAouP3t1V6nYoKXJPit/NnOH7lqZEbqwoM=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Nov 22 23:09:48 2024 GMT Not After : Nov 29 23:09:48 2024 GMT Subject: CN=67410f3c-1419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:38:a2:4e:f8:a1:90:1f:a0:f1:7b:c0:50: e0:b8:ba:fa:a5:be:88:09:d3:61:4f:31:61:aa:a2: 19:94:bf:d2:10:b5:f8:1c:57:3f:1d:d2:93:a6:1d: 80:52:be:92:74:a7:12:f2:72:c6:65:0b:58:c1:67: 37:a7:69:f8:de:03:f2:54:05:0c:0b:cb:5f:63:2e: 98:bd:50:0e:60:b3:65:26:cc:08:65:8b:d9:3c:0d: ab:c5:c3:5b:01:b8:47:08:a0:67:b9:0a:a9:d9:d3: 98:b5:5d:a8:a3:16:2b:5b:37:ef:c7:f8:36:67:4b: ac:8c:2e:f9:19:2a:69:8a:f4:78:68:f1:85:f6:d0: 21:fe:20:d8:df:ad:f2:b5:95:b7:91:38:2b:f9:e0: fe:22:61:31:90:14:89:11:6d:2d:63:dc:5f:99:08: c3:b7:69:34:49:6d:10:d7:79:d9:a0:45:fe:da:6d: 86:4d:e9:1a:f7:fb:b3:a5:f5:08:66:af:e7:20:7b: d7:92:84:f9:33:77:c2:98:94:56:5a:7b:e3:59:d3: 15:f2:6d:2f:28:14:06:97:53:15:81:bb:7f:1b:6d: b5:54:65:aa:79:c7:9b:6e:eb:2b:84:78:3c:fe:71: 08:7c:6d:87:57:3b:af:93:43:d4:8a:2a:5d:c8:1f: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:BE:BB:79:02:AB:5E:59:E6:76:AD:34:FE:94:47:89:1F:5A:31 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f9:f6:50:53:fc:49:ce:c6:2e:41:11:f5:4c:d2:c0:00:2c: 99:c8:31:0f:e8:0d:96:e0:fd:f3:1c:f2:d6:4b:c1:a3:f5:35: 09:ee:27:00:cf:1f:e9:5e:4a:89:b4:9f:6f:09:43:54:50:da: 37:58:2b:99:7e:22:ff:b5:d8:4c:74:79:99:50:c1:f8:b0:7b: 58:30:f9:a7:3f:88:ff:0e:a4:e9:7e:67:57:18:f1:0b:40:ad: 13:02:19:e9:14:b5:52:dc:3b:1a:6d:97:d6:29:2e:5d:f3:42: eb:00:ef:77:fd:b3:e0:09:af:9f:3b:22:03:29:48:81:d5:de: 86:aa:24:dc:5c:17:bd:9d:06:5e:7f:39:c4:aa:a4:c4:11:8d: 1f:ac:f3:39:7b:a4:5c:df:64:3d:bb:3f:df:00:18:12:c4:f3: 6f:7b:63:da:48:40:1f:8b:6c:4c:5f:09:12:16:f7:fd:0f:73: 4c:c1:ea:fb:af:cc:8e:0c:bf:bd:99:bd:a9:d3:c2:45:41:bc: 85:ae:29:22:cb:05:f6:3f:32:31:68:1f:5e:65:8f:04:f8:ce: 3d:91:9a:07:f7:ad:06:28:52:ab:6e:9c:5a:ba:37:f3:c9:3b: 0a:43:ae:18:92:9e:89:e9:c4:3a:32:95:82:a3:b3:c1:23:a2: 97:a8:2a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjQxMTIyMjMwOTQ4WhcNMjQxMTI5MjMwOTQ4WjAYMRYwFAYD VQQDEw02NzQxMGYzYy0xNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCY4ok74oZAfoPF7wFDguLr6pb6ICdNhTzFhqqIZlL/SELX4HFc/HdKTph2A Ur6SdKcS8nLGZQtYwWc3p2n43gPyVAUMC8tfYy6YvVAOYLNlJswIZYvZPA2rxcNb AbhHCKBnuQqp2dOYtV2ooxYrWzfvx/g2Z0usjC75GSppivR4aPGF9tAh/iDY363y tZW3kTgr+eD+ImExkBSJEW0tY9xfmQjDt2k0SW0Q13nZoEX+2m2GTeka9/uzpfUI Zq/nIHvXkoT5M3fCmJRWWnvjWdMV8m0vKBQGl1MVgbt/G221VGWqecebbusrhHg8 /nEIfG2HVzuvk0PUiipdyB+GoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFHvrt5 AqteWeZ2rTT+lEeJH1oxMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/+fZQU/xJzsYuQRH1TNLAACyZyDEP6A2W4P3zHPLWS8Gj9TUJ7icA zx/pXkqJtJ9vCUNUUNo3WCuZfiL/tdhMdHmZUMH4sHtYMPmnP4j/DqTpfmdXGPEL QK0TAhnpFLVS3DsabZfWKS5d80LrAO93/bPgCa+fOyIDKUiB1d6GqiTcXBe9nQZe fznEqqTEEY0frPM5e6Rc32Q9uz/fABgSxPNve2PaSEAfi2xMXwkSFvf9D3NMwer7 r8yODL+9mb2p08JFQbyFrikiywX2PzIxaB9eZY8E+M49kZoH960GKFKrbpxaujfz yTsKQ64Ykp6J6cQ6MpWCo7PBI6KXqCrq -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org