$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: XVKipp4fjQpwRiIpW6KmHeAF7qWGKQQR9UhPw9tsM6g= Subject key identifier: 81:7A:AC:1C:61:96:E9:92:53:E0:81:44:07:C8:31:EA:68:FE:A4:FE Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: 23 Signing time: Sat 23 Nov 2024 05:45:19 +0000 Manifest this update: Sat 23 Nov 2024 05:45:18 +0000 Manifest next update: Sat 30 Nov 2024 05:45:18 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: M6/XlGXyps26eMinBu/i3tfFGO2cKT0hvfJ817xOZlg=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: dzWi4sOLyrk+Z9rQ/p2wnjoYw1tNJYcoqxBuYKWjT/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Nov 23 05:45:18 2024 GMT Not After : Nov 30 05:45:18 2024 GMT Subject: CN=67416bef-5f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:e0:1d:30:e8:b3:5d:2d:0d:a2:c1:88:5e: f7:e1:21:2c:9d:3a:d4:97:39:7b:83:b5:3f:14:99: da:1d:b7:96:30:fb:27:32:0b:24:72:0b:7d:62:bc: f8:5f:75:87:29:a4:40:f7:bf:c8:16:cb:61:84:8e: c7:7a:7e:9b:94:ac:55:68:6c:c8:77:70:f2:d7:1c: a0:a6:61:29:95:28:e7:76:f8:f7:fe:1b:02:26:4e: 9f:b2:d3:a1:a9:86:dc:67:f9:8f:17:bc:74:62:89: 67:fb:1b:b6:48:3a:4f:ba:5b:6c:8f:da:1b:d7:de: 49:a6:da:80:27:a3:2b:d2:b4:c4:67:f0:90:0b:1e: 69:62:93:94:6a:6a:a6:5c:e1:bf:06:fa:4c:7f:7f: fd:20:5c:cc:73:2b:88:a2:a5:88:e6:42:9c:29:d9: a3:57:ef:a5:95:ff:30:bf:f5:a9:7d:42:b6:92:d7: 2e:8d:48:44:73:dc:d4:6f:71:6f:6e:2b:53:a6:b7: d6:c5:08:2e:a8:aa:5a:39:8b:e8:97:db:1e:66:cb: 68:0a:69:17:1e:94:51:c0:92:5c:47:14:00:f8:58: 93:eb:1c:30:a0:b2:02:aa:64:a1:6e:d9:7a:15:76: d8:c7:f8:d8:b6:5e:24:15:1c:71:03:ee:61:04:df: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:AC:1C:61:96:E9:92:53:E0:81:44:07:C8:31:EA:68:FE:A4:FE X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b4:2a:bd:8a:37:46:d4:4f:c2:4e:a9:ba:12:57:0b:cc:f5: c5:87:b8:86:21:b9:a6:4e:6b:6d:19:fc:b0:88:a8:14:49:5b: be:56:53:0e:76:94:8a:1b:f2:54:3d:a0:69:66:c5:05:a6:36: e6:1b:35:5b:54:2c:d4:2d:f3:29:7e:21:bb:84:00:d0:52:dd: 3f:2c:a6:a8:9b:0c:3f:5f:10:ea:3f:bf:c7:7b:49:91:89:10: 4b:dd:72:2f:f6:34:a6:5a:dc:90:2e:1c:38:f1:90:c3:fd:b9: 75:56:09:5d:ba:d7:eb:1f:37:32:5d:70:fc:60:c7:41:47:e3: 34:81:65:55:13:d4:72:35:1c:e1:14:b0:c7:c5:bd:6b:6c:2b: 55:00:53:0d:74:0d:f5:0d:9c:ee:9e:58:74:42:29:31:62:90: 37:6c:27:4f:05:41:dd:b1:87:ab:30:29:0e:32:24:67:01:5c: 17:1c:a3:0a:ba:99:a1:ff:de:4b:7d:3b:3a:28:04:69:1b:30: 2f:d3:76:39:91:15:b5:ea:81:11:f8:39:d8:91:8d:25:bb:18: 79:af:dc:f1:8a:30:e8:35:7c:2c:27:94:cc:ac:2b:65:b2:6e: 45:fd:26:9d:45:14:92:25:da:1b:e1:e9:bc:54:db:1b:75:db: ce:49:0e:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Rjc1OTExMC8GA1UEBRMoNjQxMEIzNUFEMUE4RTkxRkVCRDg1QjQ0Mzc2NjhDMkE2 OURBQTdEQTAeFw0yNDExMjMwNTQ1MThaFw0yNDExMzAwNTQ1MThaMBgxFjAUBgNV BAMTDTY3NDE2YmVmLTVmMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGx+AdMOizXS0NosGIXvfhISydOtSXOXuDtT8Umdodt5Yw+ycyCyRyC31ivPhf dYcppED3v8gWy2GEjsd6fpuUrFVobMh3cPLXHKCmYSmVKOd2+Pf+GwImTp+y06Gp htxn+Y8XvHRiiWf7G7ZIOk+6W2yP2hvX3kmm2oAnoyvStMRn8JALHmlik5RqaqZc 4b8G+kx/f/0gXMxzK4iipYjmQpwp2aNX76WV/zC/9al9QraS1y6NSERz3NRvcW9u K1Omt9bFCC6oqlo5i+iX2x5my2gKaRcelFHAklxHFAD4WJPrHDCgsgKqZKFu2XoV dtjH+Ni2XiQVHHED7mEE3xJLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgXqsHGGW 6ZJT4IFEB8gx6mj+pP4wHwYDVR0jBBgwFoAUZBCzWtGo6R/r2FtEN2aMKmnap9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNzU5LzEwNkNGRDY0NzZE NzExRUZBODRBNDcxMkM0RjlBRTAyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkJDeld0R282Ul9yMkZ0RU4yYU1LbW5hcDlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NzU5LzEwNkNGRDY0NzZENzExRUZBODRBNDcxMkM0RjlBRTAyL1pCQ3pXdEdvNlJf cjJGdEVOMmFNS21uYXA5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIa0Kr2KN0bUT8JOqboSVwvM9cWHuIYhuaZOa20Z/LCIqBRJW75WUw52 lIob8lQ9oGlmxQWmNuYbNVtULNQt8yl+IbuEANBS3T8spqibDD9fEOo/v8d7SZGJ EEvdci/2NKZa3JAuHDjxkMP9uXVWCV261+sfNzJdcPxgx0FH4zSBZVUT1HI1HOEU sMfFvWtsK1UAUw10DfUNnO6eWHRCKTFikDdsJ08FQd2xh6swKQ4yJGcBXBccowq6 maH/3kt9OzooBGkbMC/TdjmRFbXqgRH4OdiRjSW7GHmv3PGKMOg1fCwnlMysK2Wy bkX9Jp1FFJIl2hvh6bxU2xt1285JDng= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org