$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: qB1TiVFvnrpkKMp/Crt74Pd8xq80C+oIltlpuWi6Kwo= Subject key identifier: 41:8D:A9:85:C5:5B:53:C7:C7:FC:F4:D0:50:C7:3E:6D:DB:43:9D:CB Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: B4 Signing time: Sat 23 Nov 2024 04:06:42 +0000 Manifest this update: Sat 23 Nov 2024 04:06:42 +0000 Manifest next update: Sat 30 Nov 2024 04:06:42 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: xKzQwm0lFBGIEMfyzQXhp+XyGrOJQGilA4/OrWI33LM=) 2: 1CFF4196D25D11EE8265DF1BC4F9AE02.roa (hash: VgrMolXlnMmBdnFruJODhCZjJyPACP+Qk3+uCDVN0dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Nov 23 04:06:42 2024 GMT Not After : Nov 30 04:06:42 2024 GMT Subject: CN=674154d2-6a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:be:84:a1:76:33:16:f3:47:cb:31:11:17:1a: 50:c6:f1:23:a2:8f:a3:97:7f:4e:a8:1a:63:c2:8c: 17:f1:bf:48:ca:c0:b5:66:5a:4d:56:69:ef:46:9a: 8d:1d:00:2d:08:bd:9a:b7:83:45:fa:84:ef:54:26: f3:12:d7:5b:e9:a9:d6:26:16:f3:13:a7:09:28:a3: c9:17:c2:07:99:f6:3a:57:c1:3e:71:91:53:72:a5: 46:91:7c:b7:8f:f2:b1:b3:81:95:2d:2e:bd:f7:a1: 98:1d:15:f4:25:f0:c9:65:4c:ad:3e:15:ec:7f:3a: fa:6c:c5:b5:59:c7:ec:0e:07:a6:20:93:46:72:4a: c5:29:21:e7:e6:82:1a:1f:0f:89:92:bc:91:57:97: e8:59:af:c8:39:01:d4:0a:56:52:1e:3e:2c:3f:e5: a7:91:be:92:e8:6d:db:a4:c1:aa:40:65:08:25:60: 55:ed:ef:62:b2:a2:1a:62:de:ea:e4:4d:2e:c5:31: 50:23:0e:e8:a3:dd:d8:4b:70:2b:bc:a6:79:b6:64: 07:25:6d:e4:89:fe:ae:14:38:12:37:23:af:20:d0: 51:31:0f:89:3c:ac:71:8d:c0:37:71:fd:dc:a2:31: 7d:64:91:6d:7e:de:21:30:f0:20:b3:76:09:97:9f: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:A9:85:C5:5B:53:C7:C7:FC:F4:D0:50:C7:3E:6D:DB:43:9D:CB X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e1:37:e5:b8:9f:00:c4:e5:ed:36:7e:dc:a2:aa:34:75:cf: 9e:f7:8b:d2:90:07:23:13:f1:63:d8:cb:6f:54:47:48:9d:af: 39:1e:04:77:5a:c3:d0:e9:6e:35:7a:9b:10:d8:f6:dc:f7:f4: 1f:61:c2:58:39:af:98:61:10:38:ed:0f:bf:7a:08:0f:06:6a: fe:cb:84:53:df:7b:a8:a2:dd:55:51:43:53:84:88:dd:27:81: bb:9a:f1:29:73:a9:ba:d1:97:15:1e:e9:d4:39:55:2c:9d:80: f0:b6:70:cd:43:98:9c:62:72:3e:12:35:38:1e:f3:b4:46:fd: cf:e9:56:46:3a:61:50:84:71:1a:7e:cd:04:aa:56:10:a5:fb: 19:b2:ab:f4:a3:ee:77:38:15:21:b5:af:0d:ba:85:77:20:f8: fd:da:48:3e:b9:aa:7d:1f:a5:5d:c2:c7:b2:4d:5d:2f:03:42: a0:e3:73:23:56:2f:46:a1:64:4b:d8:62:07:ae:87:26:60:93: df:31:af:d2:70:2d:a5:b9:41:a6:31:21:8d:c0:60:65:dc:ef: 3b:55:27:af:3b:44:7b:d0:29:5b:86:53:bc:b4:c6:32:87:d2: 86:bc:c9:ac:56:fc:3d:07:48:f1:51:44:08:94:19:90:b7:10: 67:be:5c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjQxMTIzMDQwNjQyWhcNMjQxMTMwMDQwNjQyWjAYMRYwFAYD VQQDEw02NzQxNTRkMi02YTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA776EoXYzFvNHyzERFxpQxvEjoo+jl39OqBpjwowX8b9IysC1ZlpNVmnvRpqN HQAtCL2at4NF+oTvVCbzEtdb6anWJhbzE6cJKKPJF8IHmfY6V8E+cZFTcqVGkXy3 j/Kxs4GVLS6996GYHRX0JfDJZUytPhXsfzr6bMW1WcfsDgemIJNGckrFKSHn5oIa Hw+JkryRV5foWa/IOQHUClZSHj4sP+Wnkb6S6G3bpMGqQGUIJWBV7e9isqIaYt7q 5E0uxTFQIw7oo93YS3ArvKZ5tmQHJW3kif6uFDgSNyOvINBRMQ+JPKxxjcA3cf3c ojF9ZJFtft4hMPAgs3YJl59AdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGNqYXF W1PHx/z00FDHPm3bQ53LMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB4TfluJ8AxOXtNn7coqo0dc+e94vSkAcjE/Fj2MtvVEdIna85HgR3 WsPQ6W41epsQ2Pbc9/QfYcJYOa+YYRA47Q+/eggPBmr+y4RT33uoot1VUUNThIjd J4G7mvEpc6m60ZcVHunUOVUsnYDwtnDNQ5icYnI+EjU4HvO0Rv3P6VZGOmFQhHEa fs0EqlYQpfsZsqv0o+53OBUhta8NuoV3IPj92kg+uap9H6VdwseyTV0vA0Kg43Mj Vi9GoWRL2GIHrocmYJPfMa/ScC2luUGmMSGNwGBl3O87VSevO0R70ClbhlO8tMYy h9KGvMmsVvw9B0jxUUQIlBmQtxBnvlxA -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org