$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: hQmHP/fo+lCh9qhnX5iJMEi+SaOdtYKgt1TSV2ToXz0= Subject key identifier: 17:9A:88:E8:78:F9:84:ED:3C:C8:55:A0:92:92:FF:CE:16:91:CC:09 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 345B Signing time: Sun 24 Nov 2024 14:27:16 +0000 Manifest this update: Sun 24 Nov 2024 14:27:15 +0000 Manifest next update: Sun 01 Dec 2024 14:27:15 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: XII9DgLWtNe5Nm4Kcn3OS5xhBGRIRK1I/LlhqBnk3Yk=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: mhSDrNTd50cS8wLIGVZl7Ze3yEkifRrR2iMHOlgICfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Nov 24 14:27:15 2024 GMT Not After : Dec 1 14:27:15 2024 GMT Subject: CN=674337c4-f95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:4f:a8:69:8b:b5:bb:e2:df:f9:98:41:7c: 30:bd:eb:56:62:26:80:dc:46:3f:87:bb:7a:9b:14: fc:1a:e6:c5:ab:00:c9:a5:2a:de:35:8d:8b:ba:77: 54:eb:34:49:2d:54:1d:d6:6c:fb:e8:44:8c:e1:6b: c6:a9:fc:d4:92:13:b0:5e:b2:8e:46:aa:ad:e5:4d: 83:9b:35:73:5d:93:0c:dc:b7:fd:fe:73:64:1c:b4: 82:44:0b:11:66:47:6b:be:b6:fd:b0:eb:95:a2:79: eb:d5:bd:77:bf:db:fa:d9:27:ef:b4:00:d8:38:6b: 0b:5b:a6:20:26:e7:4a:23:5b:ec:0d:f1:58:72:56: 81:fb:f2:37:15:e3:c3:ac:ee:eb:0a:8e:39:d5:0d: fc:fe:65:b4:15:f5:9f:82:45:d6:ad:c2:9f:72:65: 6c:5a:a9:3b:a1:49:c9:17:f0:d0:27:66:fe:95:c5: 2a:b9:1d:79:31:6b:5b:78:61:46:38:6f:5a:7c:67: 9a:22:44:62:53:b1:be:06:3d:c7:f2:7a:b5:52:c0: 1d:5c:99:e9:66:4b:86:88:fc:06:8e:40:0f:b6:e6: a3:a4:06:e1:73:f0:f5:03:34:01:a8:d7:d6:ca:88: 48:c2:00:16:20:5d:9b:0c:f8:93:98:c2:5b:32:49: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9A:88:E8:78:F9:84:ED:3C:C8:55:A0:92:92:FF:CE:16:91:CC:09 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:aa:ce:ad:30:79:45:a4:a8:6a:b7:ef:32:0b:f9:9c:9c:02: 7f:10:d0:e3:f2:ef:b7:3a:79:8d:3a:0f:90:36:93:93:16:4c: 3b:74:2a:05:b9:95:94:ac:c8:28:2b:2d:64:ba:2b:7e:82:f1: 87:ec:b6:7c:eb:13:23:b4:be:58:06:50:99:cb:43:f9:89:dd: d6:29:b8:9e:06:2a:8e:6a:bc:7f:8d:c6:0e:fd:66:29:a2:4a: 14:52:04:89:b7:3e:70:fd:87:8e:6b:93:87:a0:f4:aa:67:6c: b6:39:01:d2:9b:ee:31:98:20:31:30:07:62:d3:f2:ac:ae:46: 45:17:28:45:18:5b:13:13:12:eb:0a:e8:d4:02:11:50:a9:c5: 3e:4d:b2:df:50:84:90:be:e7:54:16:5b:96:98:14:15:25:3b: 76:ca:e0:44:7e:da:92:67:23:8c:cf:98:97:b7:30:d0:fa:88: ef:60:21:60:23:e8:0e:bc:75:06:d9:cc:63:71:ba:45:4e:64: e1:6d:0f:05:f9:b4:62:a9:0a:32:a3:6b:14:dd:23:8e:bc:e8: 23:19:69:59:6f:6c:9c:f7:cc:2e:52:f9:f2:92:77:22:cd:0c: 39:26:d2:36:42:53:33:12:56:5a:4e:4a:b0:87:61:db:af:09: d1:4e:6f:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjQxMTI0MTQyNzE1WhcNMjQxMjAxMTQyNzE1WjAYMRYwFAYD VQQDEw02NzQzMzdjNC1mOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ddPqGmLtbvi3/mYQXwwvetWYiaA3EY/h7t6mxT8GubFqwDJpSreNY2LundU 6zRJLVQd1mz76ESM4WvGqfzUkhOwXrKORqqt5U2DmzVzXZMM3Lf9/nNkHLSCRAsR Zkdrvrb9sOuVonnr1b13v9v62SfvtADYOGsLW6YgJudKI1vsDfFYclaB+/I3FePD rO7rCo451Q38/mW0FfWfgkXWrcKfcmVsWqk7oUnJF/DQJ2b+lcUquR15MWtbeGFG OG9afGeaIkRiU7G+Bj3H8nq1UsAdXJnpZkuGiPwGjkAPtuajpAbhc/D1AzQBqNfW yohIwgAWIF2bDPiTmMJbMkmvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeaiOh4 +YTtPMhVoJKS/84WkcwJMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOqs6tMHlFpKhqt+8yC/mcnAJ/ENDj8u+3OnmNOg+QNpOTFkw7dCoF uZWUrMgoKy1kuit+gvGH7LZ86xMjtL5YBlCZy0P5id3WKbieBiqOarx/jcYO/WYp okoUUgSJtz5w/YeOa5OHoPSqZ2y2OQHSm+4xmCAxMAdi0/KsrkZFFyhFGFsTExLr CujUAhFQqcU+TbLfUISQvudUFluWmBQVJTt2yuBEftqSZyOMz5iXtzDQ+ojvYCFg I+gOvHUG2cxjcbpFTmThbQ8F+bRiqQoyo2sU3SOOvOgjGWlZb2yc98wuUvnyknci zQw5JtI2QlMzElZaTkqwh2HbrwnRTm+Q -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org