$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: spHaWDcuCvGw8D+EQP8jkX3cCB9qYHsATA7Cqs4L3VE= Subject key identifier: 18:28:51:B0:B9:21:25:29:23:B6:9F:CB:6E:FA:12:6C:96:AF:9E:9A Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 19D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 19BD Signing time: Sun 24 Nov 2024 16:17:01 +0000 Manifest this update: Sun 24 Nov 2024 16:17:01 +0000 Manifest next update: Sun 01 Dec 2024 16:17:01 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: beVQeHHdKWhyUxNHywt3OTS9R3N75wUs9UcobsrycXo=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: 0cTzS5c/6Y55wy74W4s0A+8p1h9o3kwalzmIm9vcVZ0=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: 1lGFq2Q7J665eHGx55rZzzdLkMhC0SHbm7ca0TSX1/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6615 (0x19d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Nov 24 16:17:01 2024 GMT Not After : Dec 1 16:17:01 2024 GMT Subject: CN=6743517d-763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:91:3b:ec:bc:3a:17:fb:7b:74:dd:d6:45: cc:4e:0d:52:81:b5:fc:86:71:e8:c0:da:13:de:4e: 88:7b:fd:46:77:f2:06:3a:e6:b3:8b:99:a6:b1:f1: 25:2d:79:39:c9:a5:00:76:c4:14:1a:ea:a0:f1:17: 67:e9:c2:ef:d7:98:a3:84:46:9f:a8:bd:9a:f6:0b: fd:80:82:3e:fd:3e:39:03:2d:a5:1e:a3:83:bd:e2: 4c:71:bc:1b:7c:01:05:9d:da:2e:b4:97:4c:ce:17: 25:6a:60:fc:25:98:6a:ec:a4:11:f2:32:cb:34:38: 6b:07:f7:75:db:2c:29:44:15:57:bf:a8:a8:86:2f: bb:47:b4:91:1d:83:d5:cb:55:10:66:44:7b:31:20: f8:60:7c:6d:b7:a6:c9:d0:22:f6:3b:a3:0a:f0:14: 8f:9c:f8:ce:ed:6d:e7:4e:d9:4a:60:8a:85:04:28: 10:11:6d:17:a4:1f:5e:96:4c:a2:1a:d2:47:19:b2: e2:ad:dd:85:cf:7c:03:f6:93:dc:4b:41:7f:90:0d: 23:59:b3:13:ce:c3:ee:fa:f4:6a:f8:26:74:5f:71: a9:32:75:27:12:c0:e2:5c:c0:7a:2f:a9:d4:2f:9d: 6f:54:d3:8e:32:a2:09:44:40:89:ea:1d:40:9f:17: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:51:B0:B9:21:25:29:23:B6:9F:CB:6E:FA:12:6C:96:AF:9E:9A X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:03:7a:7b:33:06:8c:5b:cc:78:f9:b1:de:77:b6:3c:22:d7: ee:05:2a:68:ac:37:41:67:ba:8a:48:c0:34:0b:b0:ca:fd:89: d4:ba:69:98:27:3e:6c:11:ee:70:89:ce:bf:e8:49:09:7b:76: 2c:50:ac:ca:d3:cd:09:4f:9b:35:4a:2b:e8:19:65:22:31:63: 1b:4e:b5:e7:83:28:aa:bb:c1:20:8e:53:a4:90:ff:97:eb:2d: b0:0f:fc:91:d4:0d:ca:1d:ac:79:b6:32:bd:f8:bc:67:d0:ce: c6:93:a7:89:d8:06:b3:b8:bd:f9:59:63:f4:25:a3:8e:a3:0f: a3:88:ff:ad:4b:90:58:9e:e7:6a:ea:20:45:03:9a:5f:ed:74: b0:e7:af:36:33:41:24:dd:89:dc:01:3c:5b:f1:70:84:bc:6d: af:03:3c:1b:31:bc:d1:4f:0f:21:fd:b3:51:17:f1:69:e5:94: 10:9f:a4:e4:0a:6c:9e:e5:37:0c:48:f4:d3:21:63:48:89:94: 15:fe:b0:ec:4b:7e:b5:df:e5:65:ef:52:90:4c:80:3b:96:5d: 7d:45:18:99:17:53:f8:6d:63:d5:0d:c5:5f:0d:d0:a3:54:73: 7d:f9:46:39:74:2e:88:21:9b:4c:85:44:fe:2c:9a:78:71:69: 01:82:8b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjQxMTI0MTYxNzAxWhcNMjQxMjAxMTYxNzAxWjAYMRYwFAYD VQQDEw02NzQzNTE3ZC03NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSiRO+y8Ohf7e3Td1kXMTg1SgbX8hnHowNoT3k6Ie/1Gd/IGOuazi5mmsfEl LXk5yaUAdsQUGuqg8Rdn6cLv15ijhEafqL2a9gv9gII+/T45Ay2lHqODveJMcbwb fAEFndoutJdMzhclamD8JZhq7KQR8jLLNDhrB/d12ywpRBVXv6iohi+7R7SRHYPV y1UQZkR7MSD4YHxtt6bJ0CL2O6MK8BSPnPjO7W3nTtlKYIqFBCgQEW0XpB9elkyi GtJHGbLird2Fz3wD9pPcS0F/kA0jWbMTzsPu+vRq+CZ0X3GpMnUnEsDiXMB6L6nU L51vVNOOMqIJRECJ6h1AnxccxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgoUbC5 ISUpI7afy276EmyWr56aMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSA3p7MwaMW8x4+bHed7Y8ItfuBSporDdBZ7qKSMA0C7DK/YnUummY Jz5sEe5wic6/6EkJe3YsUKzK080JT5s1SivoGWUiMWMbTrXngyiqu8EgjlOkkP+X 6y2wD/yR1A3KHax5tjK9+Lxn0M7Gk6eJ2AazuL35WWP0JaOOow+jiP+tS5BYnudq 6iBFA5pf7XSw5682M0Ek3YncATxb8XCEvG2vAzwbMbzRTw8h/bNRF/Fp5ZQQn6Tk Cmye5TcMSPTTIWNIiZQV/rDsS3613+Vl71KQTIA7ll19RRiZF1P4bWPVDcVfDdCj VHN9+UY5dC6IIZtMhUT+LJp4cWkBgouJ -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:52 2024 by rpki-client on console-fra.rpki-client.org