$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: E0yTPgx5EZG6wN8kmsLPlS0RddUZdkBCUuzq6kSnGoM= Subject key identifier: 5E:2A:E5:E6:D7:99:9F:98:D0:F4:3D:31:04:59:E1:0A:DF:BF:BE:79 Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 77 Signing time: Sat 23 Nov 2024 04:45:49 +0000 Manifest this update: Sat 23 Nov 2024 04:45:49 +0000 Manifest next update: Sat 30 Nov 2024 04:45:49 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: GioH2sEsETDGdBFL/DaDfTO5kTjekSl/o3/hBmjnnbo=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: JYbpzpLW52231ZAzTFSJa6h0jqk+nYAnIDRg3dToHsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Nov 23 04:45:49 2024 GMT Not After : Nov 30 04:45:49 2024 GMT Subject: CN=67415dfd-9c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:ef:2b:d1:07:d9:6d:98:3c:67:77:ba:12: 23:66:00:ce:4f:56:5b:55:ed:2e:a2:90:68:52:1d: 3f:a8:13:c2:ec:73:74:5e:fd:e4:5d:4f:db:84:d7: ce:82:9c:6c:ae:08:59:53:6e:3b:37:54:90:ba:a0: b6:19:1f:3b:f9:bd:ea:2d:41:ed:91:7b:5b:ae:a7: b1:75:ed:fc:3c:c6:c8:83:d7:8d:c5:7f:54:ef:86: 84:f9:0d:f1:96:81:61:ba:1d:73:c7:d3:dd:06:35: 9d:8f:41:9c:71:4f:2f:7c:cf:e0:28:75:d5:9b:66: 93:b2:ff:84:d9:55:87:67:56:91:d3:8d:67:ba:90: 61:da:98:91:47:f1:12:ef:56:e3:0d:40:2e:85:61: 10:95:dc:55:de:41:47:4c:00:97:a8:17:a3:d6:b6: e0:2b:a2:53:2a:89:bb:75:cb:71:0f:5d:27:00:dc: 90:55:9e:9c:a9:7d:db:7a:58:3e:57:ce:cb:c6:da: 9b:da:fe:0f:b3:15:d5:92:76:ae:96:fd:c9:af:fd: dd:cc:ca:fb:27:af:80:af:ed:84:11:d1:65:99:05: 7c:74:e0:ae:72:6f:e1:bd:35:cd:55:5c:f8:36:e4: f1:36:10:fd:71:6e:39:aa:54:a1:c3:75:b2:de:03: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:E5:E6:D7:99:9F:98:D0:F4:3D:31:04:59:E1:0A:DF:BF:BE:79 X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:44:ed:79:38:d0:f3:c1:7a:85:f2:ac:3a:7d:b6:90:14:b6: 93:48:3e:43:e1:a5:d3:c3:82:4c:bf:a6:ef:29:71:87:7a:54: d2:30:70:a1:a1:91:d3:37:c8:96:40:e5:41:87:0c:fd:6d:5c: 08:25:b4:b6:2a:0a:6d:d9:77:86:02:57:c6:9e:d0:de:a6:bb: 4a:65:5b:44:83:24:fa:10:12:ee:5f:38:91:5e:7e:52:2d:8d: f5:fa:05:ba:a0:ab:87:28:30:75:48:2f:01:16:dd:52:44:ce: 40:13:9c:30:ef:d0:0d:1d:77:fa:66:a7:b3:9e:ef:10:23:f9: f4:44:79:14:15:9d:13:c5:fd:ea:d9:d0:b7:cb:24:a1:a0:cc: 0d:15:01:f4:7a:fa:70:0d:60:8e:b3:dd:12:ae:af:bb:a9:19: 8d:f3:1f:4f:0c:56:d2:57:49:a7:c4:a9:b6:e1:aa:08:a0:76: 50:b6:cb:f8:16:e6:8b:80:c4:fe:5f:f1:9c:ad:a3:b8:15:e1: ca:9f:ba:92:8f:83:3e:aa:bf:dc:a1:06:d9:55:71:c4:c0:62: 02:35:2d:55:e1:52:05:ec:56:a4:26:46:15:ee:84:a3:0f:64: 6a:cd:4a:79:17:94:37:8f:73:f0:d1:e7:b7:43:21:b9:8e:a9: f0:48:39:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0E0RTExMC8GA1UEBRMoNjVCNDM1MkZDNUI3NEQzMUQ3Nzk3MzZGQ0ZFN0Y2NDFC QUM3M0VCMjAeFw0yNDExMjMwNDQ1NDlaFw0yNDExMzAwNDQ1NDlaMBgxFjAUBgNV BAMTDTY3NDE1ZGZkLTljMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcju8r0QfZbZg8Z3e6EiNmAM5PVltV7S6ikGhSHT+oE8Lsc3Re/eRdT9uE186C nGyuCFlTbjs3VJC6oLYZHzv5veotQe2Re1uup7F17fw8xsiD143Ff1TvhoT5DfGW gWG6HXPH090GNZ2PQZxxTy98z+AoddWbZpOy/4TZVYdnVpHTjWe6kGHamJFH8RLv VuMNQC6FYRCV3FXeQUdMAJeoF6PWtuArolMqibt1y3EPXScA3JBVnpypfdt6WD5X zsvG2pva/g+zFdWSdq6W/cmv/d3Myvsnr4Cv7YQR0WWZBXx04K5yb+G9Nc1VXPg2 5PE2EP1xbjmqVKHDdbLeA+BXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXirl5teZ n5jQ9D0xBFnhCt+/vnkwHwYDVR0jBBgwFoAUZbQ1L8W3TTHXeXNvz+f2QbrHPrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQTRFLzc2MkZFNjQ0RjEz OTExRUVBNUVDNTA1OEM0RjlBRTAyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmJRMUw4VzNUVEhYZVhOdnotZjJRYnJIUHJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QTRFLzc2MkZFNjQ0RjEzOTExRUVBNUVDNTA1OEM0RjlBRTAyL1piUTFMOFczVFRI WGVYTnZ6LWYyUWJySFBySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1E7Xk40PPBeoXyrDp9tpAUtpNIPkPhpdPDgky/pu8pcYd6VNIwcKGh kdM3yJZA5UGHDP1tXAgltLYqCm3Zd4YCV8ae0N6mu0plW0SDJPoQEu5fOJFeflIt jfX6Bbqgq4coMHVILwEW3VJEzkATnDDv0A0dd/pmp7Oe7xAj+fREeRQVnRPF/erZ 0LfLJKGgzA0VAfR6+nANYI6z3RKur7upGY3zH08MVtJXSafEqbbhqgigdlC2y/gW 5ouAxP5f8Zyto7gV4cqfupKPgz6qv9yhBtlVccTAYgI1LVXhUgXsVqQmRhXuhKMP ZGrNSnkXlDePc/DR57dDIbmOqfBIOUs= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org