$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: 15VFcZNv6WvaTMv+XErOZ3KCAvB22/Wy+ICWUac43eI= Subject key identifier: 34:9E:ED:3D:1E:F6:30:32:4F:31:D0:C6:EA:BF:72:22:02:51:E6:A8 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0C1C Signing time: Fri 22 Nov 2024 18:17:55 +0000 Manifest this update: Fri 22 Nov 2024 18:17:55 +0000 Manifest next update: Fri 29 Nov 2024 18:17:55 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: KYPkmgSeFrCoXatOEpjFEPlyHzC5JGIqB+z2lVF/PNo=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: K1rAuJOED+6Q4BLx8v57fInKqUu+2+FMuirq4Ojpcg4=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: Oj/HpRoXwbskrx6g4DxKc4eANqMpbexlTcX718AemjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Nov 22 18:17:55 2024 GMT Not After : Nov 29 18:17:55 2024 GMT Subject: CN=6740cad3-ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:a5:40:1f:df:3d:b4:07:10:ff:b8:6c:5e: a8:d0:c8:a7:ec:72:e2:29:d7:34:bc:be:42:b7:36: 86:af:17:74:cc:9c:17:4f:d5:40:88:fb:7f:e1:2a: 72:52:21:31:68:0b:fd:98:a5:c9:c5:a5:00:db:7a: 66:25:f2:34:6e:a3:4d:3e:5f:e1:0f:95:75:b3:1b: 0e:f1:e4:d7:b4:f4:de:f9:89:54:75:ea:b2:e6:8e: 7b:63:cd:de:2e:67:60:2a:70:d3:bc:16:21:6c:9f: 8a:7e:be:28:8d:12:a4:1a:4c:42:9a:23:0e:0d:be: ed:df:55:f8:94:af:69:24:dc:c9:3b:e4:db:30:0c: 75:93:45:16:90:44:35:a9:bb:fe:f4:d8:af:47:06: 76:8e:8d:c7:ed:95:e7:93:b9:cd:64:a3:ec:09:f4: cb:cc:f0:6c:e8:55:00:7e:84:13:09:e6:64:e2:fb: 39:59:7d:5b:51:98:e3:ab:44:92:05:22:15:17:2e: d6:15:02:3c:58:18:55:5e:51:4e:a8:0b:d7:77:96: 41:b5:5d:d2:36:16:81:63:3d:ba:18:d5:46:8f:2f: 14:e4:e0:4a:f5:a1:ee:0a:0d:f6:85:13:16:a6:9b: 7f:d8:fa:84:df:69:7b:4b:e5:25:c2:a0:d0:3c:e5: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:ED:3D:1E:F6:30:32:4F:31:D0:C6:EA:BF:72:22:02:51:E6:A8 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5b:74:f9:df:4c:c1:27:9b:89:23:d0:6f:d0:58:41:d5:4d: 80:c5:18:74:a2:78:c4:1d:bd:32:2c:fa:ba:78:26:89:be:40: cf:97:0c:f9:71:e5:7a:3e:2c:c2:06:05:f5:0b:99:ec:2e:4c: 9c:4c:39:2e:06:78:68:f7:82:24:1c:df:18:6e:4e:9a:19:e0: 88:a3:fd:6b:5a:70:f0:8b:7b:4d:f6:f3:0c:6e:73:df:f9:0b: dc:91:3f:b3:08:1b:68:63:56:6e:fa:a1:ad:ce:30:90:d9:5d: c5:d8:34:4c:03:60:76:8b:be:2c:d4:e6:0d:ed:8b:93:e0:0d: a8:51:df:d8:34:49:b0:e1:4f:48:ec:03:97:e4:2a:f8:00:cc: 65:de:42:fa:4a:e3:fd:2e:8d:07:aa:db:a0:1c:da:2d:ce:d4: 13:4d:3c:c2:35:49:f0:b7:7d:a7:11:06:03:5b:4a:68:00:38: cf:ff:95:a7:10:8e:3f:b3:dc:d0:40:9a:a9:7a:fe:78:a4:1c: 1d:32:d2:90:c7:62:de:51:f8:0a:7d:7c:85:70:e4:60:c9:1c: 6c:2a:81:cb:f1:3d:b5:13:5b:16:75:d1:a8:a4:c0:29:bf:c3: 97:5c:45:e5:bc:7e:97:ad:7c:53:13:85:a9:1c:53:69:75:57: e9:9e:6d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjQxMTIyMTgxNzU1WhcNMjQxMTI5MTgxNzU1WjAYMRYwFAYD VQQDEw02NzQwY2FkMy1jY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx+lQB/fPbQHEP+4bF6o0Min7HLiKdc0vL5CtzaGrxd0zJwXT9VAiPt/4Spy UiExaAv9mKXJxaUA23pmJfI0bqNNPl/hD5V1sxsO8eTXtPTe+YlUdeqy5o57Y83e LmdgKnDTvBYhbJ+Kfr4ojRKkGkxCmiMODb7t31X4lK9pJNzJO+TbMAx1k0UWkEQ1 qbv+9NivRwZ2jo3H7ZXnk7nNZKPsCfTLzPBs6FUAfoQTCeZk4vs5WX1bUZjjq0SS BSIVFy7WFQI8WBhVXlFOqAvXd5ZBtV3SNhaBYz26GNVGjy8U5OBK9aHuCg32hRMW ppt/2PqE32l7S+UlwqDQPOXNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSe7T0e 9jAyTzHQxuq/ciICUeaoMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYW3T530zBJ5uJI9Bv0FhB1U2AxRh0onjEHb0yLPq6eCaJvkDPlwz5 ceV6PizCBgX1C5nsLkycTDkuBnho94IkHN8Ybk6aGeCIo/1rWnDwi3tN9vMMbnPf +QvckT+zCBtoY1Zu+qGtzjCQ2V3F2DRMA2B2i74s1OYN7YuT4A2oUd/YNEmw4U9I 7AOX5Cr4AMxl3kL6SuP9Lo0HqtugHNotztQTTTzCNUnwt32nEQYDW0poADjP/5Wn EI4/s9zQQJqpev54pBwdMtKQx2LeUfgKfXyFcORgyRxsKoHL8T21E1sWddGopMAp v8OXXEXlvH6XrXxTE4WpHFNpdVfpnm3g -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org