$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft File: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json) Hash identifier: 9ajnfgwi4VwUZIcCGuytCCHuveuvKpZkBcGy5ufAQyU= Subject key identifier: 74:54:A0:FE:35:8E:AA:B9:EF:5D:E7:B2:A4:EB:55:A6:3A:DD:E0:14 Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft Manifest number: 0841 Signing time: Fri 22 Nov 2024 20:39:31 +0000 Manifest this update: Fri 22 Nov 2024 20:39:30 +0000 Manifest next update: Fri 29 Nov 2024 20:39:30 +0000 Files and hashes: 1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: PirFYOZokUhrG+KTRxLDHwFTVZIO1yY05cmu5TFW+eA=) 2: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (hash: Kkq3FSGMJtrxAckL14K8lEjZBbSHWGV4MxpopXgePZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Validity Not Before: Nov 22 20:39:30 2024 GMT Not After : Nov 29 20:39:30 2024 GMT Subject: CN=6740ec02-c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:91:36:66:bf:b3:0f:44:eb:6b:e1:85:35: 01:a0:df:69:57:b8:b6:01:e1:c4:3a:90:55:6a:32: e0:92:0f:e8:18:3a:b7:db:68:55:48:11:19:db:b5: 96:99:8c:b9:ae:19:08:f8:58:2c:f7:09:c1:47:81: b2:db:60:cd:e1:76:16:21:27:09:32:69:ee:0a:6a: 5d:f5:c4:90:1e:20:af:83:3b:12:63:f8:6b:dd:9e: 89:2a:c7:b7:95:fb:90:93:c8:80:47:fc:fa:9c:b4: 72:1f:33:d0:50:c7:e9:d3:4b:6e:2f:af:2b:b7:c5: 4f:7e:9c:af:c9:e0:ac:a7:88:90:48:c0:fc:17:40: 11:f2:bf:91:63:c5:f8:fb:50:fb:01:e2:47:f9:4b: df:8b:da:81:66:ff:22:45:22:89:2b:15:07:70:69: 16:3a:f9:48:0a:f0:28:1c:61:8d:a9:da:b0:3e:ae: 8a:1e:b9:25:26:f4:5c:88:d4:35:bf:d8:43:82:b9: 16:fb:c9:9d:3f:28:ee:28:a5:01:66:e9:65:0b:52: 7e:d9:bb:04:f2:32:7d:f3:2b:0c:3b:5c:73:f7:ba: cb:18:91:a0:d3:c0:ba:52:e7:7b:3e:b2:f6:1c:fc: a3:7e:e3:48:63:fd:3f:d6:77:06:d0:af:88:7f:21: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:A0:FE:35:8E:AA:B9:EF:5D:E7:B2:A4:EB:55:A6:3A:DD:E0:14 X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:40:94:39:e1:89:d3:13:7c:29:9a:0f:5e:29:8a:f0:1c:f5: 5f:56:73:e0:68:1d:05:e4:4e:1c:eb:fe:73:87:81:74:9a:e8: 0e:ff:a1:d6:7d:d9:a4:65:76:57:60:2b:a4:c7:1e:91:1f:bc: de:c3:7e:69:a0:1a:89:64:f1:05:eb:38:cc:e1:92:6f:e6:95: 2a:66:50:01:7a:38:d2:b8:9a:aa:3d:77:68:f9:c8:be:d3:6e: 07:f8:cf:95:aa:3e:23:e0:90:4a:1a:e7:46:52:26:b0:08:52: 32:87:ee:c0:61:a6:54:a2:24:bd:ea:92:a4:2a:91:90:0b:8d: 4b:43:cc:95:d3:ce:f9:13:f1:70:83:d8:d5:03:16:22:90:7d: cf:c0:7a:bb:3f:85:82:cd:12:3f:3a:4b:de:0b:9b:1b:e7:1f: 1f:4f:79:ce:61:57:de:4d:1d:d1:f1:5f:1e:5f:f9:20:2c:58: 97:ce:83:da:fa:60:17:94:2f:be:c0:ec:c3:06:d4:a3:35:96: 43:60:07:49:03:cd:c5:0e:13:1f:48:f8:53:2e:90:ed:21:d7: f3:3b:03:64:a4:70:26:4a:ac:e8:1b:1e:32:8c:1b:35:d9:b4: 8c:8a:c0:2b:97:eb:dd:31:eb:28:c5:8a:d2:1c:31:a5:53:ab: d7:34:6f:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjQxMTIyMjAzOTMwWhcNMjQxMTI5MjAzOTMwWjAYMRYwFAYD VQQDEw02NzQwZWMwMi1jMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X6RNma/sw9E62vhhTUBoN9pV7i2AeHEOpBVajLgkg/oGDq322hVSBEZ27WW mYy5rhkI+Fgs9wnBR4Gy22DN4XYWIScJMmnuCmpd9cSQHiCvgzsSY/hr3Z6JKse3 lfuQk8iAR/z6nLRyHzPQUMfp00tuL68rt8VPfpyvyeCsp4iQSMD8F0AR8r+RY8X4 +1D7AeJH+Uvfi9qBZv8iRSKJKxUHcGkWOvlICvAoHGGNqdqwPq6KHrklJvRciNQ1 v9hDgrkW+8mdPyjuKKUBZullC1J+2bsE8jJ98ysMO1xz97rLGJGg08C6Uud7PrL2 HPyjfuNIY/0/1ncG0K+IfyHT3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRUoP41 jqq5713nsqTrVaY63eAUMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4 VkxvOUt1NHo5TTZIdF9rSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByQJQ54YnTE3wpmg9eKYrwHPVfVnPgaB0F5E4c6/5zh4F0mugO/6HW fdmkZXZXYCukxx6RH7zew35poBqJZPEF6zjM4ZJv5pUqZlABejjSuJqqPXdo+ci+ 024H+M+Vqj4j4JBKGudGUiawCFIyh+7AYaZUoiS96pKkKpGQC41LQ8yV0875E/Fw g9jVAxYikH3PwHq7P4WCzRI/OkveC5sb5x8fT3nOYVfeTR3R8V8eX/kgLFiXzoPa +mAXlC++wOzDBtSjNZZDYAdJA83FDhMfSPhTLpDtIdfzOwNkpHAmSqzoGx4yjBs1 2bSMisArl+vdMesoxYrSHDGlU6vXNG8c -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org