$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json) Hash identifier: NTPRf3jglVJ6enWpwWhqojAMyW7TpHW3AASOPhJYVug= Subject key identifier: 47:1D:79:36:F1:6E:3A:12:F4:34:FA:91:A2:44:EF:00:7B:31:C8:B3 Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft Manifest number: 0801 Signing time: Fri 22 Nov 2024 20:37:41 +0000 Manifest this update: Fri 22 Nov 2024 20:37:40 +0000 Manifest next update: Fri 29 Nov 2024 20:37:40 +0000 Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: c2+FxRDfXgm8BoWZE88coUpY3NNXSADFdm6+FvPm2/c=) 2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: jP9WQeUuHByQOgvhcc4yViwwc1IsiLi4j4kFeZuXSLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE Validity Not Before: Nov 22 20:37:40 2024 GMT Not After : Nov 29 20:37:40 2024 GMT Subject: CN=6740eb95-f718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:82:bb:0b:1d:77:39:ca:e1:aa:25:0d:27: 6a:15:2c:f2:19:74:23:a7:ce:8e:cf:fa:6a:6a:07: 2e:87:69:79:99:fa:b6:06:02:1b:b9:64:a9:ff:58: 77:8d:af:b0:05:fd:10:69:a8:a7:a4:0a:f1:26:76: f2:ab:9b:51:86:f5:f7:3d:25:32:a6:64:a5:84:d8: 22:4e:49:9a:f7:76:e4:ff:33:1f:83:3b:0f:b5:e4: ef:18:2b:c8:d6:10:52:80:66:7c:b9:8d:14:4d:2a: ea:b5:c8:76:04:41:38:ff:92:a3:72:88:47:a4:d1: 9b:3a:42:ad:86:67:b2:34:fe:e9:5a:db:1e:c7:89: 37:32:f4:58:7e:f6:3a:b2:74:36:be:ef:a3:cc:f8: 44:51:a5:d4:53:d5:b3:f7:68:bd:47:a9:21:5f:16: a7:c5:42:8f:59:6d:14:c8:04:b2:5e:90:af:23:12: 68:32:f0:79:99:ab:83:0d:b1:f7:21:e4:f8:f5:84: db:4d:e0:ca:fb:5b:08:52:18:c9:33:0d:97:6c:27: 23:2e:f0:46:aa:44:62:0c:c4:87:45:85:22:d8:27: 22:54:a2:f8:59:2a:dd:21:c6:f9:3d:7d:a7:6b:e0: 4e:1b:70:4d:d4:df:25:62:62:e3:78:ce:d7:e9:8f: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:79:36:F1:6E:3A:12:F4:34:FA:91:A2:44:EF:00:7B:31:C8:B3 X509v3 Authority Key Identifier: keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0e:80:fd:5b:6b:c5:62:1f:e2:aa:c7:ef:41:a2:38:e8:22: 5b:eb:1f:23:ed:a0:bd:54:98:25:e8:b3:21:c0:14:45:f5:32: ec:e8:7f:8b:4a:87:1c:e3:5a:46:1c:ee:e4:1e:ab:9a:b4:05: 6c:d5:16:3a:bf:5a:59:dd:a9:c6:79:2b:df:f4:26:6a:63:11: 85:04:c2:77:45:c0:51:6d:a5:ff:50:e9:80:f2:1f:3e:69:75: cb:9e:05:2e:b1:e7:5a:dc:3a:b3:34:18:57:9a:7a:05:04:71: 91:77:2e:9c:0f:37:49:b1:4b:74:48:ae:31:57:18:84:e7:88: 32:6a:1e:4d:d9:89:6a:02:61:c9:56:6f:23:83:55:38:52:c1: b1:ba:ca:90:0b:82:70:e4:bc:3c:35:fd:02:d3:6b:c7:58:f5: 89:aa:7a:ee:89:96:f4:38:fa:7e:97:e1:45:ec:a3:da:ab:f4: ca:d6:54:ad:be:ac:9c:ad:db:84:b6:1e:c8:c0:8f:95:f6:06: 8a:82:77:02:5e:c6:06:1d:c2:56:63:b4:51:f5:be:60:41:3d: 42:b0:4f:a4:2d:5f:d1:b4:b1:e6:e6:36:b9:46:2d:d6:21:a5: 10:18:07:49:4b:b1:3b:e6:bd:52:b3:57:8d:05:ba:48:eb:37: 2c:a8:0a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREOUIxMTAvBgNVBAUTKENGODlENkFCMTFFN0Q0N0FBMTdCNDMwOUM3MkE3MkI3 MUNCQTQ3QUUwHhcNMjQxMTIyMjAzNzQwWhcNMjQxMTI5MjAzNzQwWjAYMRYwFAYD VQQDEw02NzQwZWI5NS1mNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgeCuwsddznK4aolDSdqFSzyGXQjp86Oz/pqagcuh2l5mfq2BgIbuWSp/1h3 ja+wBf0QaainpArxJnbyq5tRhvX3PSUypmSlhNgiTkma93bk/zMfgzsPteTvGCvI 1hBSgGZ8uY0UTSrqtch2BEE4/5KjcohHpNGbOkKthmeyNP7pWtsex4k3MvRYfvY6 snQ2vu+jzPhEUaXUU9Wz92i9R6khXxanxUKPWW0UyASyXpCvIxJoMvB5mauDDbH3 IeT49YTbTeDK+1sIUhjJMw2XbCcjLvBGqkRiDMSHRYUi2CciVKL4WSrdIcb5PX2n a+BOG3BN1N8lYmLjeM7X6Y9TnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcdeTbx bjoS9DT6kaJE7wB7McizMB8GA1UdIwQYMBaAFM+J1qsR59R6oXtDCccqcrccukeu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQ5Qi9GNUJBQTNEOEM4 MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFIcWhlME1KeHlweXR4eTZS NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0bldxeEhuMUhxaGUwTUp4eXB5dHh5NlI2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQ5Qi9GNUJBQTNEOEM4MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFI cWhlME1KeHlweXR4eTZSNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnDoD9W2vFYh/iqsfvQaI46CJb6x8j7aC9VJgl6LMhwBRF9TLs6H+L Socc41pGHO7kHquatAVs1RY6v1pZ3anGeSvf9CZqYxGFBMJ3RcBRbaX/UOmA8h8+ aXXLngUuseda3DqzNBhXmnoFBHGRdy6cDzdJsUt0SK4xVxiE54gyah5N2YlqAmHJ Vm8jg1U4UsGxusqQC4Jw5Lw8Nf0C02vHWPWJqnruiZb0OPp+l+FF7KPaq/TK1lSt vqycrduEth7IwI+V9gaKgncCXsYGHcJWY7RR9b5gQT1CsE+kLV/RtLHm5ja5Ri3W IaUQGAdJS7E75r1Ss1eNBbpI6zcsqApo -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org