$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft File: ZmruIMmoyx9DEkGPHiBXqoprxPs.mft (raw, json) Hash identifier: JlJBui+1SL3y8PkNNnjWvrTjNaLQ+/AZh5kPZ51MyHk= Subject key identifier: D6:33:96:39:E9:CA:66:2B:7D:09:2F:84:3D:2B:E6:98:C0:8F:61:B7 Authority key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB Certificate issuer: /CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft Manifest number: 0379 Signing time: Sat 23 Nov 2024 00:25:33 +0000 Manifest this update: Sat 23 Nov 2024 00:25:32 +0000 Manifest next update: Sat 30 Nov 2024 00:25:32 +0000 Files and hashes: 1: ZmruIMmoyx9DEkGPHiBXqoprxPs.crl (hash: ggeD9k/5lK8l32dKqJBpyvOIhnFzlZRWhiOkkX801Bg=) 2: 563C52F8827011ECB06A7E29C4F9AE02.roa (hash: x/cf4sYRLQ2j9Yf/UYJIoN7cj+sIgUVHQyGy6+lDz3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB Validity Not Before: Nov 23 00:25:32 2024 GMT Not After : Nov 30 00:25:32 2024 GMT Subject: CN=674120fc-2b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:08:28:99:f1:f9:1f:ea:6c:89:e0:a9:31: d9:b6:db:1d:63:99:73:8a:ae:20:74:0e:3a:f0:71: ed:c3:d8:00:f8:25:77:ee:3f:00:45:87:71:0e:12: 54:d2:26:14:6f:21:e8:6a:0c:1f:74:7a:b4:7a:2b: b5:e9:ae:49:e3:ad:9d:2a:99:3b:99:04:77:b2:4e: 9f:92:2d:35:d1:0a:d4:e3:69:64:ca:e1:59:3d:00: 47:b0:52:bd:bc:98:09:d4:b0:10:b8:fb:18:db:a0: dd:ed:d0:84:82:b4:99:67:09:bb:48:56:36:89:4f: ad:2d:69:a5:c4:e1:35:47:2f:d2:99:b1:08:1c:f4: 81:20:8c:d8:c7:17:97:be:92:2d:aa:25:a2:d7:cf: 2c:42:97:72:69:53:05:f5:af:38:79:32:15:71:31: 84:74:60:63:99:9a:f0:59:f0:c1:af:84:27:66:6f: a5:a6:fd:fc:32:76:25:8f:8f:dc:46:18:e2:fd:98: 81:28:31:f4:d6:df:2a:e6:25:ee:4b:a6:3b:dc:4e: 49:b2:c0:8e:2b:e4:b3:28:f2:ee:91:14:4f:7c:17: dc:30:b1:40:e2:40:d2:2f:b5:37:c2:05:19:75:76: 4a:e8:13:9b:58:b9:c4:cd:b0:0c:8d:62:fa:de:c2: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:96:39:E9:CA:66:2B:7D:09:2F:84:3D:2B:E6:98:C0:8F:61:B7 X509v3 Authority Key Identifier: keyid:66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f2:85:5a:e0:e2:04:dd:18:7e:3d:de:7c:47:0d:9b:c3:82: 47:44:28:8d:b5:0b:56:91:80:51:eb:65:7e:81:39:4a:e8:76: 49:8d:64:e1:2d:1b:c5:c0:4b:13:d0:d0:57:ca:85:a0:cf:00: 5f:11:29:7b:f6:64:7b:93:22:17:2a:ab:65:10:c3:81:7d:d1: 6f:c0:c1:10:a0:81:c9:b7:d2:1e:c0:7d:85:27:0c:b5:5d:eb: 0a:6e:24:4f:b5:b6:97:5d:23:1c:8e:80:8d:d3:32:aa:2a:2a: 22:b8:48:28:85:30:a2:e4:4c:90:55:7e:ce:17:e7:8d:b2:02: 47:51:7e:c7:ca:96:6f:8a:ca:2c:b6:f5:5a:65:05:77:a6:c4: 90:58:a2:5c:ea:7b:cd:5a:79:f7:97:6d:13:61:0b:9f:6c:32: 2d:b3:b4:55:60:4e:b0:3a:12:10:95:1a:12:c6:f6:8a:d9:d8: 44:b5:2f:fb:49:8b:3b:43:e0:2f:96:34:43:46:70:c1:45:f6: 24:60:0a:ce:65:0f:52:70:39:50:1a:ed:51:53:11:57:a6:ff: 91:53:17:31:42:25:d4:af:40:6d:6c:af:56:17:64:b8:a1:58: 07:21:31:b6:d1:cb:d2:67:fd:bb:ef:f7:4e:35:8b:bd:94:6d: 3d:12:36:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGQzAxMTAvBgNVBAUTKDY2NkFFRTIwQzlBOENCMUY0MzEyNDE4RjFFMjA1N0FB OEE2QkM0RkIwHhcNMjQxMTIzMDAyNTMyWhcNMjQxMTMwMDAyNTMyWjAYMRYwFAYD VQQDEw02NzQxMjBmYy0yYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WEIKJnx+R/qbIngqTHZttsdY5lziq4gdA468HHtw9gA+CV37j8ARYdxDhJU 0iYUbyHoagwfdHq0eiu16a5J462dKpk7mQR3sk6fki010QrU42lkyuFZPQBHsFK9 vJgJ1LAQuPsY26Dd7dCEgrSZZwm7SFY2iU+tLWmlxOE1Ry/SmbEIHPSBIIzYxxeX vpItqiWi188sQpdyaVMF9a84eTIVcTGEdGBjmZrwWfDBr4QnZm+lpv38MnYlj4/c Rhji/ZiBKDH01t8q5iXuS6Y73E5JssCOK+SzKPLukRRPfBfcMLFA4kDSL7U3wgUZ dXZK6BObWLnEzbAMjWL63sJ9oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYzljnp ymYrfQkvhD0r5pjAj2G3MB8GA1UdIwQYMBaAFGZq7iDJqMsfQxJBjx4gV6qKa8T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUZDMC8wRTQ1ODA3Qzgy NkMxMUVDQkQzOThCNThDNEY5QUUwMi9abXJ1SU1tb3l4OURFa0dQSGlCWHFvcHJ4 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ptcnVJTW1veXg5REVrR1BIaUJYcW9wcnhQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUZDMC8wRTQ1ODA3QzgyNkMxMUVDQkQzOThCNThDNEY5QUUwMi9abXJ1SU1tb3l4 OURFa0dQSGlCWHFvcHJ4UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8oVa4OIE3Rh+Pd58Rw2bw4JHRCiNtQtWkYBR62V+gTlK6HZJjWTh LRvFwEsT0NBXyoWgzwBfESl79mR7kyIXKqtlEMOBfdFvwMEQoIHJt9IewH2FJwy1 XesKbiRPtbaXXSMcjoCN0zKqKioiuEgohTCi5EyQVX7OF+eNsgJHUX7HypZvisos tvVaZQV3psSQWKJc6nvNWnn3l20TYQufbDIts7RVYE6wOhIQlRoSxvaK2dhEtS/7 SYs7Q+AvljRDRnDBRfYkYArOZQ9ScDlQGu1RUxFXpv+RUxcxQiXUr0BtbK9WF2S4 oVgHITG20cvSZ/277/dONYu9lG09EjYo -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org