$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: AlRDDqHRUeUoEGM+yX6un3h7JFWJ1zKrEEMCv4aI3WU= Subject key identifier: 10:C9:00:C6:E0:08:66:FB:B0:97:D6:D5:C1:1D:3A:90:A9:34:E7:A1 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 0117 Signing time: Sat 23 Nov 2024 03:02:21 +0000 Manifest this update: Sat 23 Nov 2024 03:02:21 +0000 Manifest next update: Sat 30 Nov 2024 03:02:21 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: kGftbb3iuMxklFeWRCd7KPOkCq+kc9Sj7vMQuR1C9/A=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: MhnlI9exW+RMMsOOeA0js7t38sgb1HY334sjZbPPcIs=) 3: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: /NkHsi+HD36xg3F3z+E/an+GAt3cjkWAYoYG1NwlCDQ=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: bHJCi6Fx94Tr82fyaUmP4Kxgcl4MBtO25etlERplKes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Nov 23 03:02:21 2024 GMT Not After : Nov 30 03:02:21 2024 GMT Subject: CN=674145bd-0db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:f1:fb:77:eb:a6:a3:c2:53:52:c6:95:a3: 1a:d6:82:d5:57:26:f9:6c:19:91:2b:9f:ef:92:36: b3:dd:f6:97:fa:c1:da:94:fd:e4:62:eb:65:bb:e9: 5e:9f:2f:3c:18:13:4f:73:70:45:ef:66:17:24:59: 8b:3b:0a:d3:63:99:ed:07:15:24:27:81:46:9b:76: fb:1b:bb:fa:77:39:ca:16:cb:98:4c:7b:53:10:18: e4:7a:7d:71:bd:85:a3:78:c0:78:3c:2b:f8:24:f1: 4d:9e:24:bf:94:95:dc:13:78:6e:6e:6b:f7:dd:ad: 66:7c:b4:b9:7a:3d:2e:8a:dc:34:e5:40:64:29:10: c8:5f:fc:f8:b1:aa:c7:ee:2b:08:56:30:ce:4b:5c: f8:3f:ac:0d:a2:85:cd:6b:62:a6:08:db:ac:00:97: 3d:20:dc:85:20:e5:2b:1a:f8:6e:0b:fd:03:fb:d6: fb:c7:ce:85:41:ab:2e:ac:05:d2:6c:f8:a2:86:41: 56:fd:66:12:ad:88:b3:20:e8:92:0a:5f:ff:df:65: 61:37:cb:57:f3:dc:94:15:07:60:f0:c8:88:c9:91: 9a:59:20:c6:2a:a9:bb:ac:8f:6b:ab:ad:f9:bf:ac: 24:73:88:25:07:81:b5:11:20:4c:06:8b:25:64:e2: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:00:C6:E0:08:66:FB:B0:97:D6:D5:C1:1D:3A:90:A9:34:E7:A1 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:41:4d:5a:72:ed:3d:e6:db:76:98:27:75:81:4e:8c:0b: 68:2b:8c:e7:89:23:2a:c5:08:3b:b7:30:0e:b9:d3:2b:ea:5e: 65:e3:8e:37:b2:01:c0:73:c3:b5:64:11:87:d5:24:b7:6c:37: 57:42:00:7d:68:70:71:a7:13:92:56:57:7d:37:2b:28:9d:8a: e1:33:8c:fb:25:74:24:14:75:91:3f:9c:06:e4:09:a9:e1:39: 84:fb:73:26:1b:ea:1c:ed:d6:82:74:06:bb:95:7a:86:af:1e: d8:f9:5b:d4:c4:76:e7:3e:4c:49:a6:ff:c4:22:1a:61:32:dd: 79:02:6d:e7:45:4b:1d:ea:8f:ab:2e:5d:6c:28:ca:cf:a8:c0: c8:6f:df:3e:7d:1e:0a:89:71:22:8a:6a:3c:28:7e:91:ad:a6: 3c:17:c5:01:78:b5:bd:eb:bb:50:93:2e:d9:97:93:a3:53:4f: 94:4f:42:41:be:6d:ce:2b:11:4b:08:2a:38:bb:b8:38:d1:78: a4:17:4c:2f:c1:81:a4:67:97:58:df:ee:ad:bf:b1:c7:d5:40: 73:19:48:88:aa:5b:dd:90:f1:d0:1e:0d:94:6a:8a:d0:09:a4: b7:42:c7:45:db:bc:e8:e2:9d:f2:8a:6a:50:08:15:ff:18:b3: 19:d9:d9:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjQxMTIzMDMwMjIxWhcNMjQxMTMwMDMwMjIxWjAYMRYwFAYD VQQDEw02NzQxNDViZC0wZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1vx+3frpqPCU1LGlaMa1oLVVyb5bBmRK5/vkjaz3faX+sHalP3kYutlu+le ny88GBNPc3BF72YXJFmLOwrTY5ntBxUkJ4FGm3b7G7v6dznKFsuYTHtTEBjken1x vYWjeMB4PCv4JPFNniS/lJXcE3hubmv33a1mfLS5ej0uitw05UBkKRDIX/z4sarH 7isIVjDOS1z4P6wNooXNa2KmCNusAJc9INyFIOUrGvhuC/0D+9b7x86FQasurAXS bPiihkFW/WYSrYizIOiSCl//32VhN8tX89yUFQdg8MiIyZGaWSDGKqm7rI9rq635 v6wkc4glB4G1ESBMBoslZOInOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDJAMbg CGb7sJfW1cEdOpCpNOehMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMV0FNWnLtPebbdpgndYFOjAtoK4zniSMqxQg7tzAOudMr6l5l4443 sgHAc8O1ZBGH1SS3bDdXQgB9aHBxpxOSVld9NysonYrhM4z7JXQkFHWRP5wG5Amp 4TmE+3MmG+oc7daCdAa7lXqGrx7Y+VvUxHbnPkxJpv/EIhphMt15Am3nRUsd6o+r Ll1sKMrPqMDIb98+fR4KiXEiimo8KH6RraY8F8UBeLW967tQky7Zl5OjU0+UT0JB vm3OKxFLCCo4u7g40XikF0wvwYGkZ5dY3+6tv7HH1UBzGUiIqlvdkPHQHg2UaorQ CaS3QsdF27zo4p3yimpQCBX/GLMZ2dkT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org