$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: fyzD1cCBGzLdxxbtTptnEnBpidDUjH0X81ouclECsfo= Subject key identifier: 59:7F:74:72:AF:9F:55:4C:56:5F:4E:8E:11:5D:38:37:D9:3D:16:CF Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 1124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 111C Signing time: Fri 22 Nov 2024 17:16:37 +0000 Manifest this update: Fri 22 Nov 2024 17:16:37 +0000 Manifest next update: Fri 29 Nov 2024 17:16:37 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: koMHr8hyf6agQKNr7kJJOaMy2xRZaUf1dwfwim2wMYY=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: leXjljNrFgUPywu1Fh/An2qOclMc2UjOvRA+isA8p/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4388 (0x1124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Nov 22 17:16:37 2024 GMT Not After : Nov 29 17:16:37 2024 GMT Subject: CN=6740bc75-576e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:0d:01:1f:d0:6a:ce:96:84:a7:25:cf:a3: 6d:8e:d2:20:5d:3f:e3:c4:5e:86:91:71:ac:ee:75: e2:10:ba:f1:3b:6e:27:38:9e:95:63:1b:58:a8:ec: 4d:b5:52:ff:4d:fa:ea:6a:fa:31:5f:a4:4a:f0:ca: 82:06:be:cd:31:85:de:b0:3e:19:e2:e9:38:c1:08: 0f:cf:53:7b:be:6f:a1:47:36:60:9c:b6:f1:10:03: b2:77:a9:74:04:a1:b5:0a:11:e8:58:18:b9:2a:69: 5f:00:1b:9f:43:aa:e6:bf:6c:54:1c:15:d1:49:10: 95:de:00:ba:a2:fe:96:18:aa:0f:ba:78:5b:14:f0: c2:07:c9:b1:f5:ce:64:29:63:a8:bb:9b:c9:73:e1: f4:65:32:2b:77:48:16:13:5e:db:b6:b8:e7:1b:67: 37:6a:9b:c0:74:e4:b1:74:27:e8:21:a2:ef:02:6a: fa:32:d5:f7:19:99:8c:f8:b4:25:6c:6f:a0:54:44: a5:cf:78:44:ad:e1:09:d7:2e:65:82:31:11:07:2a: 47:9d:fc:ca:1d:5e:33:61:5c:fb:f3:66:e0:86:d6: 61:36:e4:22:78:a4:21:9e:6c:31:c5:24:3d:cd:70: c3:45:21:36:d6:3b:fe:25:d8:85:53:a6:25:45:d6: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:74:72:AF:9F:55:4C:56:5F:4E:8E:11:5D:38:37:D9:3D:16:CF X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:71:1b:73:00:40:3b:5f:66:7d:7e:95:95:40:32:84:51:17: bd:a3:75:e4:c6:a0:77:2d:0f:eb:ed:88:da:66:7f:41:43:c9: 53:ee:b5:d6:05:25:6d:0f:63:ab:6c:3f:57:13:f0:d5:cf:02: 5e:e1:ae:53:cc:ac:74:92:09:85:97:55:e0:2e:4a:ef:88:a6: bf:8b:b4:9d:78:9f:f5:e6:71:93:3e:40:a1:32:bc:9a:66:f7: 30:d3:9d:94:b1:75:d7:1e:89:ab:02:28:ce:84:ce:16:8b:ee: 99:b8:b6:62:7c:41:94:e4:d4:c1:87:5a:dd:eb:4a:e9:53:aa: e5:e5:8b:47:2c:00:77:c5:58:11:45:f5:5e:59:d6:a0:34:bf: c9:21:66:8b:c3:70:be:9e:e8:c7:09:50:98:76:ba:05:1c:a0: 30:c2:fc:f1:01:db:92:23:e2:7d:44:a4:24:10:c6:1e:c2:1a: 07:ba:94:a0:6b:ce:4c:c5:1f:f7:ee:e0:58:1f:27:8f:3a:f6: f7:4f:06:63:8e:a5:f4:84:8e:11:54:cb:ac:48:3c:0d:2e:8c: ae:b0:e7:4c:7c:b3:5d:70:86:cc:08:99:f7:87:a8:33:fe:59: ad:a3:35:89:99:3c:c3:91:b0:b4:46:77:a7:0e:ff:62:b5:79: 0a:2f:c4:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjQxMTIyMTcxNjM3WhcNMjQxMTI5MTcxNjM3WjAYMRYwFAYD VQQDEw02NzQwYmM3NS01NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjQNAR/Qas6WhKclz6NtjtIgXT/jxF6GkXGs7nXiELrxO24nOJ6VYxtYqOxN tVL/TfrqavoxX6RK8MqCBr7NMYXesD4Z4uk4wQgPz1N7vm+hRzZgnLbxEAOyd6l0 BKG1ChHoWBi5KmlfABufQ6rmv2xUHBXRSRCV3gC6ov6WGKoPunhbFPDCB8mx9c5k KWOou5vJc+H0ZTIrd0gWE17btrjnG2c3apvAdOSxdCfoIaLvAmr6MtX3GZmM+LQl bG+gVESlz3hEreEJ1y5lgjERBypHnfzKHV4zYVz782bghtZhNuQieKQhnmwxxSQ9 zXDDRSE21jv+JdiFU6YlRdaf1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl/dHKv n1VMVl9OjhFdODfZPRbPMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCacRtzAEA7X2Z9fpWVQDKEURe9o3XkxqB3LQ/r7YjaZn9BQ8lT7rXW BSVtD2OrbD9XE/DVzwJe4a5TzKx0kgmFl1XgLkrviKa/i7SdeJ/15nGTPkChMrya Zvcw052UsXXXHomrAijOhM4Wi+6ZuLZifEGU5NTBh1rd60rpU6rl5YtHLAB3xVgR RfVeWdagNL/JIWaLw3C+nujHCVCYdroFHKAwwvzxAduSI+J9RKQkEMYewhoHupSg a85MxR/37uBYHyePOvb3TwZjjqX0hI4RVMusSDwNLoyusOdMfLNdcIbMCJn3h6gz /lmtozWJmTzDkbC0RnenDv9itXkKL8Tp -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org