$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: 4QasZgRzLQ6rEM3Tfl+BLniTmgqKKb2ncEcoA7/JoGA= Subject key identifier: 58:96:AF:20:26:25:C4:AE:3D:CC:D3:2B:98:45:52:C7:72:B3:B6:DE Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 0B Signing time: Sat 23 Nov 2024 06:02:45 +0000 Manifest this update: Sat 23 Nov 2024 06:02:44 +0000 Manifest next update: Sat 30 Nov 2024 06:02:44 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: 0YihIPqVpimUN0Mm6ZqqsNg/ZbLvNcXzMx4Pvdv/i8E=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: NvVW1egmPiHSwj4KXew0q649a1yhcF9ppuNr/Hl7yDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Nov 23 06:02:44 2024 GMT Not After : Nov 30 06:02:44 2024 GMT Subject: CN=67417004-4b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:c0:fc:04:8c:07:3e:f8:09:ad:ef:25:62: e1:01:dd:5f:33:8d:10:84:4f:95:51:5c:4b:65:9c: 01:da:ea:b8:50:df:c8:92:76:f5:52:89:26:44:d1: 57:92:0b:9b:7a:62:c5:73:f0:89:8a:0d:ec:a7:57: 4f:8b:8b:de:6f:ef:ee:b8:2f:c5:d9:36:a8:a1:73: 91:eb:68:8d:7f:bc:36:26:55:8e:2c:f3:59:d5:04: 95:fe:0f:7e:6b:7f:0c:80:e8:1c:bb:58:6c:d5:4a: 21:c4:df:96:d5:2c:c3:9d:e7:95:17:21:11:f1:33: ae:db:a0:d1:80:32:17:01:7a:ef:13:f6:6b:a6:0e: b2:65:b9:e2:ec:78:91:ba:75:96:a0:48:71:e7:dd: 22:2a:d5:9f:a2:5c:de:0e:0f:7d:f9:65:13:d7:7d: 01:19:15:05:db:0d:aa:20:e4:29:68:2c:ff:3d:9e: 33:c7:c0:81:0c:8d:7e:3e:98:b9:1f:46:ad:a8:69: 14:ee:fc:35:4d:ea:62:c1:37:7e:6f:ee:19:3e:7f: 3a:36:a1:ce:e9:13:aa:3e:60:2c:d9:03:29:be:4e: 05:0d:0f:4a:9a:f4:dd:db:de:ed:a0:9b:13:a4:a7: 29:8f:a7:a3:80:d5:5b:46:c9:d8:04:0c:38:eb:0e: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:96:AF:20:26:25:C4:AE:3D:CC:D3:2B:98:45:52:C7:72:B3:B6:DE X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:72:9a:06:30:50:34:d4:d1:6c:93:6d:eb:b0:f6:ad:55: 7e:5b:9d:58:2f:f7:d4:bd:6f:4e:3b:9f:f5:ec:30:0f:98:51: 70:30:9c:70:ae:99:7a:4d:cc:29:c2:4c:c5:db:f8:3f:37:35: e8:ef:e7:b7:9b:63:cb:2e:bb:70:38:8d:59:01:3b:fa:3d:b6: 5b:71:64:16:f9:0a:d0:f7:36:8b:2e:e6:68:ec:bb:da:ac:93: 84:76:2c:8e:fc:cf:de:1c:3d:d8:b8:07:d0:37:6f:d1:c4:6e: d4:85:fb:38:a0:ee:69:8c:13:85:fc:99:9f:21:ee:06:2f:d0: 72:79:88:49:e2:13:ae:c9:aa:f4:5d:f7:14:3a:63:88:65:84: eb:84:60:fb:a2:ee:17:7f:fe:e6:88:2a:ea:23:2b:92:a9:87: 92:9c:bb:17:fe:4d:c9:94:f3:44:d8:5f:ba:ab:15:f0:77:4b: 76:74:1e:7e:5e:8d:2f:ca:e1:75:55:d9:6b:63:e5:71:49:c3: bc:d3:69:05:88:4f:aa:88:74:bf:55:95:1c:fa:6c:69:c4:4c: 16:38:5f:92:bd:50:78:37:78:7c:e8:47:e7:9f:1f:b2:68:ac: af:96:99:25:ce:ca:00:fa:3d:eb:2c:eb:58:52:dc:4c:a5:eb: b3:ff:97:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNDExMjMwNjAyNDRaFw0yNDExMzAwNjAyNDRaMBgxFjAUBgNV BAMTDTY3NDE3MDA0LTRiNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdlMD8BIwHPvgJre8lYuEB3V8zjRCET5VRXEtlnAHa6rhQ38iSdvVSiSZE0VeS C5t6YsVz8ImKDeynV0+Li95v7+64L8XZNqihc5HraI1/vDYmVY4s81nVBJX+D35r fwyA6By7WGzVSiHE35bVLMOd55UXIRHxM67boNGAMhcBeu8T9mumDrJlueLseJG6 dZagSHHn3SIq1Z+iXN4OD335ZRPXfQEZFQXbDaog5CloLP89njPHwIEMjX4+mLkf Rq2oaRTu/DVN6mLBN35v7hk+fzo2oc7pE6o+YCzZAym+TgUND0qa9N3b3u2gmxOk pymPp6OA1VtGydgEDDjrDrstAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWJavICYl xK49zNMrmEVSx3Kztt4wHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OUZFLzM4MDNBQTFDOUIxMjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2 TXdaZHZYUEI4SGRCdmFCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMhcpoGMFA01NFsk23rsPatVX5bnVgv99S9b047n/XsMA+YUXAwnHCu mXpNzCnCTMXb+D83Nejv57ebY8suu3A4jVkBO/o9tltxZBb5CtD3Nosu5mjsu9qs k4R2LI78z94cPdi4B9A3b9HEbtSF+zig7mmME4X8mZ8h7gYv0HJ5iEniE67JqvRd 9xQ6Y4hlhOuEYPui7hd//uaIKuojK5Kph5Kcuxf+TcmU80TYX7qrFfB3S3Z0Hn5e jS/K4XVV2Wtj5XFJw7zTaQWIT6qIdL9VlRz6bGnETBY4X5K9UHg3eHzoR+efH7Jo rK+WmSXOygD6Pess61hS3Eyl67P/l9c= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org