$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: 6+4XLAgNFe3gjo1Gdfk6LIWzh0zjkjr2MT/YheuIe2g= Subject key identifier: 34:3A:82:45:68:6A:65:61:31:2B:AC:AA:5E:C0:19:5E:07:D3:06:9C Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 05E8 Signing time: Fri 22 Nov 2024 22:28:19 +0000 Manifest this update: Fri 22 Nov 2024 22:28:19 +0000 Manifest next update: Fri 29 Nov 2024 22:28:19 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: 2c822tmCxrRfDTNBT2XuAaAPXmFqIWjUQEvcDwB9IZ8=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Nov 22 22:28:19 2024 GMT Not After : Nov 29 22:28:19 2024 GMT Subject: CN=67410583-b12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:fd:3d:59:61:30:4c:a6:dd:52:2e:ff:23: 06:92:66:bb:cb:56:11:0e:ba:dd:8f:4f:cf:02:02: d5:d0:54:97:20:fa:c7:73:d9:1c:37:89:d2:68:93: eb:40:ae:6d:8e:21:de:f4:9e:52:81:32:c5:c6:80: a2:17:ee:ea:e7:40:22:e8:18:04:97:d8:3b:b5:6c: 29:bd:a2:e7:3e:89:2e:56:5c:4f:4a:8d:88:15:0c: eb:e9:99:1b:01:38:ad:94:c5:af:85:21:f4:bd:a8: 71:e5:92:15:86:a2:6b:b5:92:b0:16:e4:d9:00:b0: aa:e6:54:c4:75:7f:e7:9c:78:2e:2e:06:26:5d:9e: ef:58:77:03:4a:ca:0a:be:c5:77:04:02:ce:f4:4c: 66:30:0d:51:4c:f8:1c:9e:a7:6a:1f:7f:71:f7:f0: 8c:e7:c7:87:71:67:a2:aa:76:30:1c:ff:09:09:25: d8:f2:ef:a8:e5:5e:ec:e9:23:4f:0c:2b:39:c9:b9: c7:dd:03:9b:42:6a:17:28:25:dd:56:95:c0:82:b8: 72:22:87:5d:49:c1:54:68:22:5b:4a:0d:45:5b:13: 6d:74:af:1b:a0:d5:cb:76:2a:d4:41:5e:ae:77:1e: 48:bc:9c:a4:8e:9b:4b:87:43:9c:77:52:c9:da:40: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:82:45:68:6A:65:61:31:2B:AC:AA:5E:C0:19:5E:07:D3:06:9C X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:53:dd:e1:b6:5d:2c:50:a0:20:e9:48:a0:3a:8e:66:7b:04: 55:fc:b3:72:eb:ab:1f:2a:75:c1:89:0f:ae:51:57:39:a4:03: d2:22:f7:0d:0d:29:7a:77:f9:95:54:06:79:2d:4d:33:d5:60: c4:52:ea:40:12:e0:9d:f5:64:8c:bc:42:c4:ba:1f:c9:cd:af: 13:0c:0b:e2:88:d8:c2:89:e7:e6:d3:c6:bc:82:1b:50:78:3a: dd:42:02:33:52:24:2d:a5:f3:c5:72:ee:99:4d:56:86:c8:f8: 49:51:59:d4:8b:6a:9d:fc:38:ac:2d:2f:32:3f:9b:51:fe:78: da:a1:fe:d4:b9:a7:62:51:25:20:12:cd:37:c8:d8:91:fd:d2: ff:63:ab:cb:00:0f:97:48:b8:c1:3c:11:64:98:78:b8:e9:27: 4b:fb:4f:77:f2:2f:8b:3a:93:5f:06:fe:80:6e:28:dd:d1:f2: db:94:69:b3:70:ab:72:57:25:61:f2:b3:aa:9d:89:39:dd:e4: ac:79:f9:67:17:3a:84:29:43:6d:6e:ea:3d:08:f7:e9:e4:4a: 6e:ba:48:a3:98:ed:a2:dd:78:25:ab:63:f7:20:4e:78:81:41: 2d:0e:bd:d5:5c:eb:6e:90:11:4d:dd:9e:c7:27:fa:b6:19:f1: 64:08:0f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjQxMTIyMjIyODE5WhcNMjQxMTI5MjIyODE5WjAYMRYwFAYD VQQDEw02NzQxMDU4My1iMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN39PVlhMEym3VIu/yMGkma7y1YRDrrdj0/PAgLV0FSXIPrHc9kcN4nSaJPr QK5tjiHe9J5SgTLFxoCiF+7q50Ai6BgEl9g7tWwpvaLnPokuVlxPSo2IFQzr6Zkb ATitlMWvhSH0vahx5ZIVhqJrtZKwFuTZALCq5lTEdX/nnHguLgYmXZ7vWHcDSsoK vsV3BALO9ExmMA1RTPgcnqdqH39x9/CM58eHcWeiqnYwHP8JCSXY8u+o5V7s6SNP DCs5ybnH3QObQmoXKCXdVpXAgrhyIoddScFUaCJbSg1FWxNtdK8boNXLdirUQV6u dx5IvJykjptLh0Ocd1LJ2kAJIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ6gkVo amVhMSusql7AGV4H0wacMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXU93htl0sUKAg6UigOo5mewRV/LNy66sfKnXBiQ+uUVc5pAPSIvcN DSl6d/mVVAZ5LU0z1WDEUupAEuCd9WSMvELEuh/Jza8TDAviiNjCiefm08a8ghtQ eDrdQgIzUiQtpfPFcu6ZTVaGyPhJUVnUi2qd/DisLS8yP5tR/njaof7UuadiUSUg Es03yNiR/dL/Y6vLAA+XSLjBPBFkmHi46SdL+0938i+LOpNfBv6Abijd0fLblGmz cKtyVyVh8rOqnYk53eSseflnFzqEKUNtbuo9CPfp5EpuukijmO2i3Xglq2P3IE54 gUEtDr3VXOtukBFN3Z7HJ/q2GfFkCA/a -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org