$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: 3XucX1u4PHwFO2uTjaqcMx3qZNBv1DT6jZFPDZudUeI= Subject key identifier: 8A:FF:C4:DA:5B:9A:37:A9:59:54:0B:21:13:ED:90:5E:C1:E6:76:90 Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0566 Signing time: Wed 18 Sep 2024 23:11:58 +0000 Manifest this update: Wed 18 Sep 2024 23:11:58 +0000 Manifest next update: Wed 25 Sep 2024 23:11:58 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: 7/fgw6cOfudCgST8ENo6OxFK/8zQTmZrT89dVMhKN60=) 2: 5704AA34FF1511EBB3AE4C19C4F9AE02.roa (hash: Zf1YLHj5oHWHsvrK9s01PMIRLgfhNzMKFjsTSUpy6B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Sep 18 23:11:58 2024 GMT Not After : Sep 25 23:11:58 2024 GMT Subject: CN=66eb5e3e-ec84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:da:1a:19:df:54:03:cd:5e:c8:9c:a0:a1: 5a:23:cd:3b:ed:5c:32:3f:49:45:8f:02:b1:df:ad: 0f:a6:03:48:51:96:dd:67:9f:e3:5e:55:e9:00:ae: 94:ce:db:6a:87:44:b9:b3:93:b7:c6:1f:d4:ee:c0: fd:c7:49:0d:d1:b7:c6:58:fd:69:8d:e3:58:54:59: e3:ea:58:b8:ad:fa:40:bd:ab:a1:1c:16:f6:1c:d5: be:88:00:68:b5:47:88:c8:13:3d:63:96:15:7c:81: 4a:33:26:78:8c:18:f7:f8:8f:89:d8:14:3f:91:c5: b7:cc:60:b9:b2:f6:55:61:54:f7:c5:f3:a6:b0:b5: 66:3a:7e:a8:75:7a:e2:7c:33:d9:8e:69:ed:b8:67: 03:72:09:40:50:5d:bc:02:6b:71:c4:5e:5e:47:34: e8:01:fb:ab:f8:8e:b8:08:03:1c:19:89:e2:16:74: b9:79:22:1a:e7:5e:b2:11:60:31:63:6b:7a:c6:f1: b2:49:60:fc:a8:5c:7d:2f:b5:78:5c:57:8f:57:5f: eb:8e:c6:65:1e:a4:81:78:4d:61:2d:54:33:b4:cc: 67:0c:72:d2:7c:e7:85:10:bf:15:07:28:6a:78:b1: 5b:e0:fc:45:80:ce:bb:e7:93:22:51:a0:9c:a0:ed: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FF:C4:DA:5B:9A:37:A9:59:54:0B:21:13:ED:90:5E:C1:E6:76:90 X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:83:df:f9:c1:4d:85:19:d5:f7:db:ff:e6:c3:1f:e9:21:33: 1c:8e:d9:dd:23:38:73:71:64:97:94:94:8b:da:63:19:30:cd: 42:a8:72:b9:32:a7:c5:52:b1:9e:ef:84:4f:a9:e2:90:1b:02: 87:6a:09:d7:69:97:78:fd:57:02:15:36:25:ce:54:6c:8c:72: 97:7b:96:d5:ab:93:5c:55:3f:7b:ea:51:a0:cd:e5:58:f7:3e: 30:01:9f:34:a4:16:cf:c8:12:6d:7c:35:03:cf:a7:1c:bf:48: 3f:c9:5e:ab:48:43:56:d9:6c:ae:ac:72:cc:b7:05:23:01:cd: 74:a9:cd:7a:15:08:a7:63:75:22:68:fc:95:23:23:36:e3:4f: 45:72:d2:bd:70:ec:10:72:7f:82:d0:d4:f4:18:fb:b6:b2:2e: ba:54:55:14:cb:11:81:1b:c4:36:db:72:d2:6f:de:e3:8f:ed: ef:70:5d:0d:39:62:f5:10:db:dc:0c:17:c8:db:29:7b:13:2d: 39:ed:17:21:85:9f:5a:ac:af:eb:50:1f:4a:0e:b8:56:00:e3: 48:cd:9d:cc:0e:4f:00:41:0f:b8:69:aa:ad:87:3c:35:d1:13: 03:eb:ad:bc:4c:15:20:12:96:42:2b:28:97:da:5b:f4:b0:04: 1a:18:fa:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjQwOTE4MjMxMTU4WhcNMjQwOTI1MjMxMTU4WjAYMRYwFAYD VQQDEw02NmViNWUzZS1lYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RraGhnfVAPNXsicoKFaI8077VwyP0lFjwKx360PpgNIUZbdZ5/jXlXpAK6U zttqh0S5s5O3xh/U7sD9x0kN0bfGWP1pjeNYVFnj6li4rfpAvauhHBb2HNW+iABo tUeIyBM9Y5YVfIFKMyZ4jBj3+I+J2BQ/kcW3zGC5svZVYVT3xfOmsLVmOn6odXri fDPZjmntuGcDcglAUF28AmtxxF5eRzToAfur+I64CAMcGYniFnS5eSIa516yEWAx Y2t6xvGySWD8qFx9L7V4XFePV1/rjsZlHqSBeE1hLVQztMxnDHLSfOeFEL8VByhq eLFb4PxFgM6755MiUaCcoO2T0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr/xNpb mjepWVQLIRPtkF7B5naQMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmg9/5wU2FGdX32//mwx/pITMcjtndIzhzcWSXlJSL2mMZMM1CqHK5 MqfFUrGe74RPqeKQGwKHagnXaZd4/VcCFTYlzlRsjHKXe5bVq5NcVT976lGgzeVY 9z4wAZ80pBbPyBJtfDUDz6ccv0g/yV6rSENW2WyurHLMtwUjAc10qc16FQinY3Ui aPyVIyM2409FctK9cOwQcn+C0NT0GPu2si66VFUUyxGBG8Q223LSb97jj+3vcF0N OWL1ENvcDBfI2yl7Ey057RchhZ9arK/rUB9KDrhWAONIzZ3MDk8AQQ+4aaqthzw1 0RMD6628TBUgEpZCKyiX2lv0sAQaGPqH -----END CERTIFICATE-----Generated at Thu Sep 19 01:12:58 2024 by rpki-client on console-fra.rpki-client.org