$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: C0bxq/413A5bNxyTlXUxd4R9OYZwehxYXD8MvHHXoE8= Subject key identifier: 08:5F:34:2B:4D:03:73:E1:52:04:47:9C:1A:07:60:F9:E3:47:F5:9A Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 0892 Signing time: Fri 22 Nov 2024 20:19:34 +0000 Manifest this update: Fri 22 Nov 2024 20:19:34 +0000 Manifest next update: Fri 29 Nov 2024 20:19:34 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: 6r1zysio84l49EoL+XMCLPWVYxQqHXOhWyDkwG3UDok=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Nov 22 20:19:34 2024 GMT Not After : Nov 29 20:19:34 2024 GMT Subject: CN=6740e756-62be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:27:9e:2d:58:c6:94:ba:b7:1a:df:62:26: a8:72:50:4c:8f:e3:64:fa:09:c7:dd:6e:2d:14:40: ae:c5:5b:20:0f:d5:32:23:a8:4c:3d:be:5e:3a:ba: da:bf:1f:6e:7d:ec:9f:d2:36:93:59:a8:b5:03:4a: d6:be:1d:f5:4d:c7:28:da:2c:d8:d9:b2:ae:47:af: b7:3d:44:af:eb:e5:7b:57:05:e3:8e:32:2c:7a:a0: 4f:b2:fd:69:40:2c:76:e8:8b:3c:08:59:23:cd:ff: be:61:3d:dc:2e:c0:ad:75:51:00:05:71:5f:a0:95: 19:f8:ed:cb:3d:7a:4e:dc:39:9e:63:b1:ed:8c:33: e3:10:a9:11:da:4d:b2:6c:4a:66:c5:87:71:f7:1f: 44:3e:8f:2c:ed:53:f4:99:d6:86:76:98:76:ae:87: 99:37:bc:9c:83:3b:45:7a:60:79:ee:db:03:ee:93: 09:19:6f:a3:b1:16:14:5d:e3:82:bf:72:ef:52:bf: b2:a0:5e:d0:23:28:7d:f4:50:84:f2:5c:0d:cb:52: 7f:c7:3b:b4:13:bd:94:5c:38:07:6f:6b:2d:16:98: 14:5e:c5:8a:d9:c3:1d:24:70:48:bf:9e:42:d2:5c: f0:87:6f:2b:13:13:4e:3b:8e:37:80:a6:df:e0:53: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:34:2B:4D:03:73:E1:52:04:47:9C:1A:07:60:F9:E3:47:F5:9A X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3b:02:f7:57:0c:ac:62:fa:91:52:bb:7a:5c:7e:d7:7f:76: fb:23:2b:58:9e:e0:a7:c2:9d:1f:5b:ff:ac:94:6e:06:de:85: d0:fd:c7:34:ec:f1:ae:6d:99:58:87:d5:ce:58:59:9e:94:c2: 81:d9:9e:e4:b8:56:82:9e:65:88:27:d5:5c:95:93:c3:77:02: 69:75:93:fa:aa:2d:38:8a:a7:80:45:2c:2f:aa:7b:3e:f5:3a: f8:e1:5e:6a:05:10:c6:be:15:b4:7a:d1:71:0e:60:37:99:4e: 25:22:22:1b:44:5a:e5:85:1b:46:0e:f7:44:31:c8:ba:b5:90: 04:f5:0c:0c:14:78:d2:a6:12:b8:cb:2e:b3:63:ba:00:72:36: 3d:1f:a1:86:5a:4b:4f:18:85:ff:3a:2e:47:30:27:4a:64:78: 23:d7:1b:0a:c4:ea:bd:7b:bd:18:f9:6b:63:4b:db:a5:67:fa: a7:7b:dc:81:aa:7a:00:02:bf:30:b0:bf:c0:44:f5:47:85:bb: 70:f7:41:8d:69:c6:aa:02:fe:17:72:0d:e6:05:1b:0f:a2:ae: f4:a9:6b:6b:27:11:4c:a8:04:5b:6d:b1:68:69:80:5c:49:8b: 68:bd:e7:72:d3:88:94:18:a7:70:67:54:ad:5f:50:14:c9:54: 4d:78:3c:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjQxMTIyMjAxOTM0WhcNMjQxMTI5MjAxOTM0WjAYMRYwFAYD VQQDEw02NzQwZTc1Ni02MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaAnni1YxpS6txrfYiaoclBMj+Nk+gnH3W4tFECuxVsgD9UyI6hMPb5eOrra vx9ufeyf0jaTWai1A0rWvh31Tcco2izY2bKuR6+3PUSv6+V7VwXjjjIseqBPsv1p QCx26Is8CFkjzf++YT3cLsCtdVEABXFfoJUZ+O3LPXpO3DmeY7HtjDPjEKkR2k2y bEpmxYdx9x9EPo8s7VP0mdaGdph2roeZN7ycgztFemB57tsD7pMJGW+jsRYUXeOC v3LvUr+yoF7QIyh99FCE8lwNy1J/xzu0E72UXDgHb2stFpgUXsWK2cMdJHBIv55C 0lzwh28rExNOO443gKbf4FOQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhfNCtN A3PhUgRHnBoHYPnjR/WaMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqOwL3VwysYvqRUrt6XH7Xf3b7IytYnuCnwp0fW/+slG4G3oXQ/cc0 7PGubZlYh9XOWFmelMKB2Z7kuFaCnmWIJ9VclZPDdwJpdZP6qi04iqeARSwvqns+ 9Tr44V5qBRDGvhW0etFxDmA3mU4lIiIbRFrlhRtGDvdEMci6tZAE9QwMFHjSphK4 yy6zY7oAcjY9H6GGWktPGIX/Oi5HMCdKZHgj1xsKxOq9e70Y+WtjS9ulZ/qne9yB qnoAAr8wsL/ARPVHhbtw90GNacaqAv4Xcg3mBRsPoq70qWtrJxFMqARbbbFoaYBc SYtovedy04iUGKdwZ1StX1AUyVRNeDz/ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org