$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: 5GPWQZXwtaXejDdE7XbabOzsLFNVcA0RM5w4ieh+rpc= Subject key identifier: 65:46:FE:0F:D9:4F:18:0A:65:3F:99:A5:75:2A:D9:3E:09:53:16:3C Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 017A Signing time: Sat 23 Nov 2024 02:07:19 +0000 Manifest this update: Sat 23 Nov 2024 02:07:18 +0000 Manifest next update: Sat 30 Nov 2024 02:07:18 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: 7fvGSifU2EJz0kJzu69H6y82Xok0fkAce0PG43rkuTE=) 2: FEFB8698666C11EE99E97C1CC4F9AE02.roa (hash: 176XxzfzBjk8/c0cHQLL3AuB2K5c8na4rKzTdeIsnp8=) 3: 671373E6666B11EEAB1E227CC4F9AE02.roa (hash: BosxTod83Vng94xa6eeQRzzAw/qSDphDhDUbbXlhl0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Nov 23 02:07:18 2024 GMT Not After : Nov 30 02:07:18 2024 GMT Subject: CN=674138d6-e68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:c8:dd:0a:68:55:f0:08:41:82:17:90:ae: 1d:73:5b:a7:89:2b:74:24:48:9e:93:d5:c8:7b:d2: 4c:4b:27:c0:e3:ef:35:92:cb:e1:ba:3e:0e:7e:7a: a9:95:0b:33:88:7e:4b:fb:80:ce:cb:40:f3:5a:ed: 7f:dc:c3:40:87:40:38:2e:d4:ff:d2:03:d0:9e:5e: 26:5d:36:24:69:30:66:f5:32:7d:1e:a4:74:bf:65: 66:87:35:f6:e5:d8:bc:6c:09:b3:37:b0:18:72:91: 6f:c4:47:af:1e:1a:52:26:e9:8f:99:c2:08:f1:ba: fa:2f:d0:4c:3e:db:15:29:73:fc:79:c5:93:aa:e6: 7f:ae:7e:ab:f4:4e:d8:7c:0c:b1:d1:5d:04:31:8e: 08:97:68:39:69:3e:f0:6a:32:a5:6f:da:97:fc:e8: 63:94:f6:f7:4a:08:18:a0:26:91:7b:35:ea:c2:dc: 25:ef:40:18:e4:54:95:aa:93:d1:10:46:ff:ff:88: de:af:d5:63:ee:56:f7:71:a1:d0:3f:3c:99:17:56: 5b:9f:41:51:c7:fa:11:5f:de:6a:9e:9f:75:69:ec: b1:9d:35:eb:4b:d5:90:26:7a:07:16:e9:f8:6e:47: c8:fc:02:66:a1:be:d0:cf:a4:49:0a:c4:b6:82:f4: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:FE:0F:D9:4F:18:0A:65:3F:99:A5:75:2A:D9:3E:09:53:16:3C X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:4c:6b:17:6b:d9:ae:f8:f8:b6:c5:7d:8e:a2:a8:9a:94: 1d:02:9a:aa:6e:c0:c4:63:2c:16:2e:29:8b:d2:fb:a7:d3:18: d4:e3:fc:33:81:d7:9d:3c:2f:22:54:d2:3d:42:fa:87:97:41: 7a:3d:2f:12:bb:c7:fc:9d:d6:93:01:2d:ba:56:0a:cd:2e:c8: 56:4a:9a:c8:bf:21:98:af:c6:f0:5e:6b:d4:a7:12:74:88:7f: 28:d0:ae:21:a3:89:cc:c7:4f:97:20:53:e6:4e:f4:56:f5:83: a2:70:4a:04:eb:75:5a:51:7f:ef:0e:aa:ea:70:3f:f7:20:ab: 7f:d0:dd:e6:06:51:02:14:cd:a8:1e:05:fa:c1:60:d3:c3:32: c6:a7:d7:ed:6a:ce:30:4c:f5:85:9f:80:be:45:e9:03:28:30: 6b:f6:37:fd:b8:c2:db:c6:24:f8:81:45:1f:79:6a:2e:bf:24: 66:b7:9f:78:25:15:5d:7d:d4:04:37:80:e6:18:80:47:57:1a: fa:74:fc:8d:29:e6:71:cd:e3:5e:36:18:ff:e9:04:35:7e:cd: 8a:99:5c:91:6c:96:b8:c2:ea:92:d1:58:94:6a:1d:af:b5:22: 16:a7:fb:e1:e1:b6:0f:6b:b0:53:19:65:bb:c0:91:46:de:29: 1a:db:a2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjQxMTIzMDIwNzE4WhcNMjQxMTMwMDIwNzE4WjAYMRYwFAYD VQQDEw02NzQxMzhkNi1lNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhLI3QpoVfAIQYIXkK4dc1uniSt0JEiek9XIe9JMSyfA4+81ksvhuj4Ofnqp lQsziH5L+4DOy0DzWu1/3MNAh0A4LtT/0gPQnl4mXTYkaTBm9TJ9HqR0v2VmhzX2 5di8bAmzN7AYcpFvxEevHhpSJumPmcII8br6L9BMPtsVKXP8ecWTquZ/rn6r9E7Y fAyx0V0EMY4Il2g5aT7wajKlb9qX/OhjlPb3SggYoCaRezXqwtwl70AY5FSVqpPR EEb//4jer9Vj7lb3caHQPzyZF1Zbn0FRx/oRX95qnp91aeyxnTXrS9WQJnoHFun4 bkfI/AJmob7Qz6RJCsS2gvS9WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVG/g/Z TxgKZT+ZpXUq2T4JUxY8MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1UxrF2vZrvj4tsV9jqKompQdApqqbsDEYywWLimL0vun0xjU4/wz gdedPC8iVNI9QvqHl0F6PS8Su8f8ndaTAS26VgrNLshWSprIvyGYr8bwXmvUpxJ0 iH8o0K4ho4nMx0+XIFPmTvRW9YOicEoE63VaUX/vDqrqcD/3IKt/0N3mBlECFM2o HgX6wWDTwzLGp9ftas4wTPWFn4C+RekDKDBr9jf9uMLbxiT4gUUfeWouvyRmt594 JRVdfdQEN4DmGIBHVxr6dPyNKeZxzeNeNhj/6QQ1fs2KmVyRbJa4wuqS0ViUah2v tSIWp/vh4bYPa7BTGWW7wJFG3ika26K3 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org