$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: xFjIDvLZA74mKSb+0bKNtbnqssJYJfUBogvJp7y/XI0= Subject key identifier: 18:7E:84:73:EE:D7:FE:8E:09:05:BC:B4:C7:5C:66:49:4C:D3:47:9C Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 08EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 08D3 Signing time: Fri 22 Nov 2024 20:13:45 +0000 Manifest this update: Fri 22 Nov 2024 20:13:45 +0000 Manifest next update: Fri 29 Nov 2024 20:13:45 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: TlUeTwwLiJ4RuXxPdKXIC5FaSUFfGinVX3kM4CfPpnM=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) 3: E8BAA0960FDB11ED9718606AC4F9AE02.roa (hash: i7iraVaWgeYTrEepwoDYPnm8jXrR+7EK57g+1pAcXBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Nov 22 20:13:45 2024 GMT Not After : Nov 29 20:13:45 2024 GMT Subject: CN=6740e5f9-c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:84:63:8e:d5:93:27:d9:1a:3c:e4:f8:1f: 74:9d:a2:7e:8d:ff:8b:2a:b6:7d:bc:30:79:55:e8: 89:5d:58:9e:4c:84:21:25:6b:7d:f1:e3:70:74:d8: 03:4d:f6:cb:0b:bf:5c:ea:31:18:e0:c9:cc:c7:11: 86:04:e2:c2:dc:a0:90:7c:a1:67:12:04:89:ac:b8: 4e:ed:ec:14:93:08:fd:7f:2c:73:76:8b:85:7c:7d: c3:b7:e1:34:70:4f:7b:2b:8b:79:77:a6:9f:de:c0: c5:2b:1b:eb:62:44:48:a1:6f:6d:d7:ac:42:00:e7: d5:c0:a2:fc:42:5d:3d:6d:3e:7e:5c:4d:8c:75:6c: ee:30:23:e2:94:69:35:ff:fb:b2:36:b7:26:3b:56: 60:53:41:23:63:d4:18:a4:1f:61:73:c3:4e:e4:e6: 76:38:21:35:ef:1f:59:0c:bc:bb:b1:5d:e6:ca:be: 60:ee:e7:7c:e7:9e:94:4a:48:a1:b8:25:9a:7b:1e: dc:6b:7a:0d:b3:0e:f2:3b:0c:49:bd:79:30:5e:ee: 82:00:fb:32:c4:2b:dc:da:be:76:5b:9c:76:28:0d: 07:d0:55:c0:52:e7:ba:a1:7d:f0:6d:18:39:50:8e: fa:2e:cb:61:63:87:d4:83:98:21:66:94:66:bd:4c: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:84:73:EE:D7:FE:8E:09:05:BC:B4:C7:5C:66:49:4C:D3:47:9C X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ab:13:64:08:6b:6c:90:ea:ff:4a:35:1b:4d:fe:d4:31:a4: 41:1d:87:df:66:46:db:5c:84:8e:6a:84:3b:f7:3c:07:c1:5c: b4:a1:57:a7:0f:5e:fd:2b:fa:68:e2:82:77:87:20:95:1b:38: 17:18:f4:20:01:51:eb:bd:90:a1:fa:d3:67:c1:44:7a:66:02: b2:4f:ae:46:69:0e:40:07:e9:7f:08:d6:ad:d6:2e:e9:62:f4: 76:04:35:79:35:2e:fa:92:51:10:b3:2c:67:e9:4d:f7:10:d7: 1d:3b:a1:dc:50:42:ac:15:1c:11:03:6e:3d:09:3d:03:d5:86: 77:66:b5:05:f4:0d:f9:8b:6d:38:f2:ca:07:3c:33:cc:e5:c1: 00:2d:df:47:47:df:7f:b5:14:a3:e7:85:f2:45:68:98:e9:a5: 04:05:07:bb:fa:30:70:97:93:50:10:c8:99:35:21:77:61:d2: 46:eb:e7:4e:35:2d:74:09:4b:2b:c0:5a:9d:bc:18:69:fc:a9: 9e:3e:4a:12:3d:01:04:65:3d:0b:9a:b8:33:ac:2c:28:fe:26: 2d:c0:86:d2:99:3f:aa:c9:dd:64:57:f5:e1:16:db:e3:4a:7d: 53:0c:a3:0f:d7:31:ae:d4:01:58:f5:62:18:06:f3:45:21:3f: 97:32:f4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjQxMTIyMjAxMzQ1WhcNMjQxMTI5MjAxMzQ1WjAYMRYwFAYD VQQDEw02NzQwZTVmOS1jMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4WEY47VkyfZGjzk+B90naJ+jf+LKrZ9vDB5VeiJXVieTIQhJWt98eNwdNgD TfbLC79c6jEY4MnMxxGGBOLC3KCQfKFnEgSJrLhO7ewUkwj9fyxzdouFfH3Dt+E0 cE97K4t5d6af3sDFKxvrYkRIoW9t16xCAOfVwKL8Ql09bT5+XE2MdWzuMCPilGk1 //uyNrcmO1ZgU0EjY9QYpB9hc8NO5OZ2OCE17x9ZDLy7sV3myr5g7ud8556USkih uCWaex7ca3oNsw7yOwxJvXkwXu6CAPsyxCvc2r52W5x2KA0H0FXAUue6oX3wbRg5 UI76LsthY4fUg5ghZpRmvUyOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh+hHPu 1/6OCQW8tMdcZklM00ecMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVqxNkCGtskOr/SjUbTf7UMaRBHYffZkbbXISOaoQ79zwHwVy0oVen D179K/po4oJ3hyCVGzgXGPQgAVHrvZCh+tNnwUR6ZgKyT65GaQ5AB+l/CNat1i7p YvR2BDV5NS76klEQsyxn6U33ENcdO6HcUEKsFRwRA249CT0D1YZ3ZrUF9A35i204 8soHPDPM5cEALd9HR99/tRSj54XyRWiY6aUEBQe7+jBwl5NQEMiZNSF3YdJG6+dO NS10CUsrwFqdvBhp/KmePkoSPQEEZT0LmrgzrCwo/iYtwIbSmT+qyd1kV/XhFtvj Sn1TDKMP1zGu1AFY9WIYBvNFIT+XMvSO -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org