$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: eTYc5XTZoKmZnq6wLLlnXXMEmNM4Bzk9wkzVu0x4GSc= Subject key identifier: 5F:69:C8:8A:AE:C0:08:52:5B:E5:5E:3C:64:48:17:EB:6D:30:A7:CD Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 05DE Signing time: Wed 20 Nov 2024 23:03:43 +0000 Manifest this update: Wed 20 Nov 2024 23:03:43 +0000 Manifest next update: Wed 27 Nov 2024 23:03:43 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: q6ktuWCbCeZWq/GGd8KZMDuHZ/Lbu4S5xKtNfwHQPF0=) 2: 5D5E547669CE11EF88C50C0AC4F9AE02.roa (hash: fc9auTKG+hIlrFarx8Wkv+pBuhw4Xp05RpT7At8qEfk=) 3: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=) 4: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=) 5: E1238468F00511EE8BFD5F6FC4F9AE02.roa (hash: NrLjMRjkzXMsXdPRIKu91AJs8S50YyJ5xust/sYGenU=) 6: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=) 7: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=) 8: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=) 9: 5D65041A1BD711EEB9597921C4F9AE02.roa (hash: 0tguVCAYaAyn9w1hHGLli6ifeQjvVH99Nuz9PQZPNtg=) 10: B374FD147A0511EFBB046B51C4F9AE02.roa (hash: KB+zdTdnRAyRFWbM3xFWWbaAHAdDfRggWEokS4XCB+0=) 11: 32774EE811D111EF9084EB51C4F9AE02.roa (hash: xP6a2Fm0PA5GcUsRivI8UKiG6GftNlKvei6R3Wuqt8Q=) 12: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=) 13: 36681EC6684211EEA8658A78C4F9AE02.roa (hash: vHj4xyE4cEEC7fg7MS6uyrE7iNO4U7DE8jLdB+AYCuk=) 14: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=) 15: EF2D020069CC11EFBEEFCC69C4F9AE02.roa (hash: RKMO7Yxm9ro4Gi5lliF8G/+Lvp/QB9Xv1vSjCL9j/mg=) 16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=) 17: 5CF393DE69CE11EF88C50C0AC4F9AE02.roa (hash: XkGSXYt+jU29PIwoBHA1xa5DHyPkfEAuz6UmpE4bA94=) 18: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=) 19: 1CB1C32E69CC11EF85A51547C4F9AE02.roa (hash: Tk7TmPKu6HXa9S0L6i939WD4Cb/7QJ+CpQ5gmwJKHis=) 20: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=) 21: E02E2B08F00511EE8BFD5F6FC4F9AE02.roa (hash: D67HcCmPZVMRZ6kgxnoBquEsUTTWUcwS5Y2chXtyfhw=) 22: 48BA598A180611EF8A144756C4F9AE02.roa (hash: v5rCwgyqRx5u8KidQnrhF0Q+fjIuGy77dHFgS6yCLVM=) 23: BB4096CC69CD11EF8F64CD84C4F9AE02.roa (hash: 09ZVyjF5gVpVLFgZCVLQ4ORM4PSIe53Dw6S2OFQnY2s=) 24: B43DA4A87A0511EFBB046B51C4F9AE02.roa (hash: uyyP5h+kPRaV2Sm/G8u1e0ho1ILi36twOY4MuidYg80=) 25: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=) 26: 5DD8D93A69CE11EF88C50C0AC4F9AE02.roa (hash: fvcTGs4p3eVByjDFfAKi9SiOvj/dS8rUfQKHsXCqlL0=) 27: B5154EE47A0511EFBB046B51C4F9AE02.roa (hash: LHjvnmpgsdSUa0M4lGxgmePTUMZ/FKSE8xNvYAuYcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Nov 20 23:03:43 2024 GMT Not After : Nov 27 23:03:43 2024 GMT Subject: CN=673e6acf-720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:66:4d:a1:3e:a5:ab:27:0a:18:e2:7a:f8: 42:44:2f:3f:26:9d:07:7d:e1:fc:a5:ed:28:5a:ea: a4:d1:5a:9f:32:23:08:84:0e:8d:7b:c9:52:79:3d: d5:87:c0:42:7d:c4:f6:16:92:44:a3:5f:dd:b8:fd: 30:92:9f:66:97:94:10:83:3c:b9:be:fb:20:f2:6c: 5b:73:c8:00:b6:3e:86:c1:1f:75:88:e4:8c:0f:3e: 35:bb:e8:e9:a2:bb:1f:60:cd:27:be:e7:3d:15:ac: 54:ca:fc:c6:2f:a8:1c:e6:1a:95:c8:7c:42:a3:45: 4d:3d:3e:fb:6d:37:f7:57:e2:f4:36:9b:94:25:d0: 59:07:d6:40:66:c5:47:94:96:12:07:dd:45:5a:d6: f3:f7:de:ad:26:46:f7:28:5f:60:f5:cb:da:61:35: a7:2b:4c:3b:cd:2b:9e:52:f4:ce:2e:76:1e:9d:04: 5c:91:3b:a2:5d:77:e6:f8:92:a1:79:67:93:25:be: b4:5d:3a:cf:cc:ee:ed:28:d5:b3:27:7d:46:2c:79: 12:06:b1:9e:05:e1:83:01:c4:68:50:46:25:cd:c2: 29:cd:b4:37:c1:7d:14:56:11:67:7a:40:33:ae:de: d9:4a:f8:c1:10:87:55:12:02:57:21:3c:b3:fa:3e: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:69:C8:8A:AE:C0:08:52:5B:E5:5E:3C:64:48:17:EB:6D:30:A7:CD X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:9d:74:d7:9a:ca:4f:fa:2f:d6:1f:dd:e9:b0:f0:13:ad:2b: 1f:72:6a:7a:a0:e8:a4:f2:c7:43:39:7e:e3:02:53:8b:93:b2: e6:08:09:d8:e3:e6:a9:42:dd:1e:b4:02:1c:dd:34:50:6e:09: ce:46:4e:51:0e:e2:f2:9b:95:39:98:54:28:0e:01:e9:5a:b3: 8f:ca:31:6e:ec:5f:af:d8:6b:de:89:d0:a7:9b:43:77:da:16: 74:94:e0:14:b8:3d:f5:94:22:b2:a0:ac:b4:95:7f:78:f7:7f: 87:48:2b:84:d5:e9:5e:55:fb:44:2d:1c:c6:76:d3:d4:9e:a2: 5b:59:fc:10:e7:43:c3:4b:74:f5:67:bf:55:4e:cb:60:5f:61: ac:28:89:27:24:ad:97:f5:97:1a:b6:62:63:e9:d3:29:f1:c0: 19:e3:a2:42:43:c9:fd:55:22:51:ac:ac:05:78:0f:54:36:76: 7a:3a:5a:e1:02:44:e6:25:83:a5:a1:de:a7:92:3f:a1:5b:30: 18:7b:e3:e8:a9:7c:5f:b9:c9:90:8a:90:83:98:15:02:b4:db: 28:54:1b:76:12:3f:af:9e:c5:b9:eb:ca:99:1a:70:2a:0c:91: 37:18:20:39:7a:e6:2a:d5:47:8f:40:d1:ad:2d:83:5f:7e:a8: fd:1d:2f:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQxMTIwMjMwMzQzWhcNMjQxMTI3MjMwMzQzWjAYMRYwFAYD VQQDEw02NzNlNmFjZi03MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BtmTaE+pasnChjievhCRC8/Jp0HfeH8pe0oWuqk0VqfMiMIhA6Ne8lSeT3V h8BCfcT2FpJEo1/duP0wkp9ml5QQgzy5vvsg8mxbc8gAtj6GwR91iOSMDz41u+jp orsfYM0nvuc9FaxUyvzGL6gc5hqVyHxCo0VNPT77bTf3V+L0NpuUJdBZB9ZAZsVH lJYSB91FWtbz996tJkb3KF9g9cvaYTWnK0w7zSueUvTOLnYenQRckTuiXXfm+JKh eWeTJb60XTrPzO7tKNWzJ31GLHkSBrGeBeGDAcRoUEYlzcIpzbQ3wX0UVhFnekAz rt7ZSvjBEIdVEgJXITyz+j4FEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9pyIqu wAhSW+VePGRIF+ttMKfNMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgnXTXmspP+i/WH93psPATrSsfcmp6oOik8sdDOX7jAlOLk7LmCAnY 4+apQt0etAIc3TRQbgnORk5RDuLym5U5mFQoDgHpWrOPyjFu7F+v2GveidCnm0N3 2hZ0lOAUuD31lCKyoKy0lX9493+HSCuE1eleVftELRzGdtPUnqJbWfwQ50PDS3T1 Z79VTstgX2GsKIknJK2X9ZcatmJj6dMp8cAZ46JCQ8n9VSJRrKwFeA9UNnZ6Olrh AkTmJYOlod6nkj+hWzAYe+PoqXxfucmQipCDmBUCtNsoVBt2Ej+vnsW568qZGnAq DJE3GCA5euYq1UePQNGtLYNffqj9HS+r -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:18 2024 by rpki-client on console-fra.rpki-client.org