$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: 3Qv8zQmm27CgK/DGn4Pan7FtNeaLAGdmk+gXji1Hl6I= Subject key identifier: 9C:55:00:B7:E5:37:18:60:E0:7E:19:BB:95:38:9E:3E:06:E4:A6:EB Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 08B1 Signing time: Fri 22 Nov 2024 20:14:20 +0000 Manifest this update: Fri 22 Nov 2024 20:14:20 +0000 Manifest next update: Fri 29 Nov 2024 20:14:20 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: b2eRzcR/z0mzzn7hcGm4lo+qOp/rKNEvi5jMMEhQzuQ=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: Nx148Hia3mtZBzFRIhXoxgU+sJRRy0O36TW1Esz7mxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Nov 22 20:14:20 2024 GMT Not After : Nov 29 20:14:20 2024 GMT Subject: CN=6740e61c-c121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:cd:22:11:df:86:9b:6e:ca:2d:8a:46:2d: 73:c4:4c:a1:1c:93:94:34:08:e0:ba:e0:3e:0f:80: d1:98:66:67:14:a6:83:8e:08:45:f2:06:44:f0:fc: dd:00:48:84:aa:c0:ab:7c:a0:5b:70:8d:10:81:7a: b0:90:91:f5:d7:53:b6:03:7a:cf:4a:d3:33:1c:10: 59:ee:48:7b:b4:b2:a2:f3:90:c9:66:0f:c9:1a:36: 19:c1:6b:27:a3:14:15:0b:14:15:61:a7:fb:03:d5: 77:d1:26:74:5a:38:0c:3c:70:95:84:74:c6:d1:34: 52:75:ce:82:db:81:e7:64:8b:3c:ec:39:86:77:ee: d1:dd:38:dc:60:5f:12:7f:f7:dd:ca:18:92:53:3c: 13:ce:39:f4:70:f1:cc:5a:43:44:78:01:ab:ae:6e: 35:f0:0b:8e:84:ff:49:76:2d:95:08:99:15:f4:1d: cb:bd:91:fb:1c:b2:54:27:04:1f:42:b5:8c:2a:30: 79:32:36:54:5a:64:ae:0b:cb:d4:31:f1:ca:4a:99: 96:a0:7f:08:9a:c8:9f:73:e5:78:de:47:61:ce:d5: 2a:57:47:04:83:5d:ee:5c:aa:24:1f:3c:e5:a9:27: ec:c1:57:a6:4d:55:10:8a:86:b1:2f:cc:0d:18:b1: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:55:00:B7:E5:37:18:60:E0:7E:19:BB:95:38:9E:3E:06:E4:A6:EB X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:88:54:a5:d1:f1:dc:3e:73:da:98:ba:39:9a:57:4f:95:a3: 99:92:b0:39:6e:7b:10:c2:ab:58:68:83:de:cb:ec:45:d5:2d: 0a:e4:f9:7c:16:e0:4c:ae:b0:c3:18:77:d7:73:20:47:5e:ba: 03:32:6b:6e:a2:b9:83:d6:75:36:ce:f5:36:1a:a4:35:ee:92: c2:5b:5c:40:fa:44:26:68:01:ab:8e:50:73:6a:39:1b:57:14: 7a:3b:85:bb:e7:bc:58:86:c8:15:2b:9d:5d:db:72:29:ec:15: 94:cf:6b:88:44:d6:94:85:d9:51:4e:b4:aa:5a:1b:5c:76:6f: 78:e4:8e:b8:c9:29:f4:b7:3a:c9:ba:6c:ca:0c:10:79:6e:57: 2e:64:a9:ac:e1:d5:97:03:a3:81:c1:73:55:b9:de:1e:99:59: e8:29:5c:62:9e:6f:0c:c5:84:cb:16:7b:68:eb:3d:2c:52:66: 39:24:bb:d2:61:c2:cd:10:6e:6b:35:df:fc:4d:9e:08:07:b2: 17:a8:ff:a3:25:b8:ae:16:86:be:59:16:80:f3:93:ca:08:4e: d9:04:b9:5a:df:a2:04:c9:5e:b6:ef:4c:a3:38:09:1e:df:a9: c2:53:87:64:92:f1:b4:db:46:c6:33:12:ca:2f:aa:1f:72:7e: 6d:10:f0:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjQxMTIyMjAxNDIwWhcNMjQxMTI5MjAxNDIwWjAYMRYwFAYD VQQDEw02NzQwZTYxYy1jMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1izNIhHfhptuyi2KRi1zxEyhHJOUNAjguuA+D4DRmGZnFKaDjghF8gZE8Pzd AEiEqsCrfKBbcI0QgXqwkJH111O2A3rPStMzHBBZ7kh7tLKi85DJZg/JGjYZwWsn oxQVCxQVYaf7A9V30SZ0WjgMPHCVhHTG0TRSdc6C24HnZIs87DmGd+7R3TjcYF8S f/fdyhiSUzwTzjn0cPHMWkNEeAGrrm418AuOhP9Jdi2VCJkV9B3LvZH7HLJUJwQf QrWMKjB5MjZUWmSuC8vUMfHKSpmWoH8Imsifc+V43kdhztUqV0cEg13uXKokHzzl qSfswVemTVUQioaxL8wNGLEXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxVALfl Nxhg4H4Zu5U4nj4G5KbrMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHiFSl0fHcPnPamLo5mldPlaOZkrA5bnsQwqtYaIPey+xF1S0K5Pl8 FuBMrrDDGHfXcyBHXroDMmtuormD1nU2zvU2GqQ17pLCW1xA+kQmaAGrjlBzajkb VxR6O4W757xYhsgVK51d23Ip7BWUz2uIRNaUhdlRTrSqWhtcdm945I64ySn0tzrJ umzKDBB5blcuZKms4dWXA6OBwXNVud4emVnoKVxinm8MxYTLFnto6z0sUmY5JLvS YcLNEG5rNd/8TZ4IB7IXqP+jJbiuFoa+WRaA85PKCE7ZBLla36IEyV6270yjOAke 36nCU4dkkvG020bGMxLKL6ofcn5tEPBv -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org