$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: ilWXK1x8io7sdtfEunMQmYkQCUo6QaVSY/s5rw10inQ= Subject key identifier: B8:83:15:21:B4:28:29:7B:80:13:BA:F7:AE:2D:47:67:38:7A:1A:DA Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 47 Signing time: Thu 17 Oct 2024 05:45:34 +0000 Manifest this update: Thu 17 Oct 2024 05:45:33 +0000 Manifest next update: Thu 24 Oct 2024 05:45:33 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 0Z2gRMbm9mBBg8ERfJ7bdourW62FPQmiziFltpBKgKs=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 05:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Oct 17 05:45:33 2024 GMT Not After : Oct 24 05:45:33 2024 GMT Subject: CN=6710a47e-328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:6b:44:f0:bb:f8:83:2a:6e:25:36:e2:b0: b9:d6:95:ba:5f:ca:87:a2:f7:22:bb:50:6f:76:a6: d3:82:7c:1b:f6:a1:dd:84:dc:8c:24:70:ed:97:9f: 56:ca:7e:14:f3:ce:29:da:34:1c:90:db:fc:e2:84: 31:2a:ce:f2:e6:21:9e:b4:9c:a4:eb:a8:24:14:1e: 3e:fe:ec:8e:0e:56:96:f2:7f:9b:53:d7:2b:f6:7b: 89:7d:08:e1:bc:62:82:91:9f:df:e8:86:f3:cc:3e: 3d:65:55:df:66:31:11:cb:57:62:c2:8c:de:b3:78: b2:b4:0a:9b:ba:14:67:55:d9:20:e6:29:29:9e:16: 84:12:7a:53:3b:4a:61:74:b6:93:d0:34:62:fe:d8: 7f:52:8a:35:92:5a:65:8a:2f:a5:08:12:e3:90:ef: f2:47:ae:ea:8f:5d:2a:b4:b6:7f:c4:7f:1f:c9:55: dd:e8:03:37:65:79:aa:2b:9e:ee:d3:a5:54:e9:5f: 67:96:33:a3:57:d8:e6:de:f6:c1:10:67:7e:e2:c7: 04:6f:6c:37:cb:4e:4e:d7:85:61:86:1c:6c:92:73: 37:67:74:1f:4d:62:f0:6c:57:d1:95:40:df:7b:59: 05:e6:db:46:e5:65:98:27:a8:6d:b4:fb:65:e1:8c: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:83:15:21:B4:28:29:7B:80:13:BA:F7:AE:2D:47:67:38:7A:1A:DA X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ac:39:67:74:b8:56:77:74:8e:eb:71:81:a2:4d:04:54:80: b0:6a:64:bd:be:d4:c2:f9:de:c1:c8:59:39:fc:9e:a4:30:f6: 72:c0:67:53:12:47:9a:db:34:1f:1f:66:ae:85:0c:5c:c0:02: bc:1f:86:3b:7b:89:35:b1:7b:82:16:e0:9c:82:ea:f6:d3:0c: 95:ac:12:0f:85:51:1c:6d:0d:c2:d0:ee:cb:86:5a:3c:61:09: aa:6a:f0:56:63:ab:76:48:aa:0d:92:15:f1:5d:dd:c8:ef:49: d9:ad:8e:b8:2c:11:5f:8f:39:4e:da:bd:ff:37:af:d0:d8:fe: ea:0b:03:21:61:bc:7e:c3:e9:9f:9f:23:1c:c9:38:7a:58:55: 1f:03:75:fd:fe:01:cb:3a:8a:58:03:e5:34:7d:92:c8:7f:c6: d4:02:23:1d:2e:28:bc:41:2d:af:c8:c1:9f:0f:d2:66:42:1b: 0b:15:60:3c:22:58:3e:db:c9:4d:fd:c2:47:a5:31:c3:79:38: 13:97:a1:af:a5:07:fb:da:f0:93:9c:18:ef:6d:e9:b6:d0:0d: 5c:92:05:65:0b:44:53:f1:1f:fc:f1:48:fb:20:63:8b:04:4a: 7d:4d:2f:8b:c0:13:02:08:ee:8a:98:80:b5:af:6a:5d:d6:88: cb:f0:49:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjJERjExMC8GA1UEBRMoNjY0NDA1MUJFMUUxMDcwRDU3MjJEMjRGQ0MxQTY1QkI2 QTY1OTNBQTAeFw0yNDEwMTcwNTQ1MzNaFw0yNDEwMjQwNTQ1MzNaMBgxFjAUBgNV BAMTDTY3MTBhNDdlLTMyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG7GtE8Lv4gypuJTbisLnWlbpfyoei9yK7UG92ptOCfBv2od2E3IwkcO2Xn1bK fhTzzinaNByQ2/zihDEqzvLmIZ60nKTrqCQUHj7+7I4OVpbyf5tT1yv2e4l9COG8 YoKRn9/ohvPMPj1lVd9mMRHLV2LCjN6zeLK0Cpu6FGdV2SDmKSmeFoQSelM7SmF0 tpPQNGL+2H9SijWSWmWKL6UIEuOQ7/JHruqPXSq0tn/Efx/JVd3oAzdleaornu7T pVTpX2eWM6NX2Obe9sEQZ37ixwRvbDfLTk7XhWGGHGySczdndB9NYvBsV9GVQN97 WQXm20blZZgnqG20+2XhjAMjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuIMVIbQo KXuAE7r3ri1HZzh6GtowHwYDVR0jBBgwFoAUZkQFG+HhBw1XItJPzBplu2plk6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGMkRGLzBBOTg4NzlBMjNB RTExRUY5NDkzRjQ1Q0M0RjlBRTAyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmtRRkctSGhCdzFYSXRKUHpCcGx1MnBsazZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG MkRGLzBBOTg4NzlBMjNBRTExRUY5NDkzRjQ1Q0M0RjlBRTAyL1prUUZHLUhoQncx WEl0SlB6QnBsdTJwbGs2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKsOWd0uFZ3dI7rcYGiTQRUgLBqZL2+1ML53sHIWTn8nqQw9nLAZ1MS R5rbNB8fZq6FDFzAArwfhjt7iTWxe4IW4JyC6vbTDJWsEg+FURxtDcLQ7suGWjxh Capq8FZjq3ZIqg2SFfFd3cjvSdmtjrgsEV+POU7avf83r9DY/uoLAyFhvH7D6Z+f IxzJOHpYVR8Ddf3+Acs6ilgD5TR9ksh/xtQCIx0uKLxBLa/IwZ8P0mZCGwsVYDwi WD7byU39wkelMcN5OBOXoa+lB/va8JOcGO9t6bbQDVySBWULRFPxH/zxSPsgY4sE Sn1NL4vAEwII7oqYgLWval3WiMvwSUQ= -----END CERTIFICATE-----Generated at Thu Oct 17 08:05:43 2024 by rpki-client on console-ams.rpki-client.org