$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: etuKUEnv+8ErsmKAPoe3hmQd4ofbo23UF4tazUozhpE= Subject key identifier: 01:65:64:9B:3D:A5:01:70:E0:DE:92:0E:68:0E:37:95:1C:D3:B7:C3 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 59 Signing time: Thu 21 Nov 2024 05:12:57 +0000 Manifest this update: Thu 21 Nov 2024 05:12:57 +0000 Manifest next update: Thu 28 Nov 2024 05:12:57 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 73dQbTv35gJMr2h456JclutcDWcarsBjF5NNuMwGqf0=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Nov 21 05:12:57 2024 GMT Not After : Nov 28 05:12:57 2024 GMT Subject: CN=673ec159-8d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:08:af:cf:b9:00:a1:eb:df:89:e4:4a:0e: 6a:72:64:d2:ad:8f:1c:86:3e:58:58:c0:3c:c1:73: a4:7e:c3:41:36:cd:06:7f:64:67:9e:0c:19:4c:45: 03:47:31:df:b3:5d:d0:b7:bf:7c:30:ba:e9:5c:a7: 08:81:56:6d:dd:3c:c8:a9:33:22:91:d3:27:9d:b0: 64:35:27:6b:5b:f9:53:54:93:b7:47:4d:4c:2e:c8: 78:1c:a0:98:e0:ef:6b:13:b8:0a:dc:ef:fc:16:01: 26:db:60:3b:35:90:be:0b:82:c4:c5:0b:62:72:2c: 92:87:d1:fa:13:0c:b4:71:f7:54:20:64:97:4d:2d: 87:3a:3e:4d:6b:cd:e1:5e:90:d9:39:1f:a0:23:fb: 9c:2f:cd:12:89:e8:38:9f:99:18:05:c8:eb:8b:3c: 19:9a:ba:d5:b1:71:63:79:98:d4:54:a9:dd:d3:b4: 68:a8:21:97:c8:5b:26:95:be:39:96:96:97:9a:70: 31:37:b6:1f:e1:37:47:e3:2a:b5:3e:dd:57:0e:22: f9:73:6d:cc:f2:c4:0d:90:00:87:91:b2:0c:ce:de: 15:62:a8:f0:5b:75:28:76:a9:20:63:1a:24:f4:c0: a1:6a:1c:81:bb:69:43:3e:6d:f3:a6:98:95:35:69: ea:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:64:9B:3D:A5:01:70:E0:DE:92:0E:68:0E:37:95:1C:D3:B7:C3 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0d:ae:db:3c:a9:af:f5:ed:ee:02:dd:4c:c9:8c:1e:b4:04: 10:50:ea:d8:b0:dc:29:da:2b:c1:f5:31:08:92:2a:b0:5e:36: 73:97:a8:bb:df:5c:9d:75:7b:47:b7:1c:e7:94:a0:3d:f6:26: 75:92:6d:9e:c4:35:32:38:19:c1:29:33:25:c4:a9:9a:47:83: f0:03:2c:cb:6d:7a:37:eb:98:9f:30:7d:41:ca:1d:47:27:8c: 14:ac:74:80:f8:bd:4b:d5:dc:2c:22:50:ed:6d:d0:dd:8f:37: e8:d2:ff:fc:c9:31:a6:a0:24:62:ec:a1:07:84:12:f6:10:a9: e1:0a:d7:65:13:23:5e:97:27:0f:ae:19:55:ea:23:79:c3:21: 74:22:07:bc:8f:33:3d:68:30:68:1c:b8:de:f8:2d:de:23:11: 57:fb:73:bd:d1:8b:86:23:3d:83:73:5a:0f:81:f9:33:aa:e8: 40:97:7d:64:1a:6f:bb:3d:85:d1:dc:16:b1:f2:34:d2:57:45: 02:03:ef:56:72:76:9b:82:26:a4:b2:78:3f:c8:f1:d7:6d:f3: 20:26:86:f7:af:45:35:14:82:c3:12:c2:cf:ef:4e:3d:3c:2e: 18:22:8b:a4:aa:55:4f:67:5c:2d:b2:86:b5:6c:0d:ad:82:c1: 74:e4:1f:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjJERjExMC8GA1UEBRMoNjY0NDA1MUJFMUUxMDcwRDU3MjJEMjRGQ0MxQTY1QkI2 QTY1OTNBQTAeFw0yNDExMjEwNTEyNTdaFw0yNDExMjgwNTEyNTdaMBgxFjAUBgNV BAMTDTY3M2VjMTU5LThkMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ7wivz7kAoevfieRKDmpyZNKtjxyGPlhYwDzBc6R+w0E2zQZ/ZGeeDBlMRQNH Md+zXdC3v3wwuulcpwiBVm3dPMipMyKR0yedsGQ1J2tb+VNUk7dHTUwuyHgcoJjg 72sTuArc7/wWASbbYDs1kL4LgsTFC2JyLJKH0foTDLRx91QgZJdNLYc6Pk1rzeFe kNk5H6Aj+5wvzRKJ6DifmRgFyOuLPBmautWxcWN5mNRUqd3TtGioIZfIWyaVvjmW lpeacDE3th/hN0fjKrU+3VcOIvlzbczyxA2QAIeRsgzO3hViqPBbdSh2qSBjGiT0 wKFqHIG7aUM+bfOmmJU1aeoDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAWVkmz2l AXDg3pIOaA43lRzTt8MwHwYDVR0jBBgwFoAUZkQFG+HhBw1XItJPzBplu2plk6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGMkRGLzBBOTg4NzlBMjNB RTExRUY5NDkzRjQ1Q0M0RjlBRTAyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmtRRkctSGhCdzFYSXRKUHpCcGx1MnBsazZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG MkRGLzBBOTg4NzlBMjNBRTExRUY5NDkzRjQ1Q0M0RjlBRTAyL1prUUZHLUhoQncx WEl0SlB6QnBsdTJwbGs2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQNrts8qa/17e4C3UzJjB60BBBQ6tiw3CnaK8H1MQiSKrBeNnOXqLvf XJ11e0e3HOeUoD32JnWSbZ7ENTI4GcEpMyXEqZpHg/ADLMttejfrmJ8wfUHKHUcn jBSsdID4vUvV3CwiUO1t0N2PN+jS//zJMaagJGLsoQeEEvYQqeEK12UTI16XJw+u GVXqI3nDIXQiB7yPMz1oMGgcuN74Ld4jEVf7c73Ri4YjPYNzWg+B+TOq6ECXfWQa b7s9hdHcFrHyNNJXRQID71ZydpuCJqSyeD/I8ddt8yAmhvevRTUUgsMSws/vTj08 Lhgii6SqVU9nXC2yhrVsDa2CwXTkHyI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:00 2024 by rpki-client on console-ams.rpki-client.org