$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: eGNGewF5l8urI+25k5AiZi/qAgzRS4sgj1ZW4b8jxug= Subject key identifier: 6D:E6:50:36:FB:9C:FD:11:B6:36:3C:3B:F4:A1:E7:BA:66:FA:43:D9 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 22F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 22E6 Signing time: Fri 22 Nov 2024 15:50:50 +0000 Manifest this update: Fri 22 Nov 2024 15:50:49 +0000 Manifest next update: Fri 29 Nov 2024 15:50:49 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: 9mdn4gsuDmOkzdrTWsVosb/0mIDlkOXqyHwSxq443q4=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: ZUEn5ZlRaiInxXBiSVZ7/rf4gJkd4uF1qxiteovD6sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8950 (0x22f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Nov 22 15:50:49 2024 GMT Not After : Nov 29 15:50:49 2024 GMT Subject: CN=6740a85a-94b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:40:ac:b6:ee:bd:21:6b:4a:12:51:16:1b: 2a:cc:9a:00:d8:b0:32:77:24:59:1e:3b:70:55:6d: 9f:6c:1b:0e:ed:ce:98:93:16:ed:6c:07:ee:a9:a2: be:53:df:4f:7d:d0:64:c6:27:c3:61:c6:65:6b:9f: 76:93:7c:fa:17:76:c6:f4:c8:c9:ca:95:d3:86:7e: ee:46:b4:21:f3:38:2d:ea:8f:c6:37:80:ea:ce:e8: ef:db:e3:08:13:0f:b5:a0:ad:ad:cb:b0:bc:f7:31: 4a:cc:c9:9d:12:d9:bd:b6:a7:3b:77:cc:83:5a:9d: 8a:70:58:1a:4d:27:cd:4d:5b:4f:7b:25:d0:81:68: da:37:b2:a0:b1:f0:dc:5b:82:75:e5:e1:0f:02:65: 2e:7c:5d:50:82:aa:58:d7:4e:6e:a4:5c:76:b7:2d: 33:5b:63:7f:82:ce:14:c6:f0:6e:c3:f2:c4:ec:7b: 9d:ac:eb:25:69:56:0a:73:c0:7a:13:7d:1b:0b:c3: 96:2e:51:68:64:d0:6b:aa:46:42:6c:25:56:81:e3: 06:77:e8:8b:7a:61:fa:ad:25:4d:11:45:46:ba:b3: c7:05:3e:b6:b3:e5:9c:8a:0c:59:20:21:49:7a:96: ef:56:c6:40:89:83:01:7e:41:c3:fd:a6:36:e7:17: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E6:50:36:FB:9C:FD:11:B6:36:3C:3B:F4:A1:E7:BA:66:FA:43:D9 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8f:eb:cb:87:5a:a8:ce:8d:4c:a5:82:32:a6:73:1a:a7:d1: a6:da:73:1a:6f:45:03:d1:c4:4b:f8:97:c7:72:91:a5:e9:ca: 00:ba:65:d6:cf:b4:be:a0:6e:0b:cf:d4:de:9c:18:57:de:61: d0:8e:82:85:82:28:a3:99:2f:bf:02:de:a9:41:1a:64:20:26: 99:3b:5d:86:36:84:8a:3c:e1:0e:8c:a2:af:4c:97:ad:98:2e: 39:58:09:fa:6d:64:34:ab:99:41:30:d0:19:06:d1:cc:99:8a: e0:2e:1e:c1:0b:1d:c2:4d:21:ed:74:d7:42:41:26:88:f6:59: 11:bb:72:8e:e8:c7:de:12:21:a9:8c:7e:d5:28:09:c6:b8:3f: 1c:82:b5:01:b3:17:7f:5b:21:3d:2b:f2:99:a1:89:77:fd:e6: 17:ba:19:ca:23:0b:f6:f7:9d:93:45:b2:83:aa:79:26:d4:03: 6b:19:65:c9:6e:fe:a3:f5:db:76:67:17:af:b8:6b:2e:62:50: f5:06:ad:bd:29:ca:6b:fa:61:b5:bf:b4:61:08:61:de:c0:c0: ce:0f:4e:41:64:04:11:66:eb:24:fa:50:87:5b:7f:36:e6:80: 96:62:23:81:17:a8:be:6c:14:6b:11:e9:6e:7c:7f:17:8f:a8: ec:b5:4d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjQxMTIyMTU1MDQ5WhcNMjQxMTI5MTU1MDQ5WjAYMRYwFAYD VQQDEw02NzQwYTg1YS05NGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iNArLbuvSFrShJRFhsqzJoA2LAydyRZHjtwVW2fbBsO7c6YkxbtbAfuqaK+ U99PfdBkxifDYcZla592k3z6F3bG9MjJypXThn7uRrQh8zgt6o/GN4Dqzujv2+MI Ew+1oK2ty7C89zFKzMmdEtm9tqc7d8yDWp2KcFgaTSfNTVtPeyXQgWjaN7KgsfDc W4J15eEPAmUufF1QgqpY105upFx2ty0zW2N/gs4UxvBuw/LE7HudrOslaVYKc8B6 E30bC8OWLlFoZNBrqkZCbCVWgeMGd+iLemH6rSVNEUVGurPHBT62s+WcigxZICFJ epbvVsZAiYMBfkHD/aY25xcUZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3mUDb7 nP0RtjY8O/Sh57pm+kPZMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdj+vLh1qozo1MpYIypnMap9Gm2nMab0UD0cRL+JfHcpGl6coAumXW z7S+oG4Lz9TenBhX3mHQjoKFgiijmS+/At6pQRpkICaZO12GNoSKPOEOjKKvTJet mC45WAn6bWQ0q5lBMNAZBtHMmYrgLh7BCx3CTSHtdNdCQSaI9lkRu3KO6MfeEiGp jH7VKAnGuD8cgrUBsxd/WyE9K/KZoYl3/eYXuhnKIwv2952TRbKDqnkm1ANrGWXJ bv6j9dt2ZxevuGsuYlD1Bq29Kcpr+mG1v7RhCGHewMDOD05BZAQRZusk+lCHW382 5oCWYiOBF6i+bBRrEelufH8Xj6jstU2Z -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org