$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: EMoVtcuSVr5XhANl3gPyE6qok1UCYSzrLD7myyuR8yQ= Subject key identifier: 03:47:3F:26:94:A1:78:5F:AE:FD:CE:FA:35:B0:67:68:34:BF:04:1E Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1CFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1CF0 Signing time: Fri 22 Nov 2024 16:09:47 +0000 Manifest this update: Fri 22 Nov 2024 16:09:47 +0000 Manifest next update: Fri 29 Nov 2024 16:09:47 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: Rj5Zj1weCsqjNc1L93dBVFEiG0D+RBlOxsDH7UQ0K5Y=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: mxRFoZlbF7GrkWlo6RWpK5mJSh6VlbtldbAN6DTyqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7418 (0x1cfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: Nov 22 16:09:47 2024 GMT Not After : Nov 29 16:09:47 2024 GMT Subject: CN=6740accb-18c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:88:a3:26:1e:ef:72:34:59:34:8f:a7:a2: e2:2e:bf:1a:c8:74:b1:85:4f:3c:b6:38:d2:bc:be: 72:6b:d0:98:4b:90:1a:1d:68:11:66:eb:9e:43:94: 94:10:74:f0:19:28:15:92:e7:d3:b0:76:7d:e7:04: 22:28:0d:16:c0:df:28:73:f9:ba:1b:d2:52:0f:ea: cc:dc:62:9f:ef:70:87:51:90:06:21:d8:da:5b:de: d4:1c:5f:95:f2:04:6b:40:c5:4b:43:d6:de:f0:77: 4a:ba:ec:30:c1:36:2f:a1:1b:d3:a2:b9:5a:43:63: 43:dd:66:1f:9a:5f:73:49:00:e3:25:c3:ab:63:6c: 53:8a:d9:7c:00:47:90:53:52:0e:1a:d1:8b:ee:0b: 73:e9:69:0b:22:7f:c6:92:b0:39:ab:d4:d2:61:a7: ff:0c:57:ff:ea:e3:7f:cc:72:23:ad:d8:89:11:b5: 80:15:b2:47:5c:be:88:26:b9:18:b3:2a:19:aa:ce: 81:ed:3a:fb:9b:00:61:0e:f7:29:65:1d:0b:82:7f: bc:88:be:f0:80:4a:a6:81:06:76:f4:c5:66:a2:fc: 27:a1:d8:73:e1:c4:3c:51:0e:8c:77:99:81:6d:75: a5:b0:88:61:e0:c0:2a:24:b5:91:ec:55:05:4c:d2: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:3F:26:94:A1:78:5F:AE:FD:CE:FA:35:B0:67:68:34:BF:04:1E X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a7:74:09:48:09:a4:d0:73:ea:ed:d6:e1:cf:c4:21:ab:e2: 1c:38:81:5d:1f:c4:3f:41:7f:96:61:89:92:5b:f4:8c:5e:62: 56:30:eb:18:60:f0:32:be:5c:7a:c2:bb:9d:06:c3:1e:4a:9c: 32:b0:b1:bb:d2:f5:16:4b:19:ae:73:e1:2c:bb:c1:8d:fb:a3: 7c:59:74:0c:ed:c3:2a:ab:3f:8f:88:ff:22:fa:c6:c3:0b:4b: 6f:24:f2:04:63:04:12:bf:83:30:34:db:ef:ff:fc:0f:39:9b: 6d:f9:68:3b:67:36:86:61:e7:e8:31:8d:32:98:ec:0c:29:90: b7:40:35:98:2a:b3:ec:6a:91:a9:70:af:c3:ca:e9:29:0d:89: 6c:54:91:82:17:de:a6:27:e1:11:49:c6:45:24:61:d7:fd:e9: 1e:e2:05:de:0c:db:a8:d8:c0:a1:5b:b5:67:66:21:33:4b:7c: 50:9d:d4:82:71:27:b0:16:fd:ef:64:6c:53:08:47:df:69:d8: 78:d0:25:79:5b:92:d9:9d:46:24:67:3f:e3:8e:91:07:46:bd: 79:f3:3e:3c:1b:60:bf:4e:56:4d:44:0c:a6:89:6b:81:55:36: 4b:8c:27:c1:d6:c4:8a:28:bc:23:d2:0d:97:d5:d0:14:6e:91: 87:37:61:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjQxMTIyMTYwOTQ3WhcNMjQxMTI5MTYwOTQ3WjAYMRYwFAYD VQQDEw02NzQwYWNjYi0xOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xGIoyYe73I0WTSPp6LiLr8ayHSxhU88tjjSvL5ya9CYS5AaHWgRZuueQ5SU EHTwGSgVkufTsHZ95wQiKA0WwN8oc/m6G9JSD+rM3GKf73CHUZAGIdjaW97UHF+V 8gRrQMVLQ9be8HdKuuwwwTYvoRvTorlaQ2ND3WYfml9zSQDjJcOrY2xTitl8AEeQ U1IOGtGL7gtz6WkLIn/GkrA5q9TSYaf/DFf/6uN/zHIjrdiJEbWAFbJHXL6IJrkY syoZqs6B7Tr7mwBhDvcpZR0Lgn+8iL7wgEqmgQZ29MVmovwnodhz4cQ8UQ6Md5mB bXWlsIhh4MAqJLWR7FUFTNIvQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANHPyaU oXhfrv3O+jWwZ2g0vwQeMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrp3QJSAmk0HPq7dbhz8Qhq+IcOIFdH8Q/QX+WYYmSW/SMXmJWMOsY YPAyvlx6wrudBsMeSpwysLG70vUWSxmuc+Esu8GN+6N8WXQM7cMqqz+PiP8i+sbD C0tvJPIEYwQSv4MwNNvv//wPOZtt+Wg7ZzaGYefoMY0ymOwMKZC3QDWYKrPsapGp cK/DyukpDYlsVJGCF96mJ+ERScZFJGHX/eke4gXeDNuo2MChW7VnZiEzS3xQndSC cSewFv3vZGxTCEffadh40CV5W5LZnUYkZz/jjpEHRr158z48G2C/TlZNRAymiWuB VTZLjCfB1sSKKLwj0g2X1dAUbpGHN2Gs -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org