$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: kl88SE16SeC2BSpOWvYfU9oMGDz1xXt1lIxjxxHyDLI= Subject key identifier: 90:B2:D9:09:B3:67:C5:16:92:C6:8C:96:27:F7:4C:CF:1D:1B:D9:39 Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 17E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 17C9 Signing time: Wed 20 Nov 2024 16:30:46 +0000 Manifest this update: Wed 20 Nov 2024 16:30:45 +0000 Manifest next update: Wed 27 Nov 2024 16:30:45 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: ZOHW4qM6FUy9+wgfAK+NipB2Ml5DZPZp+0IOh06mYs4=) 2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: 8IxMRzh5qaWGfk62iyhaPPZa1vR76AhV579NwWq7910=) 3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: we20c5hV82a760VbWZeMcxrJkqzrZ+m6YkUxwCa2cqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6112 (0x17e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: Nov 20 16:30:45 2024 GMT Not After : Nov 27 16:30:45 2024 GMT Subject: CN=673e0eb6-367c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:33:84:ff:35:96:ef:ab:41:be:58:42:f8:ed: 6b:f5:0e:8e:32:d8:e7:89:cb:93:f6:37:e3:65:07: 3b:99:ec:18:6d:35:55:3b:c8:38:07:fb:f9:a1:0d: 1f:b4:95:22:8a:3a:a6:5b:54:e8:ca:7b:0d:e0:12: aa:ec:9b:f4:eb:d5:65:77:82:35:89:c6:2f:23:6c: 26:9b:a9:58:55:14:4d:20:59:c8:df:8d:0b:6d:a7: 2b:3e:c2:8d:da:7d:16:aa:4e:17:c5:b2:c0:ca:18: ca:74:0f:8a:ab:cb:49:65:f9:50:ed:3c:d7:e4:a9: 59:46:b0:26:25:86:4a:14:cc:65:4a:6a:9d:46:f3: ec:72:0d:9e:65:96:14:4e:e2:7a:84:0d:c4:ac:83: d6:7e:6b:3e:cb:f4:fc:55:fc:89:dd:b7:19:1d:1e: 23:e5:fa:44:b6:8f:c6:97:01:28:2f:0f:18:10:7f: b3:14:62:76:b7:49:d5:63:dd:60:b4:4a:a1:79:21: ea:70:8d:32:0e:16:e2:f3:2d:f9:53:01:2f:3b:9c: 87:10:92:71:82:32:fb:ec:1f:73:aa:bf:cf:e9:d9: 0f:72:db:d2:5b:21:68:2e:1e:72:c6:42:54:a6:72: 63:2d:de:4f:5e:62:0e:4a:43:47:7c:c9:72:7e:81: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:D9:09:B3:67:C5:16:92:C6:8C:96:27:F7:4C:CF:1D:1B:D9:39 X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:82:f4:cf:5a:d0:ae:44:58:63:ab:a2:88:df:8d:dd:f9:06: b9:0e:c7:aa:ac:84:be:99:cc:7f:8c:57:4f:e7:7f:28:66:47: 5a:5b:ca:8a:11:1c:c2:8a:fc:04:6f:27:f2:c2:32:5f:d5:5f: ca:6f:e1:54:e1:73:5e:b5:22:cd:ac:a5:c5:2a:ab:e3:b6:8f: 81:db:78:6a:85:2e:82:08:84:3e:23:4b:93:33:cc:ea:97:57: 15:02:aa:00:dc:9a:7d:21:e4:04:58:83:5a:e8:3b:2c:76:9d: d4:28:32:d1:9a:ed:8e:97:d3:9d:41:75:10:39:d4:0b:de:e3: fe:ec:e6:81:23:af:8b:8b:5a:4c:1c:a4:44:cf:f1:7e:aa:01: 6d:87:c8:88:48:aa:27:bb:2a:50:c4:18:69:a1:b5:dc:4f:a8: 69:ce:50:83:2d:e8:38:04:8d:83:11:03:c8:18:4c:a1:8c:64: b0:ed:0b:5c:c1:6c:c6:ca:02:fb:3f:4b:4f:cc:73:5c:b7:2e: db:13:53:5b:83:70:ca:b1:0f:92:ab:5e:8e:9f:96:4c:62:19: 83:42:4d:2d:4f:bc:d1:76:8a:79:4c:9d:f3:4b:77:b9:bd:8e: 36:a9:42:9e:bb:d5:cf:24:46:38:a4:ef:7b:e1:aa:3b:33:6f: 57:5d:71:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjQxMTIwMTYzMDQ1WhcNMjQxMTI3MTYzMDQ1WjAYMRYwFAYD VQQDEw02NzNlMGViNi0zNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9TOE/zWW76tBvlhC+O1r9Q6OMtjnicuT9jfjZQc7mewYbTVVO8g4B/v5oQ0f tJUiijqmW1ToynsN4BKq7Jv069Vld4I1icYvI2wmm6lYVRRNIFnI340LbacrPsKN 2n0Wqk4XxbLAyhjKdA+Kq8tJZflQ7TzX5KlZRrAmJYZKFMxlSmqdRvPscg2eZZYU TuJ6hA3ErIPWfms+y/T8VfyJ3bcZHR4j5fpEto/GlwEoLw8YEH+zFGJ2t0nVY91g tEqheSHqcI0yDhbi8y35UwEvO5yHEJJxgjL77B9zqr/P6dkPctvSWyFoLh5yxkJU pnJjLd5PXmIOSkNHfMlyfoErkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCy2Qmz Z8UWksaMlif3TM8dG9k5MB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugvTPWtCuRFhjq6KI343d+Qa5DseqrIS+mcx/jFdP538oZkdaW8qK ERzCivwEbyfywjJf1V/Kb+FU4XNetSLNrKXFKqvjto+B23hqhS6CCIQ+I0uTM8zq l1cVAqoA3Jp9IeQEWINa6Dssdp3UKDLRmu2Ol9OdQXUQOdQL3uP+7OaBI6+Li1pM HKREz/F+qgFth8iISKonuypQxBhpobXcT6hpzlCDLeg4BI2DEQPIGEyhjGSw7Qtc wWzGygL7P0tPzHNcty7bE1Nbg3DKsQ+Sq16On5ZMYhmDQk0tT7zRdop5TJ3zS3e5 vY42qUKeu9XPJEY4pO974ao7M29XXXFO -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:48 2024 by rpki-client on console-fra.rpki-client.org