$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: lX9GxEaVmhgmUws+FxWuL1TwSp86HKXh+rEMmYqaNVs= Subject key identifier: 1F:87:6D:D9:D7:39:15:B5:24:0B:DB:2E:29:C1:C4:67:35:D7:5D:79 Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0CD1 Signing time: Fri 22 Nov 2024 18:03:28 +0000 Manifest this update: Fri 22 Nov 2024 18:03:27 +0000 Manifest next update: Fri 29 Nov 2024 18:03:27 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: xq3FDZfQEQnlPaaLJgXRM5x//6K11kf0ETH8Jo1jRQ4=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Nov 22 18:03:27 2024 GMT Not After : Nov 29 18:03:27 2024 GMT Subject: CN=6740c76f-1cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:1d:d8:5c:ff:e6:e7:0a:59:3e:ba:02:92: de:2c:9f:e4:d0:04:76:0d:d0:94:e4:72:d6:c1:f9: 35:28:eb:e6:9e:32:d3:5f:a0:d5:a0:a9:ea:cf:56: fc:ed:65:ed:fa:7b:00:9c:93:f4:d5:5c:f1:cc:3a: 55:3f:26:d2:8b:1d:13:d7:26:4e:bf:3c:23:f4:c8: 10:52:f6:e6:35:d3:5a:8a:e7:30:4a:d4:35:72:c8: 41:e3:70:da:6e:0f:57:d5:1b:fe:4c:59:9a:21:62: f5:16:1b:d1:ac:62:a6:f1:15:3e:4a:6c:8d:c8:c3: 1e:1d:a4:a6:c8:4e:59:7f:69:92:fa:fd:4b:25:22: 86:53:44:08:db:d1:2c:12:95:06:b8:c2:aa:b4:0e: 27:ea:b4:ce:f3:d8:16:90:d3:4b:62:e5:62:25:fe: 94:0f:b6:67:dd:a0:7e:97:0a:35:41:b2:0b:fb:f9: 55:f2:f3:66:90:82:a8:81:a3:19:ae:ef:e2:2f:ed: a2:a4:a1:67:8b:dd:3a:b6:ff:08:07:3d:d8:ed:a2: 27:46:a3:f3:a8:4e:bc:88:e5:a6:cd:e0:56:22:ed: 66:be:f9:cf:f2:f5:1c:46:93:86:19:47:76:62:4a: cb:ba:07:16:94:ad:0f:7a:0d:16:a8:bf:cf:be:ea: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:6D:D9:D7:39:15:B5:24:0B:DB:2E:29:C1:C4:67:35:D7:5D:79 X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:17:2f:30:f6:2e:a5:16:b1:bf:83:d9:c7:16:14:3a:bd:99: 1c:a5:f2:b6:c2:30:ca:c4:83:80:d2:2e:b5:e5:7f:83:34:79: bc:98:14:f1:72:fb:db:40:9e:b4:69:56:98:4a:94:33:3e:c4: 77:d8:65:5f:84:da:08:cf:25:b5:f6:95:ba:38:6e:38:ad:49: 6e:cf:d5:57:25:f3:65:46:58:30:ee:a4:27:47:83:94:ff:03: a6:b4:c5:6f:f4:30:6b:e6:73:84:50:76:44:55:58:d8:01:0f: 6b:53:22:9a:b6:80:cf:d3:9b:8f:66:63:ff:5a:2b:d0:2b:f3: 24:89:b6:40:d5:f5:0d:24:4e:1f:af:6a:e5:37:d5:b4:39:a5: 6a:be:6d:3c:45:d4:45:a9:4a:6c:71:29:20:57:dd:bc:7a:ee: 80:eb:d5:9c:2f:6a:ef:aa:e6:2a:b9:9d:55:b8:3c:93:62:8e: 3c:f6:4b:f4:2a:59:b3:85:f9:dc:c8:8d:49:97:85:d8:bd:42: 0f:e0:be:eb:41:72:44:d2:2b:d1:65:78:ff:e8:57:2d:5f:b0: 51:fc:30:21:5c:89:59:ee:28:a5:bc:ea:29:62:40:44:8f:f9: c2:f6:5a:e8:72:fc:87:49:73:b8:02:89:af:d3:5e:6e:fd:40: b3:68:38:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjQxMTIyMTgwMzI3WhcNMjQxMTI5MTgwMzI3WjAYMRYwFAYD VQQDEw02NzQwYzc2Zi0xY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7wd2Fz/5ucKWT66ApLeLJ/k0AR2DdCU5HLWwfk1KOvmnjLTX6DVoKnqz1b8 7WXt+nsAnJP01VzxzDpVPybSix0T1yZOvzwj9MgQUvbmNdNaiucwStQ1cshB43Da bg9X1Rv+TFmaIWL1FhvRrGKm8RU+SmyNyMMeHaSmyE5Zf2mS+v1LJSKGU0QI29Es EpUGuMKqtA4n6rTO89gWkNNLYuViJf6UD7Zn3aB+lwo1QbIL+/lV8vNmkIKogaMZ ru/iL+2ipKFni906tv8IBz3Y7aInRqPzqE68iOWmzeBWIu1mvvnP8vUcRpOGGUd2 YkrLugcWlK0Peg0WqL/Pvup3wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+HbdnX ORW1JAvbLinBxGc11115MB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMFy8w9i6lFrG/g9nHFhQ6vZkcpfK2wjDKxIOA0i615X+DNHm8mBTx cvvbQJ60aVaYSpQzPsR32GVfhNoIzyW19pW6OG44rUluz9VXJfNlRlgw7qQnR4OU /wOmtMVv9DBr5nOEUHZEVVjYAQ9rUyKatoDP05uPZmP/WivQK/MkibZA1fUNJE4f r2rlN9W0OaVqvm08RdRFqUpscSkgV928eu6A69WcL2rvquYquZ1VuDyTYo489kv0 KlmzhfncyI1Jl4XYvUIP4L7rQXJE0ivRZXj/6FctX7BR/DAhXIlZ7iilvOopYkBE j/nC9lrocvyHSXO4Aomv015u/UCzaDgz -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org