$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: TEZyEdUZQbBE3ffE3yv0mxbmAFUipV817KhDzgC2jcU= Subject key identifier: 78:95:8A:8B:4C:15:B2:C6:6D:9A:E6:ED:96:0C:D6:5F:FB:1F:50:CC Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 8D Signing time: Sat 23 Nov 2024 04:32:42 +0000 Manifest this update: Sat 23 Nov 2024 04:32:41 +0000 Manifest next update: Sat 30 Nov 2024 04:32:41 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: 46Dz65zH15V2iwdk9SRmNOnqi1OIPCA5HqIM078Zo78=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: jsPnxeM/1ccjB+l/UFdQlnJ1k8qZgj2xXeNtEyTuulI=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: Du13DHYQS04+G+C/2tJR42Y1wTjwagQP4rv6d0IIooA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Nov 23 04:32:41 2024 GMT Not After : Nov 30 04:32:41 2024 GMT Subject: CN=67415ae9-2659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:5b:31:c9:c9:8f:9a:fb:64:38:89:a3:3a: 17:79:c3:d0:8c:49:51:c9:9e:b0:e4:7f:cd:cc:76: 0b:51:de:28:5d:cb:82:fa:7a:af:01:9c:f1:31:9a: 70:76:b9:9e:72:43:d4:6d:44:98:f8:1b:16:8d:e0: e8:bc:e5:8a:a1:07:86:da:2c:69:a3:57:74:60:71: 46:e9:5a:59:60:c9:35:fb:76:d8:68:f1:23:72:7f: 07:b0:db:5f:e0:86:cc:ac:d9:e8:52:34:fa:50:88: 95:ad:02:f3:c8:c6:e2:ba:93:9b:ae:af:99:f3:7e: fa:a3:e5:6d:28:84:ab:94:5f:89:e8:74:cb:9a:ec: 3f:53:c9:32:59:30:f9:43:11:12:ee:d0:47:b6:a2: 7f:cb:65:ee:01:28:bc:55:43:24:d2:f1:87:fe:bc: f0:06:a9:6e:d7:7e:85:ff:50:d5:d6:11:f6:d1:25: a7:76:c7:88:02:bf:54:8b:21:4d:88:3a:fc:da:67: 9c:78:4a:11:05:a3:b7:aa:df:fe:38:11:62:36:fc: 91:18:aa:ae:c1:40:d3:ca:df:98:de:f8:e7:ea:6b: ff:83:89:71:58:4b:66:3a:ee:fc:81:d6:7b:71:c7: 10:eb:0b:a7:1e:8b:36:e5:41:dd:d5:c7:41:b6:01: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:8A:8B:4C:15:B2:C6:6D:9A:E6:ED:96:0C:D6:5F:FB:1F:50:CC X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e9:69:e2:f5:2a:aa:9f:6a:50:43:fe:57:9b:4f:6e:6b:ee: 1c:72:31:2d:62:4f:e8:cd:53:e7:c8:87:ce:f7:99:c8:79:92: 16:a1:04:93:46:f4:9c:44:ac:0b:44:30:f1:72:9a:e0:9c:6a: 6a:b7:0d:4e:a5:47:0b:78:da:4e:28:36:fa:90:17:b4:fa:16: f3:96:bd:3b:b5:38:5e:f8:bd:26:1e:bc:e9:6f:15:71:4a:be: 4d:fa:66:e9:95:df:68:32:74:58:1e:63:e5:79:cb:fc:5e:2d: 02:6a:85:5a:c7:e6:67:0b:71:10:3b:9b:8a:33:2c:4b:a5:9b: 64:cb:f8:27:a1:2e:3c:6c:b9:84:34:ee:c0:51:95:3d:86:24: af:9b:b0:4e:f4:44:71:99:d7:dc:4b:a8:6b:9d:33:b6:2f:15: f7:5f:cf:bd:c9:4a:cc:cf:67:0d:9c:18:4e:cb:68:f8:ae:a1: 5d:98:87:1d:97:4a:5a:f2:91:05:c5:58:d4:f5:96:d4:f2:5f: d5:fe:f8:0c:49:b1:34:d6:e1:51:5e:4d:db:1d:e4:dc:e1:d9: ac:29:37:0f:13:cb:9d:23:b9:e5:0a:31:51:a1:f0:e2:4c:ab: 1d:af:8e:40:5e:7c:a9:c2:96:85:ef:98:66:bd:4e:73:4d:0c: a2:b2:f5:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjQxMTIzMDQzMjQxWhcNMjQxMTMwMDQzMjQxWjAYMRYwFAYD VQQDEw02NzQxNWFlOS0yNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF5bMcnJj5r7ZDiJozoXecPQjElRyZ6w5H/NzHYLUd4oXcuC+nqvAZzxMZpw drmeckPUbUSY+BsWjeDovOWKoQeG2ixpo1d0YHFG6VpZYMk1+3bYaPEjcn8HsNtf 4IbMrNnoUjT6UIiVrQLzyMbiupObrq+Z8376o+VtKISrlF+J6HTLmuw/U8kyWTD5 QxES7tBHtqJ/y2XuASi8VUMk0vGH/rzwBqlu136F/1DV1hH20SWndseIAr9UiyFN iDr82meceEoRBaO3qt/+OBFiNvyRGKquwUDTyt+Y3vjn6mv/g4lxWEtmOu78gdZ7 cccQ6wunHos25UHd1cdBtgGb8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiViotM FbLGbZrm7ZYM1l/7H1DMMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk6Wni9Sqqn2pQQ/5Xm09ua+4ccjEtYk/ozVPnyIfO95nIeZIWoQST RvScRKwLRDDxcprgnGpqtw1OpUcLeNpOKDb6kBe0+hbzlr07tThe+L0mHrzpbxVx Sr5N+mbpld9oMnRYHmPlecv8Xi0CaoVax+ZnC3EQO5uKMyxLpZtky/gnoS48bLmE NO7AUZU9hiSvm7BO9ERxmdfcS6hrnTO2LxX3X8+9yUrMz2cNnBhOy2j4rqFdmIcd l0pa8pEFxVjU9ZbU8l/V/vgMSbE01uFRXk3bHeTc4dmsKTcPE8udI7nlCjFRofDi TKsdr45AXnypwpaF75hmvU5zTQyisvWF -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org