$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: obRgn5M3XsCJfjvZvBAzAYoH+P4vFEOIcO8i/Epzwb4= Subject key identifier: 10:A4:72:DE:06:A8:0B:D0:B9:C9:8D:9E:5B:98:CF:75:28:75:40:C8 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 0C Signing time: Wed 23 Oct 2024 06:45:37 +0000 Manifest this update: Wed 23 Oct 2024 06:45:36 +0000 Manifest next update: Wed 30 Oct 2024 06:45:36 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: OHM5eSGXLiZtLrSfquBu0j0SQpAlml+yKPsiM9mcnWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Oct 23 06:45:36 2024 GMT Not After : Oct 30 06:45:36 2024 GMT Subject: CN=67189b91-acc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:55:62:a3:a3:f2:ff:b7:61:ec:96:27:bb: 86:dc:33:c1:b4:5f:c7:59:e4:7e:b2:bd:8d:6b:5a: 1e:eb:37:ab:98:83:b4:c4:e9:7c:36:bb:da:ad:37: 88:2e:10:ce:a9:e9:ef:76:47:7b:bc:9a:63:1c:50: 5f:88:d9:1d:8a:da:c2:aa:e2:ea:ad:df:85:ed:96: f2:4e:a1:50:e3:e2:55:98:1a:fb:b0:d0:a1:02:7c: 08:ca:b6:e4:af:93:bf:8c:8c:8d:a7:cf:a5:b8:f8: 69:99:c8:b3:73:f9:b8:f5:73:c1:91:81:f1:31:7c: 3b:96:49:6b:02:46:7d:33:8b:db:3c:8b:6c:d2:f3: 7a:fa:3b:a4:21:66:89:fd:25:bf:5d:4b:df:96:22: 31:c8:ec:17:e9:b7:bb:0c:5b:92:da:93:4e:31:2e: 08:ea:f1:da:5e:5f:75:9a:ab:e3:12:91:fc:c4:e4: f0:81:d8:38:01:2a:b5:39:bf:49:33:3d:75:90:f0: 4d:9e:16:60:52:8a:bd:0c:9d:a1:81:6c:a9:c0:c5: f4:86:c9:8b:87:57:36:ae:4c:9b:de:50:85:fb:fe: 04:71:01:ed:74:2f:d3:17:3d:3a:84:e8:72:8b:15: e5:12:bd:ea:f5:f5:29:d5:00:ec:25:70:ef:0e:ce: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:72:DE:06:A8:0B:D0:B9:C9:8D:9E:5B:98:CF:75:28:75:40:C8 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:22:79:bc:78:df:15:50:67:4e:b5:38:66:18:c7:07:34:8a: 9d:da:69:8f:2a:d9:a1:f0:42:7b:18:c8:98:22:a6:1b:cf:dc: 5e:ef:8f:a6:19:7c:17:e9:87:59:a9:b4:e0:55:55:1d:71:81: d3:eb:35:ae:6b:55:70:0c:09:71:ec:7a:6f:66:d2:eb:a1:71: 3c:9e:cb:d3:e6:69:9b:80:59:32:be:38:7b:f4:4b:9b:23:3d: 97:fc:51:42:19:a7:e2:82:86:b1:62:32:26:98:cb:91:68:6b: db:61:3c:69:33:47:c9:3a:62:c1:6f:ce:08:36:b3:52:fa:74: 23:ce:9d:b4:db:cc:eb:f1:42:c5:5e:16:64:4e:8c:f4:ec:35: 90:05:2a:79:8d:34:28:c6:10:65:95:24:ad:6f:41:09:23:1c: c5:89:5d:9b:63:21:da:54:c4:d3:7c:63:79:09:7c:ed:b0:e4: 41:fe:db:f9:d3:c1:23:04:b1:bb:d4:9b:9a:19:52:a9:7d:48: 6e:17:da:f4:59:99:a1:79:d1:36:46:4a:cf:e8:a0:a4:52:13: 39:0b:c1:bf:84:fa:b5:ea:b6:fe:49:46:41:48:62:98:8d:14: a8:23:ba:51:d4:c8:bd:b8:49:a9:3d:b5:8c:13:38:7a:a0:20: 2f:5d:c6:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz MjQ4ODI5NDAeFw0yNDEwMjMwNjQ1MzZaFw0yNDEwMzAwNjQ1MzZaMBgxFjAUBgNV BAMTDTY3MTg5YjkxLWFjYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoNFVio6Py/7dh7JYnu4bcM8G0X8dZ5H6yvY1rWh7rN6uYg7TE6Xw2u9qtN4gu EM6p6e92R3u8mmMcUF+I2R2K2sKq4uqt34XtlvJOoVDj4lWYGvuw0KECfAjKtuSv k7+MjI2nz6W4+GmZyLNz+bj1c8GRgfExfDuWSWsCRn0zi9s8i2zS83r6O6QhZon9 Jb9dS9+WIjHI7Bfpt7sMW5Lak04xLgjq8dpeX3Waq+MSkfzE5PCB2DgBKrU5v0kz PXWQ8E2eFmBSir0MnaGBbKnAxfSGyYuHVzauTJveUIX7/gRxAe10L9MXPTqE6HKL FeUSver19SnVAOwlcO8OzjSLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEKRy3gao C9C5yY2eW5jPdSh1QMgwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NkRGLzIzMTg0MDhDODEzRjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JV b0s0eXhKNUtPSXpKSWdwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADIiebx43xVQZ061OGYYxwc0ip3aaY8q2aHwQnsYyJgiphvP3F7vj6YZ fBfph1mptOBVVR1xgdPrNa5rVXAMCXHsem9m0uuhcTyey9PmaZuAWTK+OHv0S5sj PZf8UUIZp+KChrFiMiaYy5Foa9thPGkzR8k6YsFvzgg2s1L6dCPOnbTbzOvxQsVe FmROjPTsNZAFKnmNNCjGEGWVJK1vQQkjHMWJXZtjIdpUxNN8Y3kJfO2w5EH+2/nT wSMEsbvUm5oZUql9SG4X2vRZmaF50TZGSs/ooKRSEzkLwb+E+rXqtv5JRkFIYpiN FKgjulHUyL24Sak9tYwTOHqgIC9dxsY= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org