$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: 3Zpwy0X+6J+UL0qdq7tnmT3GBVyelC6NasKKjMWxkDg= Subject key identifier: 1A:C8:16:81:CD:7B:DA:6C:23:42:03:E9:0C:37:C9:A3:22:AE:F2:E6 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 1541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 1541 Signing time: Fri 22 Nov 2024 16:49:33 +0000 Manifest this update: Fri 22 Nov 2024 16:49:32 +0000 Manifest next update: Fri 29 Nov 2024 16:49:32 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: Sksyh8h/kR+EDPIhsy0l/FTmTMnJEHjIvPx6V5XqF9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5441 (0x1541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Nov 22 16:49:32 2024 GMT Not After : Nov 29 16:49:32 2024 GMT Subject: CN=6740b61d-0c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9c:40:0c:56:31:0e:54:15:03:37:fc:78:39: 7c:9b:18:0d:28:48:11:02:fd:6b:ab:00:1b:07:dd: 8a:71:2c:00:2f:d5:b8:e7:7c:15:23:09:36:3b:71: 14:c9:fb:a9:f3:15:ba:58:ed:bb:ba:16:48:69:ea: 4c:30:84:98:ff:70:26:61:f9:9a:93:8c:5e:11:42: 05:8a:ab:14:5b:2a:d7:5b:b1:34:e2:f8:e1:b9:2e: d4:d6:58:56:aa:b4:77:ae:56:d0:0f:7e:8c:f3:7a: b7:ae:1e:f8:69:38:df:e7:85:77:29:a3:ca:4c:31: 66:8b:87:b3:00:f0:74:b0:75:fc:54:57:de:ea:f9: d7:1a:4d:9b:31:92:ce:9e:3c:20:41:05:61:e3:2e: a1:d0:1d:54:c6:e0:e2:1c:4a:58:79:4c:fd:7a:ef: 0c:0f:84:65:0d:1f:5b:ec:82:9b:5d:69:87:c4:4b: 70:c9:1a:1e:30:96:c4:66:7e:9d:a8:e8:28:b3:e5: 20:c6:de:48:41:2c:99:57:2b:6d:fb:06:a3:5a:8b: 02:c4:74:91:5f:58:a5:e8:7b:d1:9b:d3:46:cb:23: aa:36:57:e7:b0:1d:f1:ea:58:61:b4:8e:4b:cf:7b: a0:e4:c1:3f:18:ab:b0:16:3f:3f:a7:c5:f5:8d:c2: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C8:16:81:CD:7B:DA:6C:23:42:03:E9:0C:37:C9:A3:22:AE:F2:E6 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:58:42:d5:eb:1a:57:ca:7d:9d:e0:2e:a0:74:a0:32:4a:ff: 9e:f6:d9:6a:43:a0:21:d1:33:4e:2a:8f:eb:67:e3:1c:3e:78: bd:ad:d2:00:16:74:e1:e3:ae:a6:ef:4c:3d:e1:27:83:f6:6d: af:74:8a:61:4e:a8:6c:62:c7:97:80:27:72:7d:66:05:83:45: c0:03:b9:46:b0:2d:da:7a:2c:dd:59:f7:90:0c:a5:1d:41:31: 3a:e5:2c:af:67:49:0c:e4:6e:9f:c9:ed:fd:53:ad:09:98:73: 35:bc:8d:bb:ad:c1:02:ce:2a:48:a0:2d:dd:9b:65:00:72:04: 50:0e:67:0a:ae:15:1a:e9:95:29:95:cd:bb:84:8b:16:39:3b: 0e:20:1a:fa:89:7e:a6:64:49:2b:37:16:91:56:af:2d:11:95: 1e:e2:db:3c:a6:16:51:f7:05:8b:28:d2:ce:67:18:0f:35:4c: cd:3c:cf:77:5c:c6:fa:37:ba:13:3c:9a:db:31:93:d0:00:79: a4:1f:40:dc:de:11:c0:21:54:aa:80:5d:50:70:68:f0:1c:b8: 5f:1a:48:84:04:54:0d:f5:55:04:a6:02:26:12:3f:9e:f5:b9: 08:ef:b5:1a:9c:df:98:ca:b7:01:d1:9b:21:81:7d:ce:4e:b4: 5d:4c:c7:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjQxMTIyMTY0OTMyWhcNMjQxMTI5MTY0OTMyWjAYMRYwFAYD VQQDEw02NzQwYjYxZC0wYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pxADFYxDlQVAzf8eDl8mxgNKEgRAv1rqwAbB92KcSwAL9W453wVIwk2O3EU yfup8xW6WO27uhZIaepMMISY/3AmYfmak4xeEUIFiqsUWyrXW7E04vjhuS7U1lhW qrR3rlbQD36M83q3rh74aTjf54V3KaPKTDFmi4ezAPB0sHX8VFfe6vnXGk2bMZLO njwgQQVh4y6h0B1UxuDiHEpYeUz9eu8MD4RlDR9b7IKbXWmHxEtwyRoeMJbEZn6d qOgos+Ugxt5IQSyZVytt+wajWosCxHSRX1il6HvRm9NGyyOqNlfnsB3x6lhhtI5L z3ug5ME/GKuwFj8/p8X1jcKa+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrIFoHN e9psI0ID6Qw3yaMirvLmMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2WELV6xpXyn2d4C6gdKAySv+e9tlqQ6Ah0TNOKo/rZ+McPni9rdIA FnTh466m70w94SeD9m2vdIphTqhsYseXgCdyfWYFg0XAA7lGsC3aeizdWfeQDKUd QTE65SyvZ0kM5G6fye39U60JmHM1vI27rcECzipIoC3dm2UAcgRQDmcKrhUa6ZUp lc27hIsWOTsOIBr6iX6mZEkrNxaRVq8tEZUe4ts8phZR9wWLKNLOZxgPNUzNPM93 XMb6N7oTPJrbMZPQAHmkH0Dc3hHAIVSqgF1QcGjwHLhfGkiEBFQN9VUEpgImEj+e 9bkI77UanN+YyrcB0ZshgX3OTrRdTMc6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org