$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: ngzUbZx+ZNRKdOoeUhyjeQI8VekrYmUnSIY/mQc6GXo= Subject key identifier: 6A:D2:B2:96:E5:26:04:6E:9B:CF:0F:5F:40:21:B3:5A:F6:F0:74:B5 Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 8D Signing time: Thu 21 Nov 2024 04:42:18 +0000 Manifest this update: Thu 21 Nov 2024 04:42:17 +0000 Manifest next update: Thu 28 Nov 2024 04:42:17 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: bou2treX/0QP9gPVWXLlnrOpU7/nf06Mq8fFJOkg1hc=) 2: F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa (hash: vl+0zKb6RC1QCG54t4yq7igHrF//hZvIU2iFdByDI9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Nov 21 04:42:17 2024 GMT Not After : Nov 28 04:42:17 2024 GMT Subject: CN=673eba29-9ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:8c:0a:d1:12:55:15:91:bd:ad:29:95:60: 58:21:6a:47:5d:df:c4:2e:3e:30:85:d9:de:60:ab: 50:19:87:19:97:25:fa:5f:d9:49:c3:e9:09:12:64: 33:a4:ec:6a:6f:d0:9c:81:f7:78:7a:21:40:de:0d: 4c:a5:9a:3a:5e:4b:ba:e8:0f:5e:7d:8b:a8:17:5d: 6f:b2:59:10:df:f0:8e:84:e2:06:bf:9f:9f:8c:4c: a3:b4:4b:cf:65:ff:02:e6:b8:e7:ca:27:0c:71:d5: 97:6f:8a:11:2c:da:7f:fb:9d:36:2d:4f:c1:91:88: 54:b3:36:e9:c5:31:a2:b3:48:d6:63:b1:3a:07:ca: 84:8c:97:20:c5:2c:9a:45:57:6b:a7:0d:4b:c2:74: 79:fe:aa:e4:03:b9:d2:35:2f:14:9a:16:19:fc:af: c2:18:b9:04:c2:2e:15:e7:39:74:59:72:07:6d:23: 90:04:ed:1f:4b:2a:c8:59:01:b3:09:9a:61:db:78: 7c:a9:3b:2b:f2:c6:bd:ac:c3:f4:dc:c6:d1:5b:2a: 4b:f3:c1:ec:13:2a:9d:84:c0:d5:a9:3b:82:b5:c1: 87:57:7a:b7:c1:30:c1:ea:11:e0:ed:44:ca:40:d6: 67:f9:17:d1:c5:e8:79:47:7d:be:eb:15:77:c3:05: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D2:B2:96:E5:26:04:6E:9B:CF:0F:5F:40:21:B3:5A:F6:F0:74:B5 X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c8:46:a1:34:50:c3:30:a8:e1:e4:b7:0a:34:5e:42:da:df: c4:3a:4a:aa:b8:d7:74:0c:94:84:d3:85:ce:95:b9:5a:65:25: 57:a8:04:7f:dd:c7:2a:2c:c6:3e:54:56:1c:cb:c0:14:0b:f9: 4f:7a:88:f9:0b:50:67:c6:20:cb:b0:11:ca:d3:83:63:72:a1: bb:0f:d4:77:05:95:e6:85:5e:95:41:6e:cf:77:8f:47:3a:37: 59:50:44:b5:b4:05:96:3e:e7:ca:1e:46:45:6e:ae:ec:22:ff: d7:05:83:a2:6c:e2:1f:67:71:92:36:7e:f1:15:4c:55:fe:23: b9:1f:69:5d:67:6e:5b:89:83:41:4a:91:2b:66:6d:5a:0e:b9: 43:e0:d5:76:f2:4a:e1:41:23:b4:d3:51:3e:20:33:aa:6a:6b: 25:fa:04:66:36:14:dc:77:02:a2:9d:59:07:42:91:f3:49:8b: e8:72:26:6d:b5:cd:a2:60:c9:c1:95:2e:c9:b8:54:66:2c:8d: dc:f3:0d:a5:d7:76:48:e2:b9:3a:51:48:a2:e6:a6:46:c0:e3: ef:df:ec:6a:03:28:78:5d:28:25:4e:bf:13:3a:83:a1:01:28: 6a:1e:27:a2:05:2c:3a:fb:36:39:f3:78:0f:c7:0c:b0:ee:7a: ab:13:98:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjQxMTIxMDQ0MjE3WhcNMjQxMTI4MDQ0MjE3WjAYMRYwFAYD VQQDEw02NzNlYmEyOS05YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10OMCtESVRWRva0plWBYIWpHXd/ELj4whdneYKtQGYcZlyX6X9lJw+kJEmQz pOxqb9Ccgfd4eiFA3g1MpZo6Xku66A9efYuoF11vslkQ3/COhOIGv5+fjEyjtEvP Zf8C5rjnyicMcdWXb4oRLNp/+502LU/BkYhUszbpxTGis0jWY7E6B8qEjJcgxSya RVdrpw1LwnR5/qrkA7nSNS8UmhYZ/K/CGLkEwi4V5zl0WXIHbSOQBO0fSyrIWQGz CZph23h8qTsr8sa9rMP03MbRWypL88HsEyqdhMDVqTuCtcGHV3q3wTDB6hHg7UTK QNZn+RfRxeh5R32+6xV3wwXBVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrSspbl JgRum88PX0Ahs1r28HS1MB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcyEahNFDDMKjh5LcKNF5C2t/EOkqquNd0DJSE04XOlblaZSVXqAR/ 3ccqLMY+VFYcy8AUC/lPeoj5C1BnxiDLsBHK04NjcqG7D9R3BZXmhV6VQW7Pd49H OjdZUES1tAWWPufKHkZFbq7sIv/XBYOibOIfZ3GSNn7xFUxV/iO5H2ldZ25biYNB SpErZm1aDrlD4NV28krhQSO001E+IDOqamsl+gRmNhTcdwKinVkHQpHzSYvociZt tc2iYMnBlS7JuFRmLI3c8w2l13ZI4rk6UUii5qZGwOPv3+xqAyh4XSglTr8TOoOh AShqHieiBSw6+zY583gPxwyw7nqrE5ib -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org