$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: fjViXzHiqwZMjUBqBW+k7C3gCNgBojfweYl8m+HGnkU= Subject key identifier: 94:B0:89:E7:80:28:C8:10:66:51:36:0F:63:CD:48:60:7E:16:D6:BD Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 87 Signing time: Thu 21 Nov 2024 04:42:06 +0000 Manifest this update: Thu 21 Nov 2024 04:42:06 +0000 Manifest next update: Thu 28 Nov 2024 04:42:06 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: ubE74zbzQ9fiMA2rn63IXDApTVcigXjrOrGiApizGzs=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: 5FEi8T2VCpmTmhbsK7DMCrzbywrJ4Tze/iIy7NAv7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Nov 21 04:42:06 2024 GMT Not After : Nov 28 04:42:06 2024 GMT Subject: CN=673eba1e-42b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:4d:39:73:72:cc:2c:e0:7f:62:57:21:ef: e0:c6:97:a1:92:8f:04:31:73:6c:82:11:45:ce:0d: 47:b6:4a:04:44:e5:b5:4a:20:42:80:38:01:23:5e: 17:29:13:2d:bf:8a:06:fa:f4:25:9d:5f:19:45:9f: 00:6b:65:66:36:c4:6b:8a:74:7c:5c:a5:85:46:72: d8:d0:26:61:0e:06:17:a7:38:67:fe:da:fb:3b:c9: 99:59:48:cd:b2:37:28:76:b5:9e:29:83:f9:a7:e0: a3:5c:e5:d0:88:ee:d5:6a:2e:3d:bb:dc:4d:08:6c: 66:01:a8:cc:11:24:53:02:86:24:c6:92:2b:d9:35: 16:36:9a:b5:b2:a2:19:21:64:41:e7:42:b5:8f:5a: 7d:cf:fc:b0:62:1b:fd:8c:7c:3e:c6:79:d9:23:c4: 04:81:ac:d5:0b:a9:c8:24:0f:ed:d6:eb:c9:ee:eb: 6f:4e:56:41:c9:23:2d:bc:f4:ce:c4:5a:b6:57:92: 1a:b5:73:4d:7f:46:63:1b:fb:da:a1:57:e6:bc:19: 65:ba:30:56:e2:a9:78:6a:e3:e1:6f:30:22:23:aa: 19:66:bd:77:36:dd:2a:4b:b2:87:72:bf:d2:4a:06: f9:54:c0:eb:fd:c9:68:92:73:43:34:4b:b6:0e:c5: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B0:89:E7:80:28:C8:10:66:51:36:0F:63:CD:48:60:7E:16:D6:BD X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:94:89:58:15:d1:f4:f4:0e:7b:57:b7:91:3f:5f:53:e2: ca:be:e2:91:8b:b3:7e:2d:97:2f:e4:ac:3e:86:bd:82:40:b7: f1:cd:70:e1:e1:1a:69:a8:0f:1a:e6:4a:6f:e6:16:69:80:11: 42:f6:a3:32:6f:fa:0d:ac:6e:93:52:47:01:44:e0:61:90:1e: bc:89:c7:2d:71:b7:3d:a8:2b:d1:d9:3b:a6:29:c1:07:e3:e7: e6:9f:4b:1d:88:3d:9e:26:ae:55:e9:7c:2f:a4:4c:4d:b0:14: 5b:ce:2b:3d:fb:6b:1c:ae:8b:68:6e:41:6e:4f:16:5a:d3:5a: 60:6c:87:20:dd:9b:9b:63:35:7c:6e:5e:a6:30:6e:c1:5c:f3: 2e:ed:df:c2:68:65:59:fc:cb:dc:6b:f4:c2:10:b4:03:d3:6e: f5:fa:45:cc:c2:30:e1:6e:90:bb:84:d2:5b:04:16:38:33:10: 2f:29:b5:4c:26:aa:3e:5f:89:f8:56:b5:c4:85:61:a8:c7:54: 5f:c7:d9:a6:fe:44:21:11:dc:f9:fa:a7:e8:f1:55:65:6b:af: 06:c7:65:4b:c3:c4:09:12:24:64:05:4a:7f:b4:13:74:c2:64: 29:9f:1e:ff:09:e7:9b:64:ab:13:58:df:83:bb:41:00:2d:95: e4:a8:66:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjQxMTIxMDQ0MjA2WhcNMjQxMTI4MDQ0MjA2WjAYMRYwFAYD VQQDEw02NzNlYmExZS00MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NlNOXNyzCzgf2JXIe/gxpehko8EMXNsghFFzg1HtkoEROW1SiBCgDgBI14X KRMtv4oG+vQlnV8ZRZ8Aa2VmNsRrinR8XKWFRnLY0CZhDgYXpzhn/tr7O8mZWUjN sjcodrWeKYP5p+CjXOXQiO7Vai49u9xNCGxmAajMESRTAoYkxpIr2TUWNpq1sqIZ IWRB50K1j1p9z/ywYhv9jHw+xnnZI8QEgazVC6nIJA/t1uvJ7utvTlZBySMtvPTO xFq2V5IatXNNf0ZjG/vaoVfmvBllujBW4ql4auPhbzAiI6oZZr13Nt0qS7KHcr/S Sgb5VMDr/cloknNDNEu2DsUtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSwieeA KMgQZlE2D2PNSGB+Fta9MB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVRpSJWBXR9PQOe1e3kT9fU+LKvuKRi7N+LZcv5Kw+hr2CQLfxzXDh 4RppqA8a5kpv5hZpgBFC9qMyb/oNrG6TUkcBROBhkB68icctcbc9qCvR2TumKcEH 4+fmn0sdiD2eJq5V6XwvpExNsBRbzis9+2scrotobkFuTxZa01pgbIcg3ZubYzV8 bl6mMG7BXPMu7d/CaGVZ/Mvca/TCELQD0271+kXMwjDhbpC7hNJbBBY4MxAvKbVM Jqo+X4n4VrXEhWGox1Rfx9mm/kQhEdz5+qfo8VVla68Gx2VLw8QJEiRkBUp/tBN0 wmQpnx7/CeebZKsTWN+Du0EALZXkqGY8 -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:04 2024 by rpki-client on console-ams.rpki-client.org