$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: jTOhr71fZm0GvPSbF7bEYR+HhjrTQli6PylROfVSC4U= Subject key identifier: 1E:9E:B6:43:85:47:6A:AC:80:23:FF:C1:B8:15:19:DC:8A:17:F3:6F Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1438 Signing time: Wed 20 Nov 2024 16:52:53 +0000 Manifest this update: Wed 20 Nov 2024 16:52:53 +0000 Manifest next update: Wed 27 Nov 2024 16:52:53 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: qLr2Ck88GA3RcIwATcNLzw+tg6mCl2sXYVpYZwgMQPs=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5206 (0x1456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Nov 20 16:52:53 2024 GMT Not After : Nov 27 16:52:53 2024 GMT Subject: CN=673e13e5-815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:0e:2b:c2:2d:2d:13:83:bb:41:fa:db:9d: e6:27:85:6f:28:e3:73:cd:c6:ec:5e:18:af:19:a7: 65:5b:8d:c3:e9:4c:65:58:09:3e:15:55:3b:55:4c: 67:cc:2f:18:da:27:30:44:98:2d:76:21:aa:3e:ba: b7:ea:99:ab:e9:21:b5:30:a2:31:75:61:76:bb:30: 9e:e5:80:eb:95:c9:9f:d0:29:e3:47:4b:bc:3c:a2: 0c:8f:6b:90:c5:4f:41:5b:7a:90:26:d0:27:e2:d4: 55:3a:12:eb:a1:eb:94:ef:40:aa:25:aa:d0:3b:d0: 7a:20:07:9c:df:7e:46:b3:43:b4:0e:39:3b:77:3b: e0:a5:da:ac:17:16:0d:48:4f:dd:ee:f9:e6:a7:8c: ba:d9:e2:8d:d3:23:a9:cf:e0:d0:06:9d:ab:71:65: a6:c5:28:3f:78:ca:f7:f0:5d:6f:37:fb:73:10:b4: 79:fb:b2:14:6f:08:3a:9c:38:54:43:29:b1:dd:17: cf:fa:8b:56:a8:ea:53:b8:d6:a9:5c:44:a1:d4:a5: ed:e0:a9:33:b1:ff:14:ab:9c:e1:80:0b:59:3f:87: 54:e4:1d:22:5f:6a:51:3f:ab:d0:8d:60:7c:69:d1: 42:8a:3e:2f:17:78:ba:91:45:54:c5:11:ab:31:1b: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:B6:43:85:47:6A:AC:80:23:FF:C1:B8:15:19:DC:8A:17:F3:6F X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:90:1b:e8:29:b3:21:c0:2d:5b:4f:86:74:4c:36:a3:0d:ed: ee:b3:cf:8f:c9:0a:73:e9:8d:ed:9e:5f:49:ad:96:c9:04:d1: 99:7f:3d:3f:0e:bb:1a:dd:0a:1f:69:04:32:cf:81:a8:2d:b8: b1:da:a1:b3:e7:4e:71:62:f6:83:81:e8:dd:6f:ed:1f:35:24: 5c:87:c6:8b:c5:7f:1a:fb:f7:be:ac:a0:a6:76:2f:49:db:a5: a8:95:bf:f6:d2:b9:dc:3b:5f:f2:01:88:cc:49:53:f3:9b:a7: 52:6f:d4:04:40:0a:04:cf:1c:83:47:64:95:e0:f2:09:72:51: f9:08:dd:f9:c4:c5:ad:44:2d:e4:b0:14:4a:58:ca:98:61:40: c0:f7:2f:b8:14:61:6a:32:c8:c3:b8:83:99:a2:71:35:16:7c: b0:79:5d:a3:87:09:a9:bf:16:1a:b5:c3:b7:b2:e7:34:c3:1d: 96:40:72:93:18:3a:86:53:65:1b:52:bc:71:cf:65:98:d2:b8: c3:f2:f1:d6:e6:9e:6f:31:53:9f:aa:21:50:5c:fd:ee:ec:1c: df:3f:28:29:67:72:2e:63:f5:63:27:17:01:a4:07:d7:eb:12: 34:6a:e2:ce:fd:99:1d:11:37:c1:8c:34:f2:07:9f:f3:83:ea: c0:37:80:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjQxMTIwMTY1MjUzWhcNMjQxMTI3MTY1MjUzWjAYMRYwFAYD VQQDEw02NzNlMTNlNS04MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA258OK8ItLRODu0H6253mJ4VvKONzzcbsXhivGadlW43D6UxlWAk+FVU7VUxn zC8Y2icwRJgtdiGqPrq36pmr6SG1MKIxdWF2uzCe5YDrlcmf0CnjR0u8PKIMj2uQ xU9BW3qQJtAn4tRVOhLroeuU70CqJarQO9B6IAec335Gs0O0Djk7dzvgpdqsFxYN SE/d7vnmp4y62eKN0yOpz+DQBp2rcWWmxSg/eMr38F1vN/tzELR5+7IUbwg6nDhU Qymx3RfP+otWqOpTuNapXESh1KXt4Kkzsf8Uq5zhgAtZP4dU5B0iX2pRP6vQjWB8 adFCij4vF3i6kUVUxRGrMRu3EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6etkOF R2qsgCP/wbgVGdyKF/NvMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrkBvoKbMhwC1bT4Z0TDajDe3us8+PyQpz6Y3tnl9JrZbJBNGZfz0/ Drsa3QofaQQyz4GoLbix2qGz505xYvaDgejdb+0fNSRch8aLxX8a+/e+rKCmdi9J 26Wolb/20rncO1/yAYjMSVPzm6dSb9QEQAoEzxyDR2SV4PIJclH5CN35xMWtRC3k sBRKWMqYYUDA9y+4FGFqMsjDuIOZonE1FnyweV2jhwmpvxYatcO3suc0wx2WQHKT GDqGU2UbUrxxz2WY0rjD8vHW5p5vMVOfqiFQXP3u7BzfPygpZ3IuY/VjJxcBpAfX 6xI0auLO/ZkdETfBjDTyB5/zg+rAN4D9 -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org