$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: q1unPKvplQeNtyQS6pB8N8Ti6OmJzjB7oC4g3E0gWoo= Subject key identifier: 7D:11:09:E1:41:1B:2E:28:1B:8C:FB:06:36:99:E3:AC:28:C4:2C:13 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0805 Signing time: Fri 22 Nov 2024 20:36:13 +0000 Manifest this update: Fri 22 Nov 2024 20:36:13 +0000 Manifest next update: Fri 29 Nov 2024 20:36:13 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: IvatTumYpjf9xoxWTyaMA4tO3q2N+ZlALzOFO7QywWQ=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: /ftC2uTOBPGHfei3sjcF0l8WczvnxJUD11gXFuZBxZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Nov 22 20:36:13 2024 GMT Not After : Nov 29 20:36:13 2024 GMT Subject: CN=6740eb3d-a736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:7c:46:25:62:54:00:fb:51:95:4e:de:fe: fd:7a:b5:3f:86:d7:19:80:44:5c:6c:c8:86:ee:81: bf:c0:ba:55:fa:64:43:03:ec:e6:5a:c9:d8:53:2d: e1:2c:d2:47:b2:88:a8:b6:b6:4a:11:56:a2:18:a1: b3:f7:a5:6e:1b:23:63:ee:4a:da:64:6e:93:3b:d1: 45:75:f5:ae:05:3c:da:f4:c8:b7:e4:d2:8a:8c:fd: 61:09:d9:b5:89:98:84:29:bd:0e:79:9c:4a:db:b0: 31:6d:f9:76:b1:3d:36:a2:f4:9a:98:46:ed:14:e5: 22:0d:2c:c0:7a:7f:b6:31:2d:10:d4:46:55:6b:3d: 4e:ce:e3:62:1d:95:9d:77:ed:bc:5d:71:ab:f5:d4: 3f:09:73:5a:30:10:31:b6:39:c5:2d:10:cd:a6:df: 79:c8:eb:4a:ce:2b:64:24:92:f3:11:60:14:bf:82: 2c:b3:91:f6:5d:21:1b:87:fc:b6:f5:4e:9f:5a:e6: e0:a1:2f:6c:a7:cc:69:c4:aa:d5:1e:28:9b:1d:ce: 00:b1:3d:b4:3d:0f:6c:fd:78:8d:b1:2d:dd:3c:a1: a6:17:78:68:79:ad:27:cd:59:dd:62:bd:f9:80:8e: f7:48:5a:2b:a5:0e:f3:c3:57:8d:e5:e7:cf:95:0f: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:11:09:E1:41:1B:2E:28:1B:8C:FB:06:36:99:E3:AC:28:C4:2C:13 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8f:c9:53:ef:65:6f:1b:f1:88:d0:f4:32:92:15:7f:0f:ec: 08:79:54:c9:c1:c5:e0:ef:a4:53:24:b2:95:58:2a:9c:76:a8: 7b:c0:1b:e2:b5:a9:70:68:06:4b:ed:62:83:b9:db:ab:1d:17: fa:a3:52:a3:fa:a1:55:56:bf:69:75:a6:7a:9c:08:45:e6:bb: c6:5e:44:56:13:e7:52:6e:50:b5:5c:fd:d3:fd:a0:d9:2a:d1: 6d:1a:bc:9e:bc:16:39:3c:0b:a8:68:b9:ae:8d:72:0a:6c:4b: 00:e1:27:4f:2c:c4:97:ff:73:55:22:91:36:64:9c:d0:80:02: 40:09:5f:fa:8f:2d:3a:23:ce:f8:97:0c:db:09:84:d0:50:34: 0c:c6:60:62:85:ea:da:a6:dc:09:61:7d:5f:c2:72:0a:f7:13: cd:71:e5:7a:5b:62:9f:90:f1:ab:51:96:b1:1b:f0:d0:d3:03: d4:2b:3f:92:5e:45:22:1c:74:c8:1d:8d:33:e8:49:24:5e:b4: 7c:03:d6:8d:03:d0:f6:bd:86:37:df:cd:cf:5d:b3:d2:32:78: 60:dd:22:f8:05:8d:9b:27:d1:ba:35:3a:d7:e0:7d:ef:67:67: 01:7e:43:16:23:49:01:c5:c8:b8:e6:73:d8:3f:37:3f:ce:0a: f8:a7:a9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjQxMTIyMjAzNjEzWhcNMjQxMTI5MjAzNjEzWjAYMRYwFAYD VQQDEw02NzQwZWIzZC1hNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC98RiViVAD7UZVO3v79erU/htcZgERcbMiG7oG/wLpV+mRDA+zmWsnYUy3h LNJHsoiotrZKEVaiGKGz96VuGyNj7kraZG6TO9FFdfWuBTza9Mi35NKKjP1hCdm1 iZiEKb0OeZxK27Axbfl2sT02ovSamEbtFOUiDSzAen+2MS0Q1EZVaz1OzuNiHZWd d+28XXGr9dQ/CXNaMBAxtjnFLRDNpt95yOtKzitkJJLzEWAUv4Iss5H2XSEbh/y2 9U6fWubgoS9sp8xpxKrVHiibHc4AsT20PQ9s/XiNsS3dPKGmF3hoea0nzVndYr35 gI73SForpQ7zw1eN5efPlQ9npQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0RCeFB Gy4oG4z7BjaZ46woxCwTMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZj8lT72VvG/GI0PQykhV/D+wIeVTJwcXg76RTJLKVWCqcdqh7wBvi talwaAZL7WKDudurHRf6o1Kj+qFVVr9pdaZ6nAhF5rvGXkRWE+dSblC1XP3T/aDZ KtFtGryevBY5PAuoaLmujXIKbEsA4SdPLMSX/3NVIpE2ZJzQgAJACV/6jy06I874 lwzbCYTQUDQMxmBiheraptwJYX1fwnIK9xPNceV6W2KfkPGrUZaxG/DQ0wPUKz+S XkUiHHTIHY0z6EkkXrR8A9aNA9D2vYY3383PXbPSMnhg3SL4BY2bJ9G6NTrX4H3v Z2cBfkMWI0kBxci45nPYPzc/zgr4p6lb -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org