$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: hnRx7aeDUro99hcWM0CFaffZEcGHGYhifYA3QuVHQhk= Subject key identifier: DE:2D:9C:75:EA:4F:36:E0:32:08:28:11:60:9F:B9:A2:DF:E3:30:91 Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 089F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 089E Signing time: Fri 22 Nov 2024 20:16:09 +0000 Manifest this update: Fri 22 Nov 2024 20:16:09 +0000 Manifest next update: Fri 29 Nov 2024 20:16:09 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: lTrtS/LuVGy4GaMam/VcU1Oc65T47GNiTvFc9gphIlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Nov 22 20:16:09 2024 GMT Not After : Nov 29 20:16:09 2024 GMT Subject: CN=6740e689-fe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:ae:2f:9c:6e:76:ae:52:72:c0:3a:62:1c: bb:a5:a8:82:29:74:31:cd:77:52:32:fe:65:58:5b: 15:02:62:95:7f:2a:a3:13:10:2f:93:f0:2d:2a:48: 85:0a:a7:a9:c6:97:e8:1c:2a:c2:5c:4b:3b:14:d3: ca:ed:26:16:34:6c:71:26:50:bf:17:c5:0c:25:76: 6e:a5:0c:0a:14:04:94:cf:b3:86:8d:66:18:67:88: 6a:6d:c4:6e:c5:00:75:f6:db:26:2e:f4:0c:64:fa: 01:45:0a:5f:2a:0a:01:7a:0c:d7:0a:6f:a8:1a:3c: b8:21:1c:2e:9c:81:b2:3f:58:bf:30:c9:fd:84:a5: 65:fa:c8:9a:8c:cd:ce:da:cd:23:ea:8e:c0:ae:2f: 2c:29:2a:a1:74:0d:5e:26:ce:cd:14:94:22:5d:a3: 4e:16:b5:e8:c9:73:0a:26:30:4e:ef:55:0f:2c:ec: d9:59:87:3e:e1:a8:9b:a4:30:64:39:21:85:25:a4: f8:3a:06:34:3c:bb:c9:a1:1c:f1:3b:a5:08:1f:d5: 72:30:02:1c:81:78:00:ec:84:45:84:68:38:fa:a1: 51:5c:a1:af:23:89:4a:de:23:8e:58:27:92:4e:d4: 7c:6c:d0:77:dd:f3:e7:c1:3f:5a:99:79:9a:72:a7: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2D:9C:75:EA:4F:36:E0:32:08:28:11:60:9F:B9:A2:DF:E3:30:91 X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0b:1f:bc:00:30:e2:ac:d9:73:49:ec:79:37:1f:14:54:c8: 27:1b:4b:3f:1e:c4:61:79:cf:a8:df:be:da:66:7d:c2:99:bf: 1a:e5:1a:8e:2f:d1:f2:8f:7f:50:b2:70:a3:f2:5f:56:4e:1b: 68:d2:cd:60:30:37:36:dc:20:ad:47:72:1b:fb:89:9e:0f:0a: 85:14:bc:43:13:d4:0c:79:c0:61:37:af:e6:13:b7:61:3d:99: fe:1e:8e:e6:a2:05:01:8a:0e:75:ea:49:67:83:04:b7:61:eb: 21:8f:96:b2:93:be:45:97:09:2e:ad:2b:dc:c7:fe:ca:b4:0d: 5c:92:ea:a1:4e:13:74:6a:b0:7b:de:eb:2b:62:bb:1f:a5:57: bf:ea:7e:12:19:3d:fa:61:d9:48:bc:59:a5:b7:fe:c0:51:4c: 4e:08:72:28:32:97:8d:27:e1:d5:b3:b8:1e:67:ee:cf:fd:ca: b2:a1:9d:af:e7:51:37:b6:30:dc:28:44:eb:75:d5:91:87:c2: d0:55:54:3f:98:25:93:9a:a7:aa:55:37:dc:4e:a0:74:a2:db: 27:b2:dc:1d:02:ef:0b:01:f2:2a:e0:4a:93:fc:e1:21:9f:61: 20:05:af:f5:65:66:72:31:ac:e7:f8:ff:d2:eb:43:e1:24:f2: 2f:fa:4d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjQxMTIyMjAxNjA5WhcNMjQxMTI5MjAxNjA5WjAYMRYwFAYD VQQDEw02NzQwZTY4OS1mZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XiuL5xudq5ScsA6Yhy7paiCKXQxzXdSMv5lWFsVAmKVfyqjExAvk/AtKkiF CqepxpfoHCrCXEs7FNPK7SYWNGxxJlC/F8UMJXZupQwKFASUz7OGjWYYZ4hqbcRu xQB19tsmLvQMZPoBRQpfKgoBegzXCm+oGjy4IRwunIGyP1i/MMn9hKVl+siajM3O 2s0j6o7Ari8sKSqhdA1eJs7NFJQiXaNOFrXoyXMKJjBO71UPLOzZWYc+4aibpDBk OSGFJaT4OgY0PLvJoRzxO6UIH9VyMAIcgXgA7IRFhGg4+qFRXKGvI4lK3iOOWCeS TtR8bNB33fPnwT9amXmacqcdGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4tnHXq TzbgMggoEWCfuaLf4zCRMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Cx+8ADDirNlzSex5Nx8UVMgnG0s/HsRhec+o377aZn3Cmb8a5RqO L9Hyj39QsnCj8l9WThto0s1gMDc23CCtR3Ib+4meDwqFFLxDE9QMecBhN6/mE7dh PZn+Ho7mogUBig516klngwS3Yeshj5ayk75FlwkurSvcx/7KtA1ckuqhThN0arB7 3usrYrsfpVe/6n4SGT36YdlIvFmlt/7AUUxOCHIoMpeNJ+HVs7geZ+7P/cqyoZ2v 51E3tjDcKETrddWRh8LQVVQ/mCWTmqeqVTfcTqB0otsnstwdAu8LAfIq4EqT/OEh n2EgBa/1ZWZyMazn+P/S60PhJPIv+k10 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org