$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: gR4+yAzbhvbjMvrnadsz/Ua/bqSxMFPm+fGK8QMEsds= Subject key identifier: 2A:78:20:93:A6:62:8D:5C:84:31:49:A1:A7:13:10:C0:2E:D1:A4:82 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 30 Signing time: Sun 15 Sep 2024 10:07:30 +0000 Manifest this update: Sun 15 Sep 2024 10:07:29 +0000 Manifest next update: Sun 22 Sep 2024 10:07:29 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: 0HeRqtpudJ8f6ZAGHXzloCyviBR5nN+T4H0mHKsQ+UA=) 2: F7EF268E397011EF954B1B39C4F9AE02.roa (hash: euRG8IVCA4fX6jHnE8+1OJTVYSKrlDOIE2xoBbwqJ+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Sep 15 10:07:29 2024 GMT Not After : Sep 22 10:07:29 2024 GMT Subject: CN=66e6b1e1-459c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:8b:42:c2:08:df:ab:c7:48:93:5c:42:17: 62:e7:87:a3:07:3f:90:8b:e1:71:84:40:e3:59:4c: 43:13:98:fc:e8:03:9d:a0:44:30:d1:68:07:47:52: ee:8f:af:4a:5c:f5:3c:2d:3e:b8:93:74:f9:91:68: cd:1e:75:47:14:f9:f3:6c:31:02:25:e5:1a:81:7b: 41:62:df:02:a6:cc:02:54:c1:21:72:5f:18:3b:a6: 39:2e:70:d6:81:34:10:0d:41:e4:94:e9:b4:bb:fd: 5a:4e:57:0b:b7:82:33:7b:cc:10:58:de:1f:6c:e6: a9:46:b2:e1:5a:be:85:1b:0e:aa:f1:0e:be:3b:74: 75:76:90:66:51:2a:0a:95:b8:e3:91:06:af:dd:c3: 8b:c3:eb:94:48:35:31:f0:1d:6a:35:1e:45:98:c2: b6:41:b8:de:c5:c2:91:66:7e:9e:af:65:e5:29:63: a6:ba:d9:a1:01:54:51:33:60:94:70:0f:8a:de:b9: b8:67:62:dd:cc:52:02:92:c6:1e:6a:83:ce:10:f4: 2c:59:da:39:f3:a7:bd:e6:31:dd:8f:b4:60:83:b8: 9a:e0:aa:96:7c:7d:28:5b:be:b4:69:61:de:ce:c9: e0:9b:8a:30:70:97:24:e3:98:1b:1b:92:fd:81:e5: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:20:93:A6:62:8D:5C:84:31:49:A1:A7:13:10:C0:2E:D1:A4:82 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a3:8d:4c:eb:8a:25:98:e4:1b:83:94:c8:fd:3d:27:18:e6: 93:74:05:49:3c:bf:e9:16:aa:2e:7f:9b:ad:a6:08:ad:c6:c3: b6:66:f8:cb:93:68:db:41:e4:1e:d2:28:02:e3:56:fa:22:39: db:bf:83:04:c7:ac:a7:fa:3f:3b:da:92:62:bb:9c:4a:5f:47: 3b:9b:a4:59:1c:a1:e1:13:03:8a:d2:4b:7a:53:94:cf:7f:fc: c3:eb:7d:42:d3:2f:5e:8f:39:84:1d:6f:1c:b3:b7:f8:4b:24: 98:46:fd:38:e7:a0:bd:ba:80:dd:09:3b:d4:9f:13:66:f3:b0: a1:54:b4:a9:2a:0c:57:81:51:f6:16:ca:2f:06:83:8d:57:b4: d6:b4:1a:ff:e1:9f:83:07:ea:50:a6:14:ae:8d:d3:37:4f:58: 10:6d:a3:fd:f2:a1:3b:4a:2f:56:c5:b3:5d:a2:8b:fb:d3:3e: c4:17:bf:ca:61:f8:81:9b:9a:d6:e0:b8:11:0e:a5:41:bd:f8: 1c:70:71:f7:b0:9e:df:99:3f:bd:f8:e7:23:85:66:57:d8:68: 6f:96:91:11:3f:ae:85:ea:44:86:85:73:ee:8f:6c:a0:5a:78: 2c:03:0c:5a:89:58:bb:c2:41:43:f4:3d:2f:51:a8:42:a8:94: d2:c0:1b:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUJCMjExMC8GA1UEBRMoQ0QzREY1M0FBMEU5QTM5ODU5NUU5NTcwMTUxNTVCQ0NB QzU2OEQxNTAeFw0yNDA5MTUxMDA3MjlaFw0yNDA5MjIxMDA3MjlaMBgxFjAUBgNV BAMTDTY2ZTZiMWUxLTQ1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNG4tCwgjfq8dIk1xCF2Lnh6MHP5CL4XGEQONZTEMTmPzoA52gRDDRaAdHUu6P r0pc9TwtPriTdPmRaM0edUcU+fNsMQIl5RqBe0Fi3wKmzAJUwSFyXxg7pjkucNaB NBANQeSU6bS7/VpOVwu3gjN7zBBY3h9s5qlGsuFavoUbDqrxDr47dHV2kGZRKgqV uOORBq/dw4vD65RINTHwHWo1HkWYwrZBuN7FwpFmfp6vZeUpY6a62aEBVFEzYJRw D4reubhnYt3MUgKSxh5qg84Q9CxZ2jnzp73mMd2PtGCDuJrgqpZ8fShbvrRpYd7O yeCbijBwlyTjmBsbkv2B5W+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKnggk6Zi jVyEMUmhpxMQwC7RpIIwHwYDVR0jBBgwFoAUzT31OqDpo5hZXpVwFRVbzKxWjRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YzN0YyNDZFMzI5 NTExRUY5QTQ4MkY1NUM0RjlBRTAyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelQzMU9xRHBvNWhaWHBWd0ZSVmJ6S3hXalJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QkIyL0YzN0YyNDZFMzI5NTExRUY5QTQ4MkY1NUM0RjlBRTAyL3pUMzFPcURwbzVo WlhwVndGUlZiekt4V2pSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKWjjUzriiWY5BuDlMj9PScY5pN0BUk8v+kWqi5/m62mCK3Gw7Zm+MuT aNtB5B7SKALjVvoiOdu/gwTHrKf6PzvakmK7nEpfRzubpFkcoeETA4rSS3pTlM9/ /MPrfULTL16POYQdbxyzt/hLJJhG/TjnoL26gN0JO9SfE2bzsKFUtKkqDFeBUfYW yi8Gg41XtNa0Gv/hn4MH6lCmFK6N0zdPWBBto/3yoTtKL1bFs12ii/vTPsQXv8ph +IGbmtbguBEOpUG9+Bxwcfewnt+ZP7345yOFZlfYaG+WkRE/roXqRIaFc+6PbKBa eCwDDFqJWLvCQUP0PS9RqEKolNLAG+c= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:09 2024 by rpki-client on console-fra.rpki-client.org