$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: rcDsQJJIzYE/CFQeeuAzfoWBNBm08oQJetNUp7FkqrQ= Subject key identifier: 9B:DF:B7:EE:0D:24:BE:22:50:E1:A6:C6:96:91:03:E6:50:A7:B3:5D Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 53 Signing time: Sat 23 Nov 2024 05:11:57 +0000 Manifest this update: Sat 23 Nov 2024 05:11:57 +0000 Manifest next update: Sat 30 Nov 2024 05:11:57 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: 9NjP9POtGX0CSf6tbnmgqxqHas4uS1mQBdqUyAZNjSI=) 2: F7EF268E397011EF954B1B39C4F9AE02.roa (hash: euRG8IVCA4fX6jHnE8+1OJTVYSKrlDOIE2xoBbwqJ+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Nov 23 05:11:57 2024 GMT Not After : Nov 30 05:11:57 2024 GMT Subject: CN=6741641d-60db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:c9:b8:78:da:be:aa:79:31:35:a9:8f:4a: 97:b8:3a:66:89:af:0e:f8:6b:54:18:54:e1:dc:b4: 6a:b8:80:f8:26:df:1d:1b:4a:64:00:cf:d3:8a:dc: 87:8f:2f:7d:9a:0c:9a:0d:bb:48:5c:72:bf:a8:52: 56:d7:d0:f7:75:c4:67:f8:dd:da:65:f8:33:49:f7: 6e:f6:14:62:78:f8:f6:bb:3f:c4:12:50:29:c3:1b: 66:a8:0e:5a:ed:d6:d1:b7:83:6c:34:0e:d8:79:62: 26:fa:a2:06:cb:5d:e1:4e:3e:53:6f:4a:f1:7d:ef: 4c:bb:d5:5a:93:16:61:c6:dd:a1:cd:7a:ae:1a:88: 56:5a:e1:4a:7b:78:fd:eb:5d:23:89:55:82:17:6e: fa:e8:de:0f:a5:dc:72:fa:47:84:6d:7e:db:1c:5d: 26:b5:ce:3e:a8:4e:10:38:69:6b:09:d1:cf:f6:ce: a2:1b:05:b8:7e:8e:34:34:95:34:5a:33:35:be:d0: 9a:d0:5b:06:77:ba:81:d1:0e:ab:4d:ab:c3:34:62: 00:28:79:2a:92:7b:a8:f7:0a:cd:13:00:d6:e9:6f: b0:e8:e5:96:04:88:08:8f:6f:85:35:d7:61:cf:13: 3e:5a:c5:3b:eb:e0:8c:b4:4b:d8:fc:19:5e:b9:06: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:B7:EE:0D:24:BE:22:50:E1:A6:C6:96:91:03:E6:50:A7:B3:5D X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:1d:18:00:4f:b7:62:5b:29:ab:27:57:f3:a0:4a:13:20: 1c:1c:03:00:24:47:0d:27:2d:26:cb:f2:7a:98:58:be:fe:66: b0:54:03:3a:e6:9e:bb:ae:13:d6:62:79:5c:29:ac:9e:9a:21: 4c:83:fc:32:3a:29:c6:e3:2c:11:c9:c5:91:58:a2:35:4c:dd: 57:63:dc:74:dc:7e:df:1e:a8:18:d7:a0:35:5d:56:4b:fa:ec: 86:4e:28:08:5f:88:4d:48:61:4f:ce:5d:42:75:78:ac:94:1f: 78:09:64:c2:b5:34:ed:49:5f:e7:e9:65:59:d2:1f:df:c5:f0: 6c:4c:cb:7e:3f:c0:8d:4f:78:83:74:51:47:41:38:06:56:1c: 93:b1:8a:a7:f9:15:34:b7:03:c3:6b:44:be:9a:fe:dd:0d:46: 96:59:b6:70:1d:6c:df:1c:b1:b5:f0:16:c8:f1:e7:47:83:80: 21:7b:61:93:ba:ca:52:18:f5:7b:af:62:19:41:8e:7a:9b:94: e7:90:03:64:69:cf:c5:61:ff:cd:21:11:b0:b7:43:63:c8:c0: 78:98:72:80:8d:1e:f8:6e:67:c4:c0:ef:74:d6:c8:c8:b4:7e: 71:9f:53:dd:0a:87:56:44:c1:4e:a6:e0:e2:cf:13:9a:dd:93: 98:a0:c5:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUJCMjExMC8GA1UEBRMoQ0QzREY1M0FBMEU5QTM5ODU5NUU5NTcwMTUxNTVCQ0NB QzU2OEQxNTAeFw0yNDExMjMwNTExNTdaFw0yNDExMzAwNTExNTdaMBgxFjAUBgNV BAMTDTY3NDE2NDFkLTYwZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLdsm4eNq+qnkxNamPSpe4OmaJrw74a1QYVOHctGq4gPgm3x0bSmQAz9OK3IeP L32aDJoNu0hccr+oUlbX0Pd1xGf43dpl+DNJ9272FGJ4+Pa7P8QSUCnDG2aoDlrt 1tG3g2w0Dth5Yib6ogbLXeFOPlNvSvF970y71VqTFmHG3aHNeq4aiFZa4Up7eP3r XSOJVYIXbvro3g+l3HL6R4RtftscXSa1zj6oThA4aWsJ0c/2zqIbBbh+jjQ0lTRa MzW+0JrQWwZ3uoHRDqtNq8M0YgAoeSqSe6j3Cs0TANbpb7Do5ZYEiAiPb4U112HP Ez5axTvr4Iy0S9j8GV65Bg3hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm9+37g0k viJQ4abGlpED5lCns10wHwYDVR0jBBgwFoAUzT31OqDpo5hZXpVwFRVbzKxWjRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YzN0YyNDZFMzI5 NTExRUY5QTQ4MkY1NUM0RjlBRTAyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelQzMU9xRHBvNWhaWHBWd0ZSVmJ6S3hXalJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QkIyL0YzN0YyNDZFMzI5NTExRUY5QTQ4MkY1NUM0RjlBRTAyL3pUMzFPcURwbzVo WlhwVndGUlZiekt4V2pSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJ1HRgAT7diWymrJ1fzoEoTIBwcAwAkRw0nLSbL8nqYWL7+ZrBUAzrm nruuE9ZieVwprJ6aIUyD/DI6KcbjLBHJxZFYojVM3Vdj3HTcft8eqBjXoDVdVkv6 7IZOKAhfiE1IYU/OXUJ1eKyUH3gJZMK1NO1JX+fpZVnSH9/F8GxMy34/wI1PeIN0 UUdBOAZWHJOxiqf5FTS3A8NrRL6a/t0NRpZZtnAdbN8csbXwFsjx50eDgCF7YZO6 ylIY9XuvYhlBjnqblOeQA2Rpz8Vh/80hEbC3Q2PIwHiYcoCNHvhuZ8TA73TWyMi0 fnGfU90Kh1ZEwU6m4OLPE5rdk5igxWA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org