$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: WHJdBUHkyRKgvpcrH879lWilX+yC8eD1gzpGkPXLIGY= Subject key identifier: A0:B5:C2:73:01:96:23:5B:50:0B:59:B5:1E:8B:74:C4:44:7D:6E:A1 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 25 Signing time: Thu 21 Nov 2024 05:51:12 +0000 Manifest this update: Thu 21 Nov 2024 05:51:12 +0000 Manifest next update: Thu 28 Nov 2024 05:51:12 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: CSrgLht55kZJZ5Mc7rmWZcBs74kShSlhRQ6JvHcH3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Nov 21 05:51:12 2024 GMT Not After : Nov 28 05:51:12 2024 GMT Subject: CN=673eca50-c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:31:51:c5:01:e7:a2:19:e0:d9:bb:d6:17: 70:a4:0a:6b:4d:14:fa:c2:a4:e7:af:fb:67:43:a4: 4d:d1:35:8f:37:45:32:17:b9:83:9b:fc:10:5f:76: 90:30:e7:77:f8:fd:25:c2:af:a0:b2:f9:99:88:d3: 1d:dd:5a:de:07:3b:b0:8f:87:63:ab:73:7f:6c:f8: ce:9d:f5:1e:0c:fc:c1:26:81:ba:8d:90:b8:98:a3: c5:52:58:15:11:53:77:59:65:3b:47:57:e9:08:9d: d5:d9:aa:a7:83:ee:bc:3a:7f:0f:94:6a:c1:db:fc: 91:4c:73:9d:ef:78:5c:bf:e8:3e:d7:b1:7a:e3:fd: e0:99:44:00:c7:d4:1b:30:24:e2:bf:21:66:d5:7e: 31:4c:e7:f1:be:4e:d8:13:ce:6e:2e:30:bb:6e:21: 72:2f:3f:a3:c8:b3:de:31:76:c3:4b:0e:8c:e2:58: a1:99:15:ed:a3:00:cf:c3:20:ab:37:00:0f:68:b9: cb:6b:d9:bb:a2:c9:82:6b:dd:e6:db:1f:ad:b5:61: 1e:22:c9:be:2d:50:39:19:f1:3b:69:08:3a:62:07: 0b:e2:94:ce:39:a0:63:93:97:9d:72:2b:94:13:1d: 31:8b:eb:ff:16:21:e2:11:30:ec:d6:3a:bd:35:5b: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:C2:73:01:96:23:5B:50:0B:59:B5:1E:8B:74:C4:44:7D:6E:A1 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:d4:7e:f2:ce:cd:91:0f:7f:52:42:cc:58:6c:86:e9:89:f6: 16:43:8f:e9:85:19:63:32:97:47:28:76:1b:a9:0c:88:69:6b: eb:6c:f3:44:9a:d9:00:c5:fa:8b:44:df:ec:29:9d:b5:1a:4f: e3:10:d7:25:20:3a:c2:dd:e1:f2:bc:21:46:02:ed:fe:18:ed: 75:ba:ba:93:eb:06:9d:9b:c8:0b:34:ec:cf:ad:4e:03:5d:68: 1d:d3:fe:6a:d2:ce:86:8a:fd:b9:1c:4d:dc:b6:3b:07:18:41: 91:11:8f:03:ce:98:ef:cd:13:f1:4a:a8:df:ce:4c:89:85:05: 95:19:b3:8a:38:0d:4c:f3:8e:e5:ab:ab:4a:e4:69:98:cf:52: 53:68:bf:c2:53:97:7b:15:6f:36:da:34:9a:b0:59:79:c7:e4: ca:8a:cb:9c:93:41:5f:12:83:28:e9:56:49:37:bf:83:76:1f: 62:f0:f0:27:dc:e8:8e:3f:b4:f0:c1:b3:4d:99:84:fb:dc:fd: b6:4e:d7:13:1c:eb:92:3e:48:9e:bb:9e:f5:2e:f7:4b:a4:ea: 45:49:a2:01:5b:6b:1d:65:1a:ee:7a:c4:d9:92:40:97:c1:76: c3:c3:6b:1c:a5:e7:12:dc:59:b2:fd:da:c5:ff:cc:0c:a0:b3: 5c:b3:2d:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTkzMjExMC8GA1UEBRMoNjVFMTc3MEU3ODg1NTEwQTE4Q0U5MEQ4QUFERDlFREU3 RDVCMzU1MzAeFw0yNDExMjEwNTUxMTJaFw0yNDExMjgwNTUxMTJaMBgxFjAUBgNV BAMTDTY3M2VjYTUwLWM2YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ5zFRxQHnohng2bvWF3CkCmtNFPrCpOev+2dDpE3RNY83RTIXuYOb/BBfdpAw 53f4/SXCr6Cy+ZmI0x3dWt4HO7CPh2Orc39s+M6d9R4M/MEmgbqNkLiYo8VSWBUR U3dZZTtHV+kIndXZqqeD7rw6fw+UasHb/JFMc53veFy/6D7XsXrj/eCZRADH1Bsw JOK/IWbVfjFM5/G+TtgTzm4uMLtuIXIvP6PIs94xdsNLDoziWKGZFe2jAM/DIKs3 AA9ouctr2buiyYJr3ebbH621YR4iyb4tUDkZ8TtpCDpiBwvilM45oGOTl51yK5QT HTGL6/8WIeIRMOzWOr01W3+ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoLXCcwGW I1tQC1m1Hot0xER9bqEwHwYDVR0jBBgwFoAUZeF3DniFUQoYzpDYqt2e3n1bNVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzUyMUM4RTVDNzIw NzExRUY5REM4QkEyMUM0RjlBRTAyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5W TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmVGM0RuaUZVUW9ZenBEWXF0MmUzbjFiTlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzUyMUM4RTVDNzIwNzExRUY5REM4QkEyMUM0RjlBRTAyL1plRjNEbmlGVVFv WXpwRFlxdDJlM24xYk5WTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM3UfvLOzZEPf1JCzFhshumJ9hZDj+mFGWMyl0codhupDIhpa+ts80Sa 2QDF+otE3+wpnbUaT+MQ1yUgOsLd4fK8IUYC7f4Y7XW6upPrBp2byAs07M+tTgNd aB3T/mrSzoaK/bkcTdy2OwcYQZERjwPOmO/NE/FKqN/OTImFBZUZs4o4DUzzjuWr q0rkaZjPUlNov8JTl3sVbzbaNJqwWXnH5MqKy5yTQV8SgyjpVkk3v4N2H2Lw8Cfc 6I4/tPDBs02ZhPvc/bZO1xMc65I+SJ67nvUu90uk6kVJogFbax1lGu56xNmSQJfB dsPDaxyl5xLcWbL92sX/zAygs1yzLSE= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org