$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: RiSCGTCnHHreYsqOk3QhklpHcDvkMiXRoW1wBRUxyNU= Subject key identifier: 74:83:E1:CC:D5:D6:A0:2C:11:11:1C:D1:A3:18:66:F2:13:B2:BB:51 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 16 Signing time: Wed 23 Oct 2024 06:39:22 +0000 Manifest this update: Wed 23 Oct 2024 06:39:21 +0000 Manifest next update: Wed 30 Oct 2024 06:39:21 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: Hd54PqJFJT8j7ddqLkNVisGj804XP0vnKtD2H3AWEH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Oct 23 06:39:21 2024 GMT Not After : Oct 30 06:39:21 2024 GMT Subject: CN=67189a1a-7ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:78:51:a2:66:e9:50:e1:65:74:02:b9:55: 2c:32:62:f0:71:c7:01:3b:9c:65:3f:ba:73:47:77: 8f:91:d6:4b:c0:7e:a6:b0:b2:48:87:1d:c2:d1:e0: 92:c2:38:70:2a:19:aa:58:4d:be:5e:66:c4:2f:1d: d3:71:8a:cb:d6:75:23:42:2a:08:98:4e:4c:dd:91: 58:c5:9a:79:19:72:ab:57:07:e8:46:37:02:09:8f: a6:09:84:75:61:f0:44:3f:dd:28:35:58:88:81:ec: 63:31:54:3e:04:b5:6e:54:d2:30:5c:1d:c2:d1:80: ff:cf:82:7c:c5:66:81:81:d3:3e:d6:8e:89:4c:81: df:f3:77:2d:4a:87:bf:5b:2a:91:12:87:fc:b1:1c: ab:b9:3f:2c:db:26:fa:4b:55:5b:70:95:02:8b:5a: e6:f2:4c:1d:d4:48:57:ff:ad:ea:80:8f:95:9d:97: 97:fd:72:a9:49:30:86:77:89:8d:1d:7e:c6:52:f5: 95:f8:cd:6b:c3:c1:6e:d9:e3:e5:3d:09:0e:99:ea: 9e:8d:22:d9:f7:40:51:69:78:28:19:38:b4:67:e5: aa:ed:98:1f:9d:3a:d4:59:2e:23:b8:99:4f:99:7b: 9f:93:a4:1b:da:dc:23:0e:b7:2d:90:1b:81:c6:4e: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:E1:CC:D5:D6:A0:2C:11:11:1C:D1:A3:18:66:F2:13:B2:BB:51 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:11:bf:11:6b:e8:44:13:ed:eb:1f:8a:ae:d6:7c:29:34:e1: 0b:af:d3:31:88:cd:a9:0f:8e:c5:54:72:0b:7a:42:23:df:21: bd:84:0f:17:7b:ce:3a:46:b7:2d:b4:76:63:90:ce:14:c6:ec: e1:68:c6:b7:4e:31:70:a1:11:9b:9a:f4:c4:d8:fb:cd:a5:df: df:27:41:2c:a9:d3:8c:8c:a0:b3:96:60:a1:c4:84:30:73:ad: 50:32:1c:13:e5:75:60:8f:18:3e:19:63:cb:4e:40:12:28:1a: ed:47:37:a8:41:0b:53:5c:a4:31:f0:0a:4a:96:6d:75:aa:96: 12:e2:ac:5a:7b:a0:4e:07:40:56:ff:5b:84:62:18:5d:d3:b8: 08:81:ef:a9:ae:2c:c5:bd:7b:5b:8f:b3:9d:2c:bb:55:ec:7c: 1f:ac:f1:fd:4e:18:f9:3e:d5:fa:68:f5:cd:5c:ce:87:ad:ba: c9:a1:8e:f9:81:f2:a5:fc:9b:d8:81:a3:77:63:95:47:61:65: 61:5b:f8:3e:5f:39:df:fc:98:46:52:db:7c:02:27:ba:c0:0b: 6c:c5:d8:fb:59:42:6c:b8:8f:b6:4c:18:53:6a:69:eb:cf:87: 42:26:ad:e4:cd:b1:62:83:9a:eb:7e:24:3c:26:cc:e7:39:c0: 6f:b7:cf:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTkzMjExMC8GA1UEBRMoNjVFMTc3MEU3ODg1NTEwQTE4Q0U5MEQ4QUFERDlFREU3 RDVCMzU1MzAeFw0yNDEwMjMwNjM5MjFaFw0yNDEwMzAwNjM5MjFaMBgxFjAUBgNV BAMTDTY3MTg5YTFhLTdlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFhHhRombpUOFldAK5VSwyYvBxxwE7nGU/unNHd4+R1kvAfqawskiHHcLR4JLC OHAqGapYTb5eZsQvHdNxisvWdSNCKgiYTkzdkVjFmnkZcqtXB+hGNwIJj6YJhHVh 8EQ/3Sg1WIiB7GMxVD4EtW5U0jBcHcLRgP/PgnzFZoGB0z7WjolMgd/zdy1Kh79b KpESh/yxHKu5PyzbJvpLVVtwlQKLWubyTB3USFf/reqAj5Wdl5f9cqlJMIZ3iY0d fsZS9ZX4zWvDwW7Z4+U9CQ6Z6p6NItn3QFFpeCgZOLRn5artmB+dOtRZLiO4mU+Z e5+TpBva3CMOty2QG4HGTkIBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdIPhzNXW oCwRERzRoxhm8hOyu1EwHwYDVR0jBBgwFoAUZeF3DniFUQoYzpDYqt2e3n1bNVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzUyMUM4RTVDNzIw NzExRUY5REM4QkEyMUM0RjlBRTAyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5W TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmVGM0RuaUZVUW9ZenBEWXF0MmUzbjFiTlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzUyMUM4RTVDNzIwNzExRUY5REM4QkEyMUM0RjlBRTAyL1plRjNEbmlGVVFv WXpwRFlxdDJlM24xYk5WTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8RvxFr6EQT7esfiq7WfCk04Quv0zGIzakPjsVUcgt6QiPfIb2EDxd7 zjpGty20dmOQzhTG7OFoxrdOMXChEZua9MTY+82l398nQSyp04yMoLOWYKHEhDBz rVAyHBPldWCPGD4ZY8tOQBIoGu1HN6hBC1NcpDHwCkqWbXWqlhLirFp7oE4HQFb/ W4RiGF3TuAiB76muLMW9e1uPs50su1XsfB+s8f1OGPk+1fpo9c1czoetusmhjvmB 8qX8m9iBo3djlUdhZWFb+D5fOd/8mEZS23wCJ7rAC2zF2PtZQmy4j7ZMGFNqaevP h0ImreTNsWKDmut+JDwmzOc5wG+3z3c= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:53 2024 by rpki-client on console-ams.rpki-client.org