$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: 9cybKMaD6+S3cLgWJ762nKj27co9pImIoqa5j2Bg91s= Subject key identifier: 2F:6A:2F:C4:00:C2:17:5E:8F:05:C6:43:F0:29:2D:E8:06:9B:7F:E9 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0BE2 Signing time: Fri 22 Nov 2024 18:25:07 +0000 Manifest this update: Fri 22 Nov 2024 18:25:07 +0000 Manifest next update: Fri 29 Nov 2024 18:25:07 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: iTWGIlZUJpiwj8Zcwax1J38aeQ/55S4Ahhe9rBbfx04=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: dMPlbwZZJ9a9ifwF8f+1OVtKYmpgj8cV+d0a3+m/kqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Nov 22 18:25:07 2024 GMT Not After : Nov 29 18:25:07 2024 GMT Subject: CN=6740cc83-3ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:67:4a:bf:26:47:ab:38:e2:3a:5c:88:b9: a2:ca:21:54:a1:33:cc:c0:64:6e:11:4e:16:80:74: e7:0b:70:be:15:50:76:fc:25:03:85:c3:ed:a0:76: d8:32:7d:0b:db:15:9e:d5:ad:66:34:9c:76:bd:da: 93:4c:b7:9c:cc:2c:60:d8:cb:e0:d4:79:c9:14:e9: 30:16:f3:b1:4b:87:34:16:15:84:5e:f2:f2:bf:ef: 01:68:3d:a5:d1:f5:1b:30:f5:9d:c6:8c:ae:a9:00: 38:fa:85:98:81:7c:6c:fb:73:e8:60:1c:7c:97:a3: b4:d2:d2:7a:dd:27:76:55:41:f1:dc:b1:84:74:9c: 33:ac:5f:cf:c9:9c:d0:65:91:a8:59:2f:a5:f2:9b: 5d:b0:01:d0:ab:08:12:09:7f:57:d0:f0:b3:5a:82: 1a:65:42:a2:ad:9c:84:7a:fa:3e:b1:0e:c6:69:b2: 36:f4:b9:82:17:a5:85:42:97:cd:e5:6f:19:c2:04: ea:1e:ba:ce:f1:9f:af:41:e7:61:ef:7d:59:78:9e: 6d:c9:d8:57:be:33:ad:f6:24:69:6f:44:a5:13:f5: b8:e4:a7:50:b1:04:84:52:4a:a9:f3:a1:25:b0:b0: 09:65:f2:18:4a:7d:48:7e:c2:e2:9f:07:d5:b5:26: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6A:2F:C4:00:C2:17:5E:8F:05:C6:43:F0:29:2D:E8:06:9B:7F:E9 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c8:01:6b:73:ae:86:fc:e6:6f:d3:33:1d:90:d9:28:b9:9a: 5c:6f:2e:59:7d:ea:28:2e:d1:1e:8a:b9:a3:ba:c3:e4:a0:1b: 69:9a:66:a7:cb:38:5c:6f:5d:d2:2f:e8:1e:45:43:80:4d:34: 9b:7a:fa:70:2b:59:7b:ab:3b:e8:ee:ad:81:d3:70:61:40:6b: cf:52:9d:7f:55:31:53:3f:9c:cb:bb:17:9f:88:ad:1b:48:5a: 19:4d:eb:df:94:11:79:0d:5c:5b:61:5a:ec:58:c3:ea:5c:c8: 77:8a:b6:d2:e7:ec:95:0e:b5:1c:53:dd:dd:36:65:e3:e6:31: 17:ac:4f:0d:1b:e7:40:cb:fd:3d:f7:35:09:5e:c2:2d:46:25: 2b:05:03:5f:9f:8a:ce:3f:5d:c1:df:e6:4b:5e:5f:0b:da:af: 7e:93:2f:4c:7c:12:0a:d5:a5:4a:da:43:41:c4:4f:c4:30:bb: fd:49:dd:6d:4e:3d:2f:df:68:a8:ca:1e:68:f2:c3:c5:3b:df: bb:88:3f:44:71:d1:e5:ab:f3:09:a0:9e:00:6b:d9:de:ce:e4: 25:cd:05:cf:35:0b:f9:dd:85:81:4e:ca:47:8a:9f:bc:2b:33: 9c:58:21:43:8c:fb:89:ab:30:c8:dd:03:9a:06:58:5d:84:59: 08:e5:ac:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjQxMTIyMTgyNTA3WhcNMjQxMTI5MTgyNTA3WjAYMRYwFAYD VQQDEw02NzQwY2M4My0zZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzttnSr8mR6s44jpciLmiyiFUoTPMwGRuEU4WgHTnC3C+FVB2/CUDhcPtoHbY Mn0L2xWe1a1mNJx2vdqTTLeczCxg2Mvg1HnJFOkwFvOxS4c0FhWEXvLyv+8BaD2l 0fUbMPWdxoyuqQA4+oWYgXxs+3PoYBx8l6O00tJ63Sd2VUHx3LGEdJwzrF/PyZzQ ZZGoWS+l8ptdsAHQqwgSCX9X0PCzWoIaZUKirZyEevo+sQ7GabI29LmCF6WFQpfN 5W8ZwgTqHrrO8Z+vQedh731ZeJ5tydhXvjOt9iRpb0SlE/W45KdQsQSEUkqp86El sLAJZfIYSn1IfsLinwfVtSYi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9qL8QA whdejwXGQ/ApLegGm3/pMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMyAFrc66G/OZv0zMdkNkouZpcby5ZfeooLtEeirmjusPkoBtpmman yzhcb13SL+geRUOATTSbevpwK1l7qzvo7q2B03BhQGvPUp1/VTFTP5zLuxefiK0b SFoZTevflBF5DVxbYVrsWMPqXMh3irbS5+yVDrUcU93dNmXj5jEXrE8NG+dAy/09 9zUJXsItRiUrBQNfn4rOP13B3+ZLXl8L2q9+ky9MfBIK1aVK2kNBxE/EMLv9Sd1t Tj0v32ioyh5o8sPFO9+7iD9EcdHlq/MJoJ4Aa9nezuQlzQXPNQv53YWBTspHip+8 KzOcWCFDjPuJqzDI3QOaBlhdhFkI5azL -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org