$ rpki-client -vvf rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft File: zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft (raw, json) Hash identifier: DyWLH6wRyGIpUtDoUI79H2TrRw6EcyMRSXefWB9do1k= Subject key identifier: C0:BA:1E:D9:06:BA:C9:22:E0:07:FD:3A:7C:7A:DC:18:08:CB:39:39 Authority key identifier: CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 Certificate issuer: /CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft Manifest number: 0182 Signing time: Sat 23 Nov 2024 02:01:02 +0000 Manifest this update: Sat 23 Nov 2024 02:01:02 +0000 Manifest next update: Sat 30 Nov 2024 02:01:02 +0000 Files and hashes: 1: zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl (hash: tCkF3wCVpdXy45uaK/D0954WL+RLtfHlVhw3cRvOKko=) 2: 0E4247485B5811ED91760C7DC4F9AE02.roa (hash: WBorSPXVDYDVTx8kORLKsbS0gCiSKpWXfDku2GOVqe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Validity Not Before: Nov 23 02:01:02 2024 GMT Not After : Nov 30 02:01:02 2024 GMT Subject: CN=6741375e-f247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:36:03:6f:81:5c:ef:fb:71:45:86:5b:4a: 12:a0:37:27:0b:4b:21:41:9b:75:a6:a3:d9:ff:67: 46:8c:49:37:f5:29:09:4f:10:1a:92:9b:cc:09:90: 06:2f:01:38:5a:32:a2:84:87:a2:69:b0:2d:7a:8d: 84:6a:d6:ad:04:9e:6f:8f:3e:b9:0c:da:2a:43:55: 96:c1:05:23:f5:a2:8f:07:1c:3d:7b:f9:d5:ad:0e: b6:c5:2f:26:72:69:17:0f:33:56:cb:bd:e7:aa:3c: 14:10:1e:9b:6b:d7:1b:4e:69:f0:b1:ba:f3:eb:84: 70:3c:84:82:82:7b:ea:39:7e:54:7f:49:8a:75:46: 39:fa:4d:8c:2a:b3:14:8f:8a:a8:19:ff:1b:73:e1: ef:ba:8b:c7:ba:ac:f5:81:e1:32:65:5a:18:24:09: 63:90:a9:df:f8:bc:df:5b:8a:e7:9e:d7:ca:d7:52: 31:53:c7:6e:f5:2b:d2:02:a4:f9:b6:55:ef:73:57: fd:1d:cb:74:ae:c5:55:fc:5a:35:4a:6a:bf:19:b5: eb:6e:2e:5e:39:96:cf:a6:0f:5b:f6:5e:09:7b:97: 39:42:cb:f9:7a:dd:07:a6:58:f1:60:3b:4b:6f:31: d7:03:04:10:04:49:a1:9f:82:c7:bc:65:10:e0:91: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BA:1E:D9:06:BA:C9:22:E0:07:FD:3A:7C:7A:DC:18:08:CB:39:39 X509v3 Authority Key Identifier: keyid:CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:94:46:3d:3a:67:38:19:cf:2b:f6:ac:67:0f:91:37:9b:84: 50:0b:33:2f:dd:8f:d5:9e:ac:8d:c6:e2:eb:24:ca:0c:ec:e3: 48:d9:eb:a9:ae:e7:5f:9f:84:90:f7:3e:61:a5:76:f9:dc:38: 7b:34:34:f6:fe:cc:c2:0e:56:07:81:d4:89:5b:33:04:29:fc: 92:0c:85:9e:01:f0:85:59:11:b0:b6:b0:94:ae:e6:01:2c:2b: cf:f8:f7:65:55:83:79:5f:47:28:50:a0:6b:35:e4:7c:a9:79: 9c:18:c5:c3:ef:5c:6d:45:fd:0d:ea:24:08:70:ae:40:c0:fa: 40:b1:8c:42:b9:33:d6:a9:61:a7:74:5c:aa:40:83:7e:f8:dd: 3f:06:af:eb:b0:64:25:78:11:81:cb:95:77:97:c7:ad:18:48: e7:b4:83:76:13:db:39:b5:95:ea:7b:dd:1c:13:80:cd:76:63: 4c:00:98:b0:91:e5:5b:bb:cc:30:8d:4f:38:4e:e0:b4:5c:41: 8e:2d:f3:53:48:36:c5:ce:f3:98:cc:74:ee:25:b6:26:db:2a: 81:34:20:7b:3d:5f:d1:ef:b5:74:60:93:61:e3:db:1d:5f:c9: 72:a9:cd:89:0a:0f:f3:82:2f:e8:5c:61:b8:5b:48:41:3f:02: 6f:93:44:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwQjkxMTAvBgNVBAUTKENDRTA4MzQ3OUM0NjcyREY5OTI4QkFBODM4RjJBQjI4 MDI2REVGRjcwHhcNMjQxMTIzMDIwMTAyWhcNMjQxMTMwMDIwMTAyWjAYMRYwFAYD VQQDEw02NzQxMzc1ZS1mMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR02A2+BXO/7cUWGW0oSoDcnC0shQZt1pqPZ/2dGjEk39SkJTxAakpvMCZAG LwE4WjKihIeiabAteo2EatatBJ5vjz65DNoqQ1WWwQUj9aKPBxw9e/nVrQ62xS8m cmkXDzNWy73nqjwUEB6ba9cbTmnwsbrz64RwPISCgnvqOX5Uf0mKdUY5+k2MKrMU j4qoGf8bc+HvuovHuqz1geEyZVoYJAljkKnf+LzfW4rnntfK11IxU8du9SvSAqT5 tlXvc1f9Hct0rsVV/Fo1Smq/GbXrbi5eOZbPpg9b9l4Je5c5Qsv5et0HpljxYDtL bzHXAwQQBEmhn4LHvGUQ4JF9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC6HtkG uski4Af9Onx63BgIyzk5MB8GA1UdIwQYMBaAFMzgg0ecRnLfmSi6qDjyqygCbe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDBCOS9ENUMyNTFDODVC NTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0LVpLTHFvT1BLcktBSnQ3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPQ0RSNXhHY3QtWktMcW9PUEtyS0FKdDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDBCOS9ENUMyNTFDODVCNTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0 LVpLTHFvT1BLcktBSnQ3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUlEY9Omc4Gc8r9qxnD5E3m4RQCzMv3Y/VnqyNxuLrJMoM7ONI2eup rudfn4SQ9z5hpXb53Dh7NDT2/szCDlYHgdSJWzMEKfySDIWeAfCFWRGwtrCUruYB LCvP+PdlVYN5X0coUKBrNeR8qXmcGMXD71xtRf0N6iQIcK5AwPpAsYxCuTPWqWGn dFyqQIN++N0/Bq/rsGQleBGBy5V3l8etGEjntIN2E9s5tZXqe90cE4DNdmNMAJiw keVbu8wwjU84TuC0XEGOLfNTSDbFzvOYzHTuJbYm2yqBNCB7PV/R77V0YJNh49sd X8lyqc2JCg/zgi/oXGG4W0hBPwJvk0Q+ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org