$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: U7zeAzdzBMh/zqmEAfA0SbPz9tw72Cd/Kh2BpwnE3Yg= Subject key identifier: D4:A9:13:56:08:2E:79:0C:B0:CB:B4:B0:AD:2E:D7:6C:FE:92:8F:68 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 23 Signing time: Thu 19 Sep 2024 06:08:21 +0000 Manifest this update: Thu 19 Sep 2024 06:08:21 +0000 Manifest next update: Thu 26 Sep 2024 06:08:21 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: rGPLBjBYK2L8FbKXTDvyv3/CkSneRL9zzbRHykAj+jY=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: PQ4Ssq+Ml8hmTHrL6ieO63nOlhOMCKY3mNtsZnVazsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Sep 19 06:08:21 2024 GMT Not After : Sep 26 06:08:21 2024 GMT Subject: CN=66ebbfd5-10a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:4b:05:77:19:b0:97:73:08:11:aa:e2:ec: d9:d2:ac:84:58:12:06:a8:7e:d9:30:a4:3a:00:b8: 13:12:f2:dc:ff:d4:fd:a6:46:19:c5:e7:93:29:62: 0f:ee:97:1c:c9:90:44:9d:9e:21:d9:cf:94:b4:e6: 61:88:22:79:79:96:9c:e3:ca:3e:63:c7:5a:3d:8b: bb:70:a8:50:89:c1:2f:fe:e7:34:82:d0:21:d9:26: d7:92:c2:a1:5d:5f:68:de:76:5a:a6:2e:d7:44:16: 52:37:3a:74:1d:92:4b:35:1a:7a:f1:ec:38:91:ff: ab:82:43:56:3f:1a:3a:b9:a4:04:8b:d8:ae:d4:93: 6c:18:d8:4f:ad:86:80:8a:19:b6:89:85:3b:25:02: 60:4b:e3:ec:ef:8d:6b:52:1f:50:48:f5:d1:40:2b: 49:86:85:02:0a:25:f9:d2:06:e0:b0:4f:3a:58:b5: 83:64:7f:1d:42:12:cc:e4:c5:ff:db:e5:66:f5:09: b3:20:81:5d:ef:2c:27:44:e1:e1:2e:7e:1d:d3:7d: 00:74:cd:73:2b:e6:df:b9:d3:32:89:53:60:4f:f2: 6c:64:a4:88:42:76:3a:e1:53:23:b2:7f:8c:01:db: c3:49:e2:ff:25:7c:89:54:8c:58:f4:8e:90:d7:f1: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A9:13:56:08:2E:79:0C:B0:CB:B4:B0:AD:2E:D7:6C:FE:92:8F:68 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:67:75:d2:70:71:36:0d:43:ce:44:f1:0c:43:b7:d2:f9: 9b:12:d7:04:c9:b7:bb:97:48:74:a2:47:4b:8c:24:2b:94:21: 3c:0a:91:6e:54:ec:e7:28:ca:9e:20:07:eb:d0:51:04:07:15: 36:88:bd:9b:62:3c:53:9a:f0:d1:0e:73:96:87:61:16:09:84: e6:bf:e4:b4:3f:0f:b9:64:de:e1:e9:69:92:cb:3f:9b:82:4f: 6a:01:05:a9:8b:cf:08:b4:ee:b5:c1:bd:88:cd:e1:69:1f:c5: 29:f0:98:09:5c:85:6c:b1:01:a3:e9:47:9f:eb:fa:f6:d8:47: cf:e0:38:b4:bb:d6:ff:9c:87:eb:9c:39:31:99:2b:29:60:bd: 91:b7:c1:35:11:ca:d2:6c:23:da:a2:25:6f:45:b0:f2:b9:bb: 8c:8e:7b:c1:8b:04:f3:f5:6f:0b:b2:dc:0f:d7:16:88:48:03: 05:48:06:90:9e:1f:6a:67:71:49:f8:52:2d:90:91:e6:2b:b9: 90:f5:17:11:c4:83:3f:93:23:d2:36:99:87:45:7b:d3:c7:a2: 01:2b:60:ff:06:ab:0c:63:2f:55:b0:57:62:a4:7d:ee:83:f3: 8f:cb:36:69:49:43:bf:ff:8a:50:bd:3e:81:45:37:1d:d2:e5: 5d:f8:d0:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ1QjExMC8GA1UEBRMoQ0VEMEFEQjk5RjgwM0Y0NDFGNTBEQ0NCODNDRUU3MjA3 NkRDMzI4ODAeFw0yNDA5MTkwNjA4MjFaFw0yNDA5MjYwNjA4MjFaMBgxFjAUBgNV BAMTDTY2ZWJiZmQ1LTEwYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm3ksFdxmwl3MIEari7NnSrIRYEgaoftkwpDoAuBMS8tz/1P2mRhnF55MpYg/u lxzJkESdniHZz5S05mGIInl5lpzjyj5jx1o9i7twqFCJwS/+5zSC0CHZJteSwqFd X2jedlqmLtdEFlI3OnQdkks1Gnrx7DiR/6uCQ1Y/Gjq5pASL2K7Uk2wY2E+thoCK GbaJhTslAmBL4+zvjWtSH1BI9dFAK0mGhQIKJfnSBuCwTzpYtYNkfx1CEszkxf/b 5Wb1CbMggV3vLCdE4eEufh3TfQB0zXMr5t+50zKJU2BP8mxkpIhCdjrhUyOyf4wB 28NJ4v8lfIlUjFj0jpDX8RPrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1KkTVggu eQywy7SwrS7XbP6Sj2gwHwYDVR0jBBgwFoAUztCtuZ+AP0QfUNzLg87nIHbcMogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDVCLzdDQzhGMTlFNDVC NzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenRDdHVaLUFQMFFmVU56TGc4N25JSGJjTW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDVCLzdDQzhGMTlFNDVCNzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBR ZlVOekxnODduSUhiY01vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNPZ3XScHE2DUPORPEMQ7fS+ZsS1wTJt7uXSHSiR0uMJCuUITwKkW5U 7Ocoyp4gB+vQUQQHFTaIvZtiPFOa8NEOc5aHYRYJhOa/5LQ/D7lk3uHpaZLLP5uC T2oBBamLzwi07rXBvYjN4WkfxSnwmAlchWyxAaPpR5/r+vbYR8/gOLS71v+ch+uc OTGZKylgvZG3wTURytJsI9qiJW9FsPK5u4yOe8GLBPP1bwuy3A/XFohIAwVIBpCe H2pncUn4Ui2QkeYruZD1FxHEgz+TI9I2mYdFe9PHogErYP8GqwxjL1WwV2Kkfe6D 84/LNmlJQ7//ilC9PoFFNx3S5V340Nw= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:11 2024 by rpki-client on console-ams.rpki-client.org