$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: mGtllPtPXkIavSPViJMIRIOR5SarNItNBBkwzmJYJN8= Subject key identifier: B2:80:B8:77:93:42:B9:C1:9D:22:88:50:AC:10:50:BD:2F:12:A9:58 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 43 Signing time: Thu 21 Nov 2024 05:30:25 +0000 Manifest this update: Thu 21 Nov 2024 05:30:25 +0000 Manifest next update: Thu 28 Nov 2024 05:30:24 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: bFjhDjYnkJo7y80ZgfpubH9NqW7Lo4FjEqJxHvDG6VM=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: PQ4Ssq+Ml8hmTHrL6ieO63nOlhOMCKY3mNtsZnVazsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Nov 21 05:30:25 2024 GMT Not After : Nov 28 05:30:24 2024 GMT Subject: CN=673ec571-bafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:6d:1d:ba:7c:fe:95:14:32:5b:9e:dd:51: 8d:ad:ac:94:a8:26:19:ed:d5:ce:a8:24:23:cd:b2: 30:2a:4f:a9:c0:8f:15:5b:7c:4d:f9:38:c1:5b:67: 21:5b:34:d3:a1:f6:55:f4:93:8d:20:2c:02:69:e0: f4:58:c8:ca:59:b6:da:f4:f1:94:97:97:b4:69:aa: 38:d1:84:2e:0f:24:be:8f:96:ff:7c:8c:e2:7f:a0: 92:68:ab:83:55:a3:b5:13:8b:e2:19:42:89:82:8d: 6d:03:69:b1:8a:db:23:39:a3:a7:0a:3c:56:11:f6: a1:d9:31:ca:5e:a3:3c:88:10:d6:1e:b9:13:62:f3: 10:f4:de:19:59:6b:e3:75:9e:d4:b2:ee:45:26:7d: 50:c4:0f:ff:88:8d:3a:ca:41:19:4a:dc:10:47:c0: 5a:9f:ac:10:bd:43:8d:c7:93:7d:94:6c:b5:77:05: 6b:97:b0:7e:61:33:2a:ea:8e:4b:b1:de:a8:a8:f4: 80:a2:c8:59:c2:f7:44:00:5c:73:74:22:0b:4f:48: ff:0c:2f:54:0d:23:e4:5b:69:93:87:84:e0:12:a3: 6a:2a:f1:b2:70:72:2d:07:d0:ca:cd:b9:8a:0c:45: 15:43:ba:b3:60:87:0e:ac:d3:62:c7:2c:d3:47:ec: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:80:B8:77:93:42:B9:C1:9D:22:88:50:AC:10:50:BD:2F:12:A9:58 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:31:e3:79:29:53:85:31:81:50:6f:17:64:19:85:6f:ec:23: a2:0b:9f:22:ab:61:e7:d6:e1:52:d1:e3:e8:3a:87:9d:62:dc: 2d:f3:f8:bf:e5:27:d0:0b:0c:25:51:d5:1f:7a:92:af:26:db: 07:d3:73:1c:60:79:72:c2:8a:7d:48:c5:d1:f7:14:d1:d4:c9: d9:01:d1:97:3d:52:9b:f9:6e:88:26:77:00:f3:37:fc:17:55: f3:6e:e7:6e:49:d2:1b:09:c9:85:46:0c:b5:88:9f:a1:ec:f9: 8f:6f:b4:d3:c2:7d:1d:d6:32:df:f6:6e:21:8b:5d:52:26:6c: 4d:2f:eb:59:44:9d:17:64:ef:87:9f:d6:1c:02:ec:ff:d4:3e: 55:e0:93:f8:3f:9f:17:b6:26:df:1e:29:c6:60:78:9d:99:c6: ab:0f:a4:69:57:bc:77:7e:f1:ca:f7:f9:57:cc:ae:2d:c3:fe: 93:49:25:0b:c5:56:c4:cc:68:9a:6f:21:f0:da:7b:75:37:09: 3c:15:89:5b:12:08:0b:95:7b:60:3b:58:7b:f2:d3:4a:25:12: 84:23:10:57:19:7d:47:53:b4:22:a3:df:e5:bd:23:59:38:e0: 1f:b7:ab:e3:43:4c:d6:75:09:dd:c9:b1:50:29:a2:11:78:c2: d1:d0:14:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ1QjExMC8GA1UEBRMoQ0VEMEFEQjk5RjgwM0Y0NDFGNTBEQ0NCODNDRUU3MjA3 NkRDMzI4ODAeFw0yNDExMjEwNTMwMjVaFw0yNDExMjgwNTMwMjRaMBgxFjAUBgNV BAMTDTY3M2VjNTcxLWJhZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJ20dunz+lRQyW57dUY2trJSoJhnt1c6oJCPNsjAqT6nAjxVbfE35OMFbZyFb NNOh9lX0k40gLAJp4PRYyMpZttr08ZSXl7RpqjjRhC4PJL6Plv98jOJ/oJJoq4NV o7UTi+IZQomCjW0DabGK2yM5o6cKPFYR9qHZMcpeozyIENYeuRNi8xD03hlZa+N1 ntSy7kUmfVDED/+IjTrKQRlK3BBHwFqfrBC9Q43Hk32UbLV3BWuXsH5hMyrqjkux 3qio9ICiyFnC90QAXHN0IgtPSP8ML1QNI+RbaZOHhOASo2oq8bJwci0H0MrNuYoM RRVDurNghw6s02LHLNNH7EsjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsoC4d5NC ucGdIohQrBBQvS8SqVgwHwYDVR0jBBgwFoAUztCtuZ+AP0QfUNzLg87nIHbcMogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDVCLzdDQzhGMTlFNDVC NzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenRDdHVaLUFQMFFmVU56TGc4N25JSGJjTW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDVCLzdDQzhGMTlFNDVCNzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBR ZlVOekxnODduSUhiY01vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKox43kpU4UxgVBvF2QZhW/sI6ILnyKrYefW4VLR4+g6h51i3C3z+L/l J9ALDCVR1R96kq8m2wfTcxxgeXLCin1IxdH3FNHUydkB0Zc9Upv5bogmdwDzN/wX VfNu525J0hsJyYVGDLWIn6Hs+Y9vtNPCfR3WMt/2biGLXVImbE0v61lEnRdk74ef 1hwC7P/UPlXgk/g/nxe2Jt8eKcZgeJ2ZxqsPpGlXvHd+8cr3+VfMri3D/pNJJQvF VsTMaJpvIfDae3U3CTwViVsSCAuVe2A7WHvy00olEoQjEFcZfUdTtCKj3+W9I1k4 4B+3q+NDTNZ1Cd3JsVApohF4wtHQFIY= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org