$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: qqORdxuW5bNZyvNNhkc9ua/uA4gySTlMu+ppxuOsFbg= Subject key identifier: 5C:0E:83:08:C4:1B:72:F9:6D:B9:C2:C6:C6:B7:DD:F0:96:56:B7:74 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C0E Signing time: Wed 20 Nov 2024 18:13:07 +0000 Manifest this update: Wed 20 Nov 2024 18:13:07 +0000 Manifest next update: Wed 27 Nov 2024 18:13:07 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: Rw6kUd4oKexzm628+ExZFNeDhz9yQynOuToCzn7ev78=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: SQXs/tY3XOSQNHiYfHzxydfLP1PY6AbFebk6F2wwSZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Nov 20 18:13:07 2024 GMT Not After : Nov 27 18:13:07 2024 GMT Subject: CN=673e26b3-3a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:59:d6:31:d8:b0:af:5f:f0:c3:57:3f:67: 79:9a:31:b7:31:36:0a:24:41:85:93:ed:08:33:fc: cd:aa:44:f5:9a:ad:53:15:ff:2d:27:89:c5:f7:9d: 58:03:2a:df:e9:ff:fc:a4:30:43:99:79:4e:24:90: 7f:7b:8e:60:ab:d8:2c:0e:94:81:7a:60:cc:06:a0: e9:4c:c6:d2:55:11:78:96:bd:af:91:73:b8:8c:04: 48:ce:6c:7b:62:4e:16:c3:99:52:49:10:f2:80:df: c4:62:79:af:02:dc:9c:8d:ce:6d:e5:7d:bf:f2:db: 2e:0a:e9:9f:a7:c6:cc:c9:9b:13:4b:86:d6:d5:ac: ab:c8:e9:44:90:28:8d:8c:30:7e:35:1d:44:8a:94: a6:b2:e7:9c:5f:91:b1:b2:9b:0a:8d:05:a2:5e:99: c3:52:5c:d6:9e:23:4b:c0:e9:a7:18:83:a9:af:1a: c4:5b:3f:50:d1:3d:ff:05:73:e0:e7:72:8c:bf:26: de:87:e0:63:0c:de:6a:3e:93:32:da:24:ce:36:e7: 9d:1d:fa:72:ad:08:a0:32:6f:e4:05:bd:3e:8d:76: 58:89:07:27:d7:56:c2:46:f4:d2:11:26:58:83:29: 4e:c7:a6:28:4a:33:cf:9d:7a:8a:d7:15:81:13:e8: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:83:08:C4:1B:72:F9:6D:B9:C2:C6:C6:B7:DD:F0:96:56:B7:74 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:e7:9c:e2:1a:6f:d1:67:93:85:f0:bc:43:89:dd:e9:b1: 1a:f2:a6:db:1f:85:cf:80:00:94:25:7c:24:e7:69:38:b0:e2: e7:7a:88:76:6d:0f:db:7e:3e:73:dc:b9:0d:7f:63:31:91:37: da:00:4a:60:5a:9c:82:ea:7e:ab:34:8d:16:b8:b0:83:8c:0c: 5f:14:0d:26:76:43:a4:62:20:7c:19:72:c1:de:06:d0:6e:1f: 68:07:ed:fb:9b:ab:9c:88:d4:99:ad:91:37:7b:1a:cf:41:96: 81:53:95:de:13:f0:46:a3:c7:12:2c:23:65:3a:13:a0:0f:4d: b0:25:3d:bd:4a:bd:3e:9f:88:48:98:40:6f:b0:0b:91:89:f0: 65:8c:5b:07:8a:42:b8:e4:5f:23:eb:18:4d:4e:a5:ff:04:85: 52:c7:13:b8:26:58:eb:e9:e6:ee:40:71:91:76:0f:25:13:42: ac:b0:4a:c8:2b:8d:82:8e:fd:15:8a:ea:78:0b:b2:28:95:59: e2:4e:76:b4:68:e0:cb:b7:99:9c:9a:12:39:bb:9b:11:3f:6a: 76:f4:e8:ab:86:d6:ec:5c:d0:d5:11:71:4e:6c:f2:9c:1a:6c: 0d:5c:96:3f:44:6f:07:c7:01:72:61:3b:08:5b:77:4d:71:28: 21:9d:87:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjQxMTIwMTgxMzA3WhcNMjQxMTI3MTgxMzA3WjAYMRYwFAYD VQQDEw02NzNlMjZiMy0zYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOdZ1jHYsK9f8MNXP2d5mjG3MTYKJEGFk+0IM/zNqkT1mq1TFf8tJ4nF951Y Ayrf6f/8pDBDmXlOJJB/e45gq9gsDpSBemDMBqDpTMbSVRF4lr2vkXO4jARIzmx7 Yk4Ww5lSSRDygN/EYnmvAtycjc5t5X2/8tsuCumfp8bMyZsTS4bW1ayryOlEkCiN jDB+NR1EipSmsuecX5GxspsKjQWiXpnDUlzWniNLwOmnGIOprxrEWz9Q0T3/BXPg 53KMvybeh+BjDN5qPpMy2iTONuedHfpyrQigMm/kBb0+jXZYiQcn11bCRvTSESZY gylOx6YoSjPPnXqK1xWBE+gTfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwOgwjE G3L5bbnCxsa33fCWVrd0MB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKROec4hpv0WeThfC8Q4nd6bEa8qbbH4XPgACUJXwk52k4sOLneoh2 bQ/bfj5z3LkNf2MxkTfaAEpgWpyC6n6rNI0WuLCDjAxfFA0mdkOkYiB8GXLB3gbQ bh9oB+37m6uciNSZrZE3exrPQZaBU5XeE/BGo8cSLCNlOhOgD02wJT29Sr0+n4hI mEBvsAuRifBljFsHikK45F8j6xhNTqX/BIVSxxO4Jljr6ebuQHGRdg8lE0KssErI K42Cjv0Viup4C7IolVniTna0aODLt5mcmhI5u5sRP2p29OirhtbsXNDVEXFObPKc GmwNXJY/RG8HxwFyYTsIW3dNcSghnYcy -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org