$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: a3jAn34kj3FbvsTZuj/Wv/OG4Kp9/Vs6iIbySYa6F94= Subject key identifier: EE:82:E9:91:0D:01:1F:75:25:5C:2E:D9:59:E7:0D:FE:B4:6F:83:EC Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 17 Signing time: Thu 21 Nov 2024 06:03:36 +0000 Manifest this update: Thu 21 Nov 2024 06:03:35 +0000 Manifest next update: Thu 28 Nov 2024 06:03:35 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: Gb14LiRF7pi2ouFrma4z2gVGchMh8cgnZptfFtAAQ9k=) 2: BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa (hash: 7M7tnskcAr6syWX8xx3lbIELsXSwEQW4ePT2HDbCQH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Nov 21 06:03:35 2024 GMT Not After : Nov 28 06:03:35 2024 GMT Subject: CN=673ecd38-7de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:20:47:a4:6f:db:7e:ca:e0:90:05:d7:8b: 49:12:4b:b9:50:b4:72:d5:de:38:61:9d:8a:98:6f: 1c:3a:f3:79:d5:79:49:e9:ea:3f:72:e6:15:89:aa: 33:3b:dd:24:c5:df:12:44:ff:d6:21:14:66:57:5b: 59:19:97:72:12:de:03:09:a7:4f:c3:9d:60:ca:59: 36:6c:39:7c:79:da:84:15:a7:d3:70:7f:cb:84:20: 71:92:f0:3e:d0:90:77:7f:f6:aa:15:3d:77:17:76: 9f:16:d7:30:54:f8:f1:de:9d:ac:b1:b2:cc:de:a0: 67:76:8f:e1:f9:df:3b:e7:67:9d:3a:f5:ff:ea:a1: 51:5d:97:fa:3a:49:ff:f8:93:d5:a8:9c:df:0a:c3: a0:7d:57:f0:61:ab:89:31:80:a3:d6:40:a8:77:7c: e5:56:d7:e1:89:f6:a7:41:10:15:c0:ba:23:0b:5a: ef:60:58:2d:10:1d:ae:e6:ab:ec:bb:fa:4b:a3:27: ab:c5:df:47:7b:46:36:5d:49:3b:0d:0f:97:07:33: 0a:05:21:81:f4:ae:4e:59:e6:a8:4b:f8:6f:52:d8: 10:79:92:72:1f:43:ce:f7:c3:48:72:69:1c:fe:54: c0:8b:50:12:e1:4a:de:d4:87:eb:8f:0d:90:1a:ae: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:E9:91:0D:01:1F:75:25:5C:2E:D9:59:E7:0D:FE:B4:6F:83:EC X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b9:73:c0:01:d9:d2:c6:c2:59:44:45:f6:36:ec:b5:84:cb: c3:d6:27:b5:d6:b4:42:99:4e:e0:18:89:4e:24:d8:57:de:53: 0b:06:f8:83:1c:48:5d:1e:b3:36:e4:01:63:08:6a:e4:0f:13: bf:ca:95:fc:6d:b8:25:ff:66:b6:4f:92:b6:74:63:70:44:68: ff:bb:7d:6b:96:ed:59:e4:46:47:14:a9:c4:22:9e:00:93:af: 1f:27:70:96:49:de:16:d0:43:1b:0a:36:0c:ec:4d:2b:db:b9: 41:a9:d9:5e:19:90:51:26:74:c3:2e:c8:dd:ed:2c:63:99:ba: cb:28:79:f0:7d:d7:b8:f3:22:30:dc:da:aa:33:63:64:c3:f4: 3f:76:9e:ff:1a:52:b5:4f:7f:59:8d:b4:be:c3:62:4c:7d:84: 39:cd:f5:01:f3:15:26:fa:e9:b9:d4:69:a8:e9:dd:28:de:07: 76:b8:92:8a:e4:aa:ec:7c:84:0d:40:76:fb:2c:bc:78:bd:47: 71:57:68:19:2f:8c:ad:29:15:2f:19:ef:13:03:74:62:ec:58: 93:b8:39:84:29:b0:e6:d0:45:7d:38:a9:cf:a5:1a:54:71:fe: 90:cb:6d:6c:c9:65:43:e2:97:b1:7d:58:c0:01:a8:28:bd:f4: 47:9c:04:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoRkQ5RDdGNjYwRjNBMTMwQ0E0OEJFQkJBNjZFMTYyQkQz MDM0RTM4RDAeFw0yNDExMjEwNjAzMzVaFw0yNDExMjgwNjAzMzVaMBgxFjAUBgNV BAMTDTY3M2VjZDM4LTdkZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrWSBHpG/bfsrgkAXXi0kSS7lQtHLV3jhhnYqYbxw683nVeUnp6j9y5hWJqjM7 3STF3xJE/9YhFGZXW1kZl3IS3gMJp0/DnWDKWTZsOXx52oQVp9Nwf8uEIHGS8D7Q kHd/9qoVPXcXdp8W1zBU+PHenayxsszeoGd2j+H53zvnZ5069f/qoVFdl/o6Sf/4 k9WonN8Kw6B9V/Bhq4kxgKPWQKh3fOVW1+GJ9qdBEBXAuiMLWu9gWC0QHa7mq+y7 +kujJ6vF30d7RjZdSTsND5cHMwoFIYH0rk5Z5qhL+G9S2BB5knIfQ873w0hyaRz+ VMCLUBLhSt7Uh+uPDZAarvwBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7oLpkQ0B H3UlXC7ZWecN/rRvg+wwHwYDVR0jBBgwFoAU/Z1/Zg86Ewyki+u6ZuFivTA0440w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzRFRkQxNUI2OEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1oxX1pnODZFd3lraS11Nlp1Rml2VEEwNDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzRFRkQxNUI2OEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5 a2ktdTZadUZpdlRBMDQ0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADe5c8AB2dLGwllERfY27LWEy8PWJ7XWtEKZTuAYiU4k2FfeUwsG+IMc SF0eszbkAWMIauQPE7/KlfxtuCX/ZrZPkrZ0Y3BEaP+7fWuW7VnkRkcUqcQingCT rx8ncJZJ3hbQQxsKNgzsTSvbuUGp2V4ZkFEmdMMuyN3tLGOZussoefB917jzIjDc 2qozY2TD9D92nv8aUrVPf1mNtL7DYkx9hDnN9QHzFSb66bnUaajp3SjeB3a4kork qux8hA1AdvssvHi9R3FXaBkvjK0pFS8Z7xMDdGLsWJO4OYQpsObQRX04qc+lGlRx /pDLbWzJZUPil7F9WMABqCi99EecBPc= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org