$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: xcGkYURkUMM8UB6VbK75AvWlOxajmD3tF1hlE0lcLhc= Subject key identifier: 54:2E:FD:FB:01:77:EE:EF:C7:B4:1A:24:55:41:60:AE:20:4B:E8:CE Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 36 Signing time: Sat 23 Nov 2024 05:28:07 +0000 Manifest this update: Sat 23 Nov 2024 05:28:07 +0000 Manifest next update: Sat 30 Nov 2024 05:28:07 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: eXv1i7xKzdTvZqI1U6IU0ZHdx2zPxXQq4wwc+ZxIskw=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: k6IfKNxH4wiErqgB07j5oq4QC0zF0uzZRIPQVRkqxco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Nov 23 05:28:07 2024 GMT Not After : Nov 30 05:28:07 2024 GMT Subject: CN=674167e7-61eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:ef:60:b0:49:ac:46:a2:16:86:4d:f5:d2: f3:cf:83:72:ea:20:f4:78:cd:1c:1e:99:67:bc:79: 0a:e4:2a:6c:d7:11:be:b1:71:5f:e4:09:d0:56:b6: d5:ef:2b:cd:3a:d3:1d:33:73:4b:b1:98:59:5a:7e: 06:4e:4c:10:4c:1a:60:3b:d9:53:f5:8d:35:d9:25: 10:d4:91:02:3a:33:45:59:7b:22:d3:5f:16:bc:fb: 2a:71:5e:43:25:2f:ce:34:48:68:da:a1:b8:15:04: 42:96:de:fe:f4:02:14:93:65:f9:47:cd:ce:57:d6: a1:0a:84:bd:43:10:f5:c2:7e:3f:98:a4:b2:2b:15: 74:75:19:f0:bc:df:39:41:a7:47:12:d9:82:18:d0: 71:77:4d:d0:21:bf:e2:34:79:63:ef:32:b9:d7:00: 51:d4:ac:bf:a5:67:fd:ee:86:01:e6:d1:c1:52:f3: 54:7f:18:ad:5b:1f:3e:0a:ea:80:7b:a1:77:b8:02: 53:5d:e8:b0:e0:db:b2:48:1b:8f:95:a6:d7:22:62: a8:aa:cd:13:8b:74:2b:5a:d3:7b:05:2b:b8:fd:6e: 52:fb:28:bd:af:d1:08:61:2a:ec:36:4b:e6:57:70: 95:bf:b5:e2:40:73:4d:c8:95:1d:67:01:2d:1b:0a: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2E:FD:FB:01:77:EE:EF:C7:B4:1A:24:55:41:60:AE:20:4B:E8:CE X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d5:40:40:e8:5b:96:c8:6a:a2:cb:d4:df:31:60:7e:89:ae: 2d:e5:fe:91:0d:fb:31:d4:3a:34:d4:36:b2:24:05:af:e8:94: 39:91:73:f3:29:ca:3d:c7:4f:91:a9:08:ee:1d:e2:99:70:66: 09:41:42:b3:3d:4f:de:61:a4:84:d8:7c:c3:ea:d3:c3:a2:03: 37:20:7d:d1:4f:b9:b2:05:bb:5c:ef:e2:8c:7b:07:e7:fa:3a: af:b9:38:f6:10:f6:da:3a:4d:4e:37:80:e9:2f:e4:6e:10:47: 95:7c:6e:cb:59:ab:7c:ab:57:17:8e:6e:43:7b:65:d9:8b:24: 12:46:a1:fa:f1:e5:a5:1d:bc:f0:0d:19:be:71:30:e2:9e:16: 43:b5:1c:e4:be:3a:f7:f7:9a:34:ff:75:5a:09:9c:54:3f:27: a9:bd:a1:7c:4a:b7:66:e0:4c:48:3a:c6:03:7e:7f:00:46:f6: 85:59:22:b2:41:e2:eb:3d:30:cc:53:c2:d4:0a:d2:7d:55:04: 8f:a1:c3:c4:4a:ac:cf:a6:30:9c:d9:e1:00:41:4c:49:f1:4e: 5b:0c:37:d1:39:33:52:eb:25:4d:38:aa:ae:2a:75:e3:8d:59: cb:47:b8:2c:98:8e:18:6c:a3:41:a5:d0:44:fe:2c:f8:a9:b5: 28:90:fd:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QUZGNDExMC8GA1UEBRMoNjcyNEJGNDAwRkE2QTQxQzc4REU3MDMxQkZBNEY5QUZD ODM3ODBDRjAeFw0yNDExMjMwNTI4MDdaFw0yNDExMzAwNTI4MDdaMBgxFjAUBgNV BAMTDTY3NDE2N2U3LTYxZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC90e9gsEmsRqIWhk310vPPg3LqIPR4zRwemWe8eQrkKmzXEb6xcV/kCdBWttXv K8060x0zc0uxmFlafgZOTBBMGmA72VP1jTXZJRDUkQI6M0VZeyLTXxa8+ypxXkMl L840SGjaobgVBEKW3v70AhSTZflHzc5X1qEKhL1DEPXCfj+YpLIrFXR1GfC83zlB p0cS2YIY0HF3TdAhv+I0eWPvMrnXAFHUrL+lZ/3uhgHm0cFS81R/GK1bHz4K6oB7 oXe4AlNd6LDg27JIG4+VptciYqiqzROLdCta03sFK7j9blL7KL2v0QhhKuw2S+ZX cJW/teJAc03IlR1nAS0bCpojAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVC79+wF3 7u/HtBokVUFgriBL6M4wHwYDVR0jBBgwFoAUZyS/QA+mpBx43nAxv6T5r8g3gM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBRkY0LzBFNjIyOEM0NTlF RTExRUY5MTAyN0I0NkM0RjlBRTAyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnlTX1FBLW1wQng0M25BeHY2VDVyOGczZ004LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB RkY0LzBFNjIyOEM0NTlFRTExRUY5MTAyN0I0NkM0RjlBRTAyL1p5U19RQS1tcEJ4 NDNuQXh2NlQ1cjhnM2dNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/VQEDoW5bIaqLL1N8xYH6Jri3l/pEN+zHUOjTUNrIkBa/olDmRc/Mp yj3HT5GpCO4d4plwZglBQrM9T95hpITYfMPq08OiAzcgfdFPubIFu1zv4ox7B+f6 Oq+5OPYQ9to6TU43gOkv5G4QR5V8bstZq3yrVxeObkN7ZdmLJBJGofrx5aUdvPAN Gb5xMOKeFkO1HOS+Ovf3mjT/dVoJnFQ/J6m9oXxKt2bgTEg6xgN+fwBG9oVZIrJB 4us9MMxTwtQK0n1VBI+hw8RKrM+mMJzZ4QBBTEnxTlsMN9E5M1LrJU04qq4qdeON WctHuCyYjhhso0Gl0ET+LPiptSiQ/ao= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org