$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: ZnPO4yufNMuSSMLgwNo05F+M74w6ZSumUH8P6pAs8Ek= Subject key identifier: 07:9B:9F:A8:75:ED:D5:C9:E5:42:AE:9C:CA:A7:B9:BF:41:90:91:8B Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 07 Signing time: Thu 21 Nov 2024 06:15:30 +0000 Manifest this update: Thu 21 Nov 2024 06:15:30 +0000 Manifest next update: Thu 28 Nov 2024 06:15:29 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: 8G1Yf+Gl2NxlSPk1MsZXIFKldsc9TV81CZL9V3a1ZHA=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Nov 21 06:15:30 2024 GMT Not After : Nov 28 06:15:29 2024 GMT Subject: CN=673ed002-4b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:71:2a:70:54:03:c0:34:e3:0c:b8:13:f6: 92:b9:69:c0:78:08:f4:e6:aa:49:7c:0e:d1:e3:4f: f7:e8:e2:5e:56:69:be:12:df:8a:83:6c:1c:45:8d: 99:0e:83:17:0f:6d:0d:bd:ad:50:24:7a:b1:f3:72: e2:b3:31:07:fb:51:b7:1d:b6:26:d5:98:a7:34:a1: 2b:e0:84:03:21:c4:55:85:b9:01:9d:f9:fd:4a:56: 5e:31:3d:d4:25:57:69:2a:6c:12:9a:63:ee:09:2b: be:c7:47:f6:1a:2e:db:17:2e:47:ab:8f:e1:aa:1b: 2b:56:2c:35:53:c9:80:f0:37:b9:1a:dd:8a:6a:78: 34:42:e8:fb:e6:40:47:db:8a:6f:05:a3:0b:86:fe: 29:32:9a:24:bf:55:1b:43:62:fd:f1:51:07:3d:0b: 9d:22:34:17:cd:11:22:92:e0:6e:91:be:b9:01:00: da:e2:5c:d8:a1:a8:4c:b9:7f:af:3d:bd:1b:3b:d9: 0b:84:f3:0b:af:12:12:4c:46:b9:d5:59:75:14:76: 87:66:7d:36:62:34:f2:78:b6:c8:f9:cd:bf:e2:e8: 4a:27:55:fd:95:7a:c1:86:f0:ad:cc:c6:16:15:59: 7b:a3:0b:16:7c:dd:50:02:b6:23:1c:b3:e1:78:b7: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9B:9F:A8:75:ED:D5:C9:E5:42:AE:9C:CA:A7:B9:BF:41:90:91:8B X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9e:e4:50:68:3c:44:4e:7d:ac:38:99:8a:fd:99:18:c1:46: 2a:9f:87:65:16:4f:0f:5f:62:fc:cc:af:23:f5:ed:8f:62:6d: 7c:28:3b:6b:2d:29:56:e4:71:79:d2:1c:ad:0a:db:e4:a4:ef: 2a:ba:82:c8:8c:01:24:23:ef:68:4b:b1:48:5c:08:2b:8d:d6: 4e:5c:9e:e3:e9:39:e8:95:3f:4b:65:e0:fe:fa:95:97:d3:79: ee:13:8a:7c:09:af:de:95:5c:da:a8:fd:bd:54:f8:51:6c:6e: 49:e7:d8:d9:2b:fd:43:1e:d1:20:7a:ac:94:66:ad:c7:40:aa: b0:8c:76:e2:44:f1:2b:2a:bd:ac:cb:b6:61:53:27:05:2e:b4: 5a:3d:b8:68:0d:00:7f:d4:0c:af:44:04:85:5c:d4:94:63:5a: 11:7f:bc:01:4f:ee:05:07:ff:dc:12:40:83:2b:56:f4:64:5c: 6c:d1:f4:e3:62:03:12:e7:34:ce:cb:91:08:ce:2d:e3:5b:9f: 20:d2:44:4a:26:a9:ce:70:e2:92:bf:1e:38:8d:f0:eb:23:16: 57:60:49:12:7c:62:33:6c:5b:2c:cd:b3:b5:9a:4a:17:41:1b: 3e:f5:60:d3:14:a1:d7:ae:65:c9:14:6b:4a:ac:0f:86:d2:68: 98:cd:2e:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNDExMjEwNjE1MzBaFw0yNDExMjgwNjE1MjlaMBgxFjAUBgNV BAMTDTY3M2VkMDAyLTRiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhDXEqcFQDwDTjDLgT9pK5acB4CPTmqkl8DtHjT/fo4l5Wab4S34qDbBxFjZkO gxcPbQ29rVAkerHzcuKzMQf7UbcdtibVmKc0oSvghAMhxFWFuQGd+f1KVl4xPdQl V2kqbBKaY+4JK77HR/YaLtsXLkerj+GqGytWLDVTyYDwN7ka3YpqeDRC6PvmQEfb im8FowuG/ikymiS/VRtDYv3xUQc9C50iNBfNESKS4G6RvrkBANriXNihqEy5f689 vRs72QuE8wuvEhJMRrnVWXUUdodmfTZiNPJ4tsj5zb/i6EonVf2VesGG8K3MxhYV WXujCxZ83VACtiMcs+F4t28VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB5ufqHXt 1cnlQq6cyqe5v0GQkYswHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWe5FBoPEROfaw4mYr9mRjBRiqfh2UWTw9fYvzMryP17Y9ibXwoO2st KVbkcXnSHK0K2+Sk7yq6gsiMASQj72hLsUhcCCuN1k5cnuPpOeiVP0tl4P76lZfT ee4TinwJr96VXNqo/b1U+FFsbknn2Nkr/UMe0SB6rJRmrcdAqrCMduJE8SsqvazL tmFTJwUutFo9uGgNAH/UDK9EBIVc1JRjWhF/vAFP7gUH/9wSQIMrVvRkXGzR9ONi AxLnNM7LkQjOLeNbnyDSREomqc5w4pK/HjiN8OsjFldgSRJ8YjNsWyzNs7WaShdB Gz71YNMUodeuZckUa0qsD4bSaJjNLnU= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org