$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: A3/U06zqBkzkhMqMu8ydlU9vaIBgrU9TWPujjRmKxzw= Subject key identifier: B8:6C:19:EA:A5:5E:94:AF:2A:BE:B8:37:CF:AA:0B:40:78:76:C9:C7 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0B79 Signing time: Fri 22 Nov 2024 18:47:46 +0000 Manifest this update: Fri 22 Nov 2024 18:47:46 +0000 Manifest next update: Fri 29 Nov 2024 18:47:46 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: i01O7tPPZB99sXTU7H86nHH6CeTb9NIG7lPLG2F0zQ4=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: wfQGJALYuSjZW88DDOeRHpYfVf4I2R7gOW04F4tJgxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2944 (0xb80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Nov 22 18:47:46 2024 GMT Not After : Nov 29 18:47:46 2024 GMT Subject: CN=6740d1d2-1889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:5a:42:66:89:f4:75:2e:54:bb:f6:75:bb: a9:b5:44:7c:f6:2a:86:53:2f:6e:7b:9f:6e:86:3e: 3d:36:be:4d:8a:14:5a:36:4c:d4:b0:7e:de:5a:a7: 80:92:b9:2a:52:c1:61:95:00:1b:7f:07:f4:5f:4a: 4d:56:aa:d2:f2:8a:24:88:19:e5:0d:19:f1:37:50: e0:9c:0e:01:b8:31:47:36:11:69:65:d9:3a:a9:bf: 81:cf:fc:30:2e:b7:75:57:d2:37:19:d0:f9:9b:09: 2d:07:a3:78:ca:42:6d:a4:cb:73:0b:e4:cc:12:4e: 78:cc:0e:44:89:ca:58:8a:97:b2:53:dd:2c:6d:98: 91:25:26:b4:aa:67:73:ec:90:c0:06:80:36:00:1e: 67:0c:82:5f:a9:6d:aa:60:47:58:e6:39:8a:4b:1b: de:33:a4:ea:f3:c1:23:ff:0f:73:73:15:ff:38:0c: 46:f1:93:cb:1d:9a:12:57:e0:6b:6b:cd:b7:12:a3: 9a:69:0d:a9:01:86:e0:fd:a2:85:20:21:71:37:39: e1:b2:e7:f3:16:6f:ca:ce:9f:d9:98:ad:dc:c4:c7: 6d:9f:34:ce:1b:11:24:f3:64:af:fd:e6:13:35:0a: 3b:e6:47:77:62:d1:cf:a8:1a:8a:56:96:6e:64:94: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:19:EA:A5:5E:94:AF:2A:BE:B8:37:CF:AA:0B:40:78:76:C9:C7 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:44:75:87:94:43:70:24:e9:b6:a1:c9:38:8e:ad:2e:99:fc: d5:d8:dc:c3:9d:18:4e:ef:ee:98:33:c1:82:a9:36:f0:24:8d: 03:0b:d7:60:4a:19:ee:6d:1d:ed:26:86:91:b8:60:84:19:3c: 68:f7:1f:2f:71:51:69:5a:d1:d8:f7:3a:08:8b:32:6b:bd:fc: fb:38:36:b6:00:43:47:3a:3f:b1:17:31:7f:fc:74:8a:59:1b: 52:6c:a5:1d:b1:b6:25:d9:1e:2f:85:db:38:d5:ab:8b:df:da: 33:b7:8d:e0:be:40:a1:58:b9:a8:4b:6f:cc:ea:8c:93:70:ae: 96:ab:f1:6a:97:87:ca:0b:4d:df:a0:ae:94:bb:41:64:3a:3b: b3:f6:cf:d0:2a:68:ab:42:35:f0:f1:a0:bd:4b:b2:e1:ae:b0: cb:55:17:b7:6c:df:b8:e9:77:c7:3d:35:87:13:cf:87:ae:36: 7c:1b:0c:bc:03:5f:cb:e8:67:c2:28:d3:5c:90:b4:22:c0:5a: a0:99:68:15:54:c9:32:92:d1:b6:d9:37:d7:80:9a:1a:ae:ba: 45:51:d8:d0:02:5f:9a:8a:f9:6a:1b:2d:69:87:90:fd:6f:0c: 88:56:93:36:80:e5:7e:33:ae:e6:71:38:4f:71:a6:2b:e3:9f: 5e:1e:14:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjQxMTIyMTg0NzQ2WhcNMjQxMTI5MTg0NzQ2WjAYMRYwFAYD VQQDEw02NzQwZDFkMi0xODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup1aQmaJ9HUuVLv2dbuptUR89iqGUy9ue59uhj49Nr5NihRaNkzUsH7eWqeA krkqUsFhlQAbfwf0X0pNVqrS8ookiBnlDRnxN1DgnA4BuDFHNhFpZdk6qb+Bz/ww Lrd1V9I3GdD5mwktB6N4ykJtpMtzC+TMEk54zA5EicpYipeyU90sbZiRJSa0qmdz 7JDABoA2AB5nDIJfqW2qYEdY5jmKSxveM6Tq88Ej/w9zcxX/OAxG8ZPLHZoSV+Br a823EqOaaQ2pAYbg/aKFICFxNznhsufzFm/Kzp/ZmK3cxMdtnzTOGxEk82Sv/eYT NQo75kd3YtHPqBqKVpZuZJRJXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhsGeql XpSvKr64N8+qC0B4dsnHMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCRHWHlENwJOm2ock4jq0umfzV2NzDnRhO7+6YM8GCqTbwJI0DC9dg ShnubR3tJoaRuGCEGTxo9x8vcVFpWtHY9zoIizJrvfz7ODa2AENHOj+xFzF//HSK WRtSbKUdsbYl2R4vhds41auL39ozt43gvkChWLmoS2/M6oyTcK6Wq/Fql4fKC03f oK6Uu0FkOjuz9s/QKmirQjXw8aC9S7LhrrDLVRe3bN+46XfHPTWHE8+HrjZ8Gwy8 A1/L6GfCKNNckLQiwFqgmWgVVMkyktG22TfXgJoarrpFUdjQAl+aivlqGy1ph5D9 bwyIVpM2gOV+M67mcThPcaYr459eHhRX -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org