$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: +1uaSFKb38LKjKlmugtEa35luw7L+D9taNsncT04fNY= Subject key identifier: 89:44:BF:FD:5B:DE:00:D4:B3:35:B3:18:C5:9C:AE:FB:53:BD:72:03 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 05DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 05D3 Signing time: Fri 22 Nov 2024 22:32:39 +0000 Manifest this update: Fri 22 Nov 2024 22:32:39 +0000 Manifest next update: Fri 29 Nov 2024 22:32:39 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: QRlrQ3Gsjh/QmmBZ28OC3cnWABZcg9QEjJqmbiND6ho=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Nov 22 22:32:39 2024 GMT Not After : Nov 29 22:32:39 2024 GMT Subject: CN=67410687-ffac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:c6:0c:cd:62:a2:94:aa:a3:d9:7d:5d:54: 39:93:ed:82:ee:dd:34:46:3e:d8:c3:5a:ac:4f:e0: 96:8f:d5:d9:8f:00:57:38:36:5e:c9:be:94:d2:28: b0:db:cb:7c:79:8e:cb:63:ce:9d:30:c9:d4:73:2b: 85:e3:59:c0:70:a5:76:d2:22:64:1e:d0:12:2f:97: c2:1a:71:64:b0:25:80:cb:fc:f0:0e:46:f3:55:16: ff:de:3d:87:f0:62:de:50:9a:07:b3:05:a5:ef:b7: 9c:c9:b2:b4:a8:7d:1e:a6:22:f3:60:9e:4a:b8:d7: 75:36:4f:eb:41:3a:59:d8:f2:eb:3e:e4:4d:61:3f: 37:9f:ff:4e:6b:96:66:78:c5:35:51:2d:ab:47:3c: 40:24:9a:10:be:65:97:09:8d:66:2b:e5:a4:9a:98: 6e:c7:36:28:f2:03:3c:28:bc:33:32:47:2c:23:e0: 43:6a:a1:2d:17:c5:3a:4b:3f:58:26:a9:60:b1:11: 31:49:d3:b8:87:06:a3:39:1a:6d:db:da:7c:de:4a: 79:c3:df:17:35:bb:9b:1d:a7:37:1f:3d:c3:61:99: 0d:85:96:76:35:97:b0:24:de:fb:37:11:0a:37:54: 22:a3:f4:e0:fb:05:7e:5f:0d:fd:9d:38:df:b6:75: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:44:BF:FD:5B:DE:00:D4:B3:35:B3:18:C5:9C:AE:FB:53:BD:72:03 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ee:9d:26:be:2a:2f:4b:dc:b2:c1:6d:86:66:bf:5b:f9:f7: 08:dd:4b:b6:9b:11:7a:12:5c:79:44:45:9b:22:3f:ab:13:c5: 38:01:f9:bf:4d:b0:17:45:b4:16:26:80:f4:f2:13:7e:31:f4: 27:b3:ad:11:6c:82:7f:71:ed:f5:c8:65:0f:be:a1:97:b7:92: 92:f3:a3:84:d8:cf:e5:d7:73:ba:58:00:6a:cf:bc:6e:c0:38: 97:a0:3a:3b:31:04:cc:46:0d:c8:59:84:0e:23:68:04:4b:0d: 08:cc:c2:6d:82:16:69:d5:1a:d3:66:f8:0a:97:9d:2e:db:81: 0d:f0:95:c1:6d:4c:44:0f:18:d6:3a:1d:73:f5:22:00:f3:14: 29:01:1f:39:cf:bf:c0:38:58:88:50:eb:90:b2:69:1f:bc:17: a7:b0:21:c2:14:6f:2a:83:34:4c:4a:d9:b6:d5:ce:55:75:92: 0d:98:11:01:d4:c7:76:04:84:30:ea:06:86:7e:1e:a4:9f:13: ca:cd:71:c8:a5:74:c9:a4:f7:54:45:06:0f:04:9a:91:78:91: e4:12:e5:dd:94:aa:b8:94:29:d9:d7:b1:ef:18:28:57:39:dd: 3e:60:d3:32:71:89:37:82:9c:14:d3:c4:2d:3e:29:78:a5:46: 8c:35:73:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjQxMTIyMjIzMjM5WhcNMjQxMTI5MjIzMjM5WjAYMRYwFAYD VQQDEw02NzQxMDY4Ny1mZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8fGDM1iopSqo9l9XVQ5k+2C7t00Rj7Yw1qsT+CWj9XZjwBXODZeyb6U0iiw 28t8eY7LY86dMMnUcyuF41nAcKV20iJkHtASL5fCGnFksCWAy/zwDkbzVRb/3j2H 8GLeUJoHswWl77ecybK0qH0epiLzYJ5KuNd1Nk/rQTpZ2PLrPuRNYT83n/9Oa5Zm eMU1US2rRzxAJJoQvmWXCY1mK+WkmphuxzYo8gM8KLwzMkcsI+BDaqEtF8U6Sz9Y JqlgsRExSdO4hwajORpt29p83kp5w98XNbubHac3Hz3DYZkNhZZ2NZewJN77NxEK N1Qio/Tg+wV+Xw39nTjftnU3XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlEv/1b 3gDUszWzGMWcrvtTvXIDMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd7p0mviovS9yywW2GZr9b+fcI3Uu2mxF6Elx5REWbIj+rE8U4Afm/ TbAXRbQWJoD08hN+MfQns60RbIJ/ce31yGUPvqGXt5KS86OE2M/l13O6WABqz7xu wDiXoDo7MQTMRg3IWYQOI2gESw0IzMJtghZp1RrTZvgKl50u24EN8JXBbUxEDxjW Oh1z9SIA8xQpAR85z7/AOFiIUOuQsmkfvBensCHCFG8qgzRMStm21c5VdZINmBEB 1Md2BIQw6gaGfh6knxPKzXHIpXTJpPdURQYPBJqReJHkEuXdlKq4lCnZ17HvGChX Od0+YNMycYk3gpwU08QtPil4pUaMNXM2 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org