$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: bwAZ1eIfcmmLnuhCSv1TfK9tXWXHcF4A7HmL6w6+4BE= Subject key identifier: 71:EA:55:23:18:A1:D1:16:97:89:E8:E2:70:7F:CB:D4:42:AD:F8:BC Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: 25 Signing time: Sat 23 Nov 2024 06:02:03 +0000 Manifest this update: Sat 23 Nov 2024 06:02:03 +0000 Manifest next update: Sat 30 Nov 2024 06:02:03 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: WlVe7gWnjoj9mw8mD0eadB+V6fqYw2otovtkMb3NV7Q=) 2: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 3: 0226B7F8990611EFB1F1DE6BC4F9AE02.roa (hash: HFpOF7I3GV6WE8r7JPp1yYRngdlcU7JSkIeWPz4ePTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Nov 23 06:02:03 2024 GMT Not After : Nov 30 06:02:03 2024 GMT Subject: CN=67416fdb-263a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:6d:40:0c:97:01:cb:12:ef:2f:b9:5e:cf: 45:97:eb:95:50:3b:ff:6e:87:6e:85:90:05:4f:87: d9:42:d7:f6:c1:bf:ed:fd:ca:22:23:c9:23:6e:ff: 20:50:6a:fb:e6:d0:80:c7:2d:5b:f4:4d:00:26:74: ea:bc:1d:c1:9f:e2:ab:22:8c:79:cf:16:ce:f9:31: 78:72:38:91:68:b7:d8:8a:be:2c:cf:c0:d4:32:e3: 1c:3d:3f:85:4d:5b:63:14:29:9e:72:68:91:e4:cf: 45:12:b5:02:4d:67:01:d8:79:f8:55:73:6f:5a:40: 6d:aa:b5:f8:8a:24:6a:64:55:7f:24:ec:39:13:fe: af:4b:b1:e2:98:48:84:f1:8a:7b:df:f6:7c:cf:9a: 4d:f5:c5:fe:ab:7f:40:ad:99:2f:8d:4c:3d:c9:d2: 37:8c:02:fa:60:e4:47:e1:e7:81:49:ba:54:5e:53: a7:3a:8a:5b:3a:46:c4:bf:ab:2b:00:34:e1:93:83: 47:7e:21:91:7e:0c:61:a7:00:f9:cb:6d:af:76:19: 38:16:b7:ec:19:29:c8:cf:ad:b8:9c:2c:32:0d:5e: 14:56:9a:a6:46:85:0b:6d:df:5b:10:67:87:05:62: 3c:da:15:1c:10:b0:18:b4:bb:9a:e5:ef:60:a1:49: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:55:23:18:A1:D1:16:97:89:E8:E2:70:7F:CB:D4:42:AD:F8:BC X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:54:cb:2b:f5:d7:ed:c1:7e:64:c7:92:27:a5:a7:69:72:7e: 04:24:de:6e:a6:e9:3f:31:2b:5b:66:2c:82:60:14:c7:fb:78: ad:de:22:14:8a:6a:d4:92:f6:24:ea:5c:a9:33:50:38:5d:84: 6f:3f:42:c4:fe:94:cf:f1:47:9b:15:73:60:dd:65:5c:1e:08: 3a:a3:09:08:59:cd:0f:50:f6:30:83:ac:07:59:f5:ff:b8:04: 8c:37:c4:84:9b:6e:39:98:76:ba:ee:fc:01:86:10:e3:89:11: 22:47:77:67:29:27:10:3d:4c:9f:13:0c:07:88:c8:a2:82:66: 7e:3b:1a:c1:b2:cd:43:62:31:69:32:c0:21:57:04:6c:c9:ce: 08:4d:57:a2:d1:5d:63:4d:aa:63:08:fa:c4:eb:f1:07:b0:20: 0d:ff:24:4a:7e:00:19:9c:49:12:43:78:e3:01:fb:e2:8d:7d: 3d:21:69:36:59:44:21:5a:fd:49:9b:18:a2:1f:bb:9c:ca:c0: d1:a8:8a:8e:b2:a2:02:83:8a:38:bc:cd:95:02:e9:4c:86:77: 17:bc:97:12:31:fd:b7:20:2b:e3:5e:42:da:5d:56:44:1e:19: 61:67:ea:2f:69:3e:d8:fe:31:f6:90:93:24:2f:96:35:55:c9: 4b:97:87:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkE1MjExMC8GA1UEBRMoNjc0QUM1N0MwOTk4NzZBMDY2NTcxODBCMzRFMjRFNkVF RTg4NDQxMTAeFw0yNDExMjMwNjAyMDNaFw0yNDExMzAwNjAyMDNaMBgxFjAUBgNV BAMTDTY3NDE2ZmRiLTI2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdfm1ADJcByxLvL7lez0WX65VQO/9uh26FkAVPh9lC1/bBv+39yiIjySNu/yBQ avvm0IDHLVv0TQAmdOq8HcGf4qsijHnPFs75MXhyOJFot9iKvizPwNQy4xw9P4VN W2MUKZ5yaJHkz0UStQJNZwHYefhVc29aQG2qtfiKJGpkVX8k7DkT/q9LseKYSITx invf9nzPmk31xf6rf0CtmS+NTD3J0jeMAvpg5Efh54FJulReU6c6ils6RsS/qysA NOGTg0d+IZF+DGGnAPnLba92GTgWt+wZKcjPrbicLDINXhRWmqZGhQtt31sQZ4cF YjzaFRwQsBi0u5rl72ChSRUdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcepVIxih 0RaXiejicH/L1EKt+LwwHwYDVR0jBBgwFoAUZ0rFfAmYdqBmVxgLNOJObu6IRBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQTUyLzNFNzZEN0VFOTgx OTExRUZCMEQwREQzNEM0RjlBRTAyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjByRmZBbVlkcUJtVnhnTE5PSk9idTZJUkJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QTUyLzNFNzZEN0VFOTgxOTExRUZCMEQwREQzNEM0RjlBRTAyL1owckZmQW1ZZHFC bVZ4Z0xOT0pPYnU2SVJCRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlUyyv11+3BfmTHkielp2lyfgQk3m6m6T8xK1tmLIJgFMf7eK3eIhSK atSS9iTqXKkzUDhdhG8/QsT+lM/xR5sVc2DdZVweCDqjCQhZzQ9Q9jCDrAdZ9f+4 BIw3xISbbjmYdrru/AGGEOOJESJHd2cpJxA9TJ8TDAeIyKKCZn47GsGyzUNiMWky wCFXBGzJzghNV6LRXWNNqmMI+sTr8QewIA3/JEp+ABmcSRJDeOMB++KNfT0haTZZ RCFa/UmbGKIfu5zKwNGoio6yogKDiji8zZUC6UyGdxe8lxIx/bcgK+NeQtpdVkQe GWFn6i9pPtj+MfaQkyQvljVVyUuXhwU= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org