$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: Ek4pylgF8kWiyyj1kpIroLTXQLwEyoKT7SlrwEJnLmk= Subject key identifier: AF:2B:FC:A9:70:52:84:55:79:74:BF:70:99:40:F2:65:08:52:39:72 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: 41 Signing time: Thu 21 Nov 2024 05:30:13 +0000 Manifest this update: Thu 21 Nov 2024 05:30:13 +0000 Manifest next update: Thu 28 Nov 2024 05:30:13 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: 1J9hc8wFIqfwUNfJZ0S59+uMoQGQrMBTZ6mSB4+YyHQ=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: d1mk+cdJcnnaOIXb49PWkRnd/5z0AxskuNqA+hXfJa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Nov 21 05:30:13 2024 GMT Not After : Nov 28 05:30:13 2024 GMT Subject: CN=673ec565-afdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:6f:8c:58:6e:6b:09:99:46:51:79:5f:33: 46:c4:e2:99:ef:58:f8:c8:91:71:b3:aa:df:ac:ca: 34:46:f2:ae:79:7a:e8:c2:c4:3c:b2:48:83:1a:42: 5b:74:82:a4:f1:af:d6:64:96:ae:85:a5:6c:d5:8c: f8:15:0c:96:68:8e:dc:e5:f5:e1:f1:dd:d1:16:4e: 75:82:23:8c:c7:1d:98:37:8c:3b:41:be:57:f4:b9: 70:09:d6:68:6f:67:8c:06:0b:b4:57:06:e0:bf:f9: f4:9c:a5:97:9c:49:08:ab:73:f8:c1:52:7f:f6:3f: 21:f1:57:41:f4:5e:d7:c4:17:f1:6c:0a:bb:71:dc: f2:60:08:3f:c4:7f:95:f9:75:e3:1c:c1:ae:29:82: 74:ad:e1:f9:5a:e6:bf:42:ab:e9:87:5c:d4:91:10: c8:b9:6f:f5:bf:5b:1d:5a:f6:c3:42:75:ed:31:f1: e5:73:5a:79:bf:e1:c4:3c:96:56:75:4c:cb:32:97: a2:de:29:0f:3c:0e:04:05:b2:9e:e4:d0:72:95:6d: a5:d8:1a:a2:79:28:52:00:04:42:ef:c1:87:c2:aa: 17:f8:1f:59:fc:d2:d8:c6:00:36:7c:2a:66:2a:0c: 80:43:08:ff:ac:3a:12:d0:d7:e7:de:ba:4e:b8:91: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:FC:A9:70:52:84:55:79:74:BF:70:99:40:F2:65:08:52:39:72 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:bd:19:6c:1a:1e:23:63:9a:07:98:29:34:ca:f3:bd:ba:39: 75:df:06:1d:b4:98:ef:9a:87:03:fa:8b:cd:8f:10:b5:2d:36: 7e:26:0e:8c:68:e2:49:4c:a7:98:5e:a7:ef:f9:35:41:ac:c4: 2c:11:6b:cd:c2:67:15:50:47:09:88:48:56:3c:58:9d:15:d5: 3b:ce:d5:88:20:54:e0:dd:35:21:23:a7:03:e8:70:c7:67:f5: 12:15:3b:ce:66:6e:a6:a2:db:f2:16:8f:e8:cf:85:09:9b:69: 36:60:e4:6c:26:cd:f4:3a:28:63:7c:a8:f1:6c:e3:ee:16:17: d5:9f:a5:32:10:56:8b:f7:0b:10:4d:24:2e:5a:03:2f:f3:1a: ea:58:e4:ef:7f:89:d2:50:4f:7d:16:bf:e2:11:49:bd:73:9f: 33:e4:f4:73:5c:27:ee:02:cf:33:20:47:16:81:7e:07:06:00: cb:62:3e:7b:3d:09:43:a3:7d:82:6e:79:2f:b6:cc:d5:02:d5: 7a:b9:e7:ff:b4:9f:ac:4c:3e:60:6a:d8:83:bc:3c:fd:45:ea: 65:86:c6:3b:37:c8:96:7e:3a:83:b0:23:55:79:aa:b8:95:46: 38:56:7a:ff:a5:23:0c:a8:10:c5:fd:7f:83:b7:5b:1f:e8:4f: c1:83:7a:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI2NTExMC8GA1UEBRMoM0YzNkQwQzgwNzZFN0FDRkE4M0QwNEI3MjMwNzE3MkE4 ODI5RDVCMzAeFw0yNDExMjEwNTMwMTNaFw0yNDExMjgwNTMwMTNaMBgxFjAUBgNV BAMTDTY3M2VjNTY1LWFmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+52+MWG5rCZlGUXlfM0bE4pnvWPjIkXGzqt+syjRG8q55eujCxDyySIMaQlt0 gqTxr9Zklq6FpWzVjPgVDJZojtzl9eHx3dEWTnWCI4zHHZg3jDtBvlf0uXAJ1mhv Z4wGC7RXBuC/+fScpZecSQirc/jBUn/2PyHxV0H0XtfEF/FsCrtx3PJgCD/Ef5X5 deMcwa4pgnSt4fla5r9Cq+mHXNSREMi5b/W/Wx1a9sNCde0x8eVzWnm/4cQ8llZ1 TMsyl6LeKQ88DgQFsp7k0HKVbaXYGqJ5KFIABELvwYfCqhf4H1n80tjGADZ8KmYq DIBDCP+sOhLQ1+feuk64kVnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUryv8qXBS hFV5dL9wmUDyZQhSOXIwHwYDVR0jBBgwFoAUPzbQyAdues+oPQS3IwcXKogp1bMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjY1LzAxNUY2REVFNDVC NzExRUZBNTlFMTMzMkM0RjlBRTAyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUHpiUXlBZHVlcy1vUFFTM0l3Y1hLb2dwMWJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QjY1LzAxNUY2REVFNDVCNzExRUZBNTlFMTMzMkM0RjlBRTAyL1B6YlF5QWR1ZXMt b1BRUzNJd2NYS29ncDFiTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIW9GWwaHiNjmgeYKTTK8726OXXfBh20mO+ahwP6i82PELUtNn4mDoxo 4klMp5hep+/5NUGsxCwRa83CZxVQRwmISFY8WJ0V1TvO1YggVODdNSEjpwPocMdn 9RIVO85mbqai2/IWj+jPhQmbaTZg5GwmzfQ6KGN8qPFs4+4WF9WfpTIQVov3CxBN JC5aAy/zGupY5O9/idJQT30Wv+IRSb1znzPk9HNcJ+4CzzMgRxaBfgcGAMtiPns9 CUOjfYJueS+2zNUC1Xq55/+0n6xMPmBq2IO8PP1F6mWGxjs3yJZ+OoOwI1V5qriV RjhWev+lIwyoEMX9f4O3Wx/oT8GDenM= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org