$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: xYV3stnHNhYdrAeDH5LLQ4IUhRgRxfB00cZQmJemZoA= Subject key identifier: D4:B9:20:56:86:A1:F3:F3:3C:1D:5F:80:51:A1:39:78:ED:26:87:8C Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: B0 Signing time: Sat 23 Nov 2024 04:10:23 +0000 Manifest this update: Sat 23 Nov 2024 04:10:23 +0000 Manifest next update: Sat 30 Nov 2024 04:10:23 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: Xd0D0Uj0M1SbQlbzhA+Frcf9+smzfHHWnukOyv5iA7I=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: 3JCYdG127llvDq2ItCHcIF18EbtwG2SS2OGY+RRrxS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Nov 23 04:10:23 2024 GMT Not After : Nov 30 04:10:23 2024 GMT Subject: CN=674155af-c6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:6f:0f:66:bc:b8:2d:e5:b6:b4:85:01:bd: 1e:83:26:b1:16:c2:8b:0d:a9:9c:56:bb:82:76:83: a8:5b:b3:95:1d:20:9e:4e:a3:ce:bd:d0:ca:44:df: 8a:10:50:8d:f8:a1:aa:7e:88:65:5d:2a:bd:6e:2b: 0d:1d:d7:2b:f9:97:68:2f:b2:00:97:1a:91:bf:25: 7b:14:8c:57:b9:47:fa:48:3c:20:e5:d5:69:8a:aa: c6:d1:65:02:da:b9:cd:72:50:78:e4:91:a8:88:0c: 86:50:f3:54:cc:fa:32:04:84:f2:89:33:e7:8f:b0: cb:da:a0:fd:57:ec:28:dc:98:ed:08:74:6e:f1:08: 05:c9:da:1e:63:cd:76:92:51:00:e1:78:d7:ae:07: a9:58:8c:d2:e3:4f:86:d3:02:01:b6:46:8f:6f:89: 10:bb:5b:89:66:d0:04:a6:fc:7d:8b:bc:dd:4c:e1: 67:3d:ac:e3:f0:f8:d4:a2:a3:6a:80:ce:9e:80:ed: d6:fe:82:ca:f8:23:6b:25:24:8e:d9:9e:53:eb:2e: 0d:d7:51:4e:f5:b4:70:89:c1:33:30:20:90:57:f7: be:ec:be:bf:40:71:99:3b:bd:cc:cb:9c:5a:a6:cc: f5:76:f0:46:98:7a:68:36:ac:7d:cd:4e:9d:05:15: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:20:56:86:A1:F3:F3:3C:1D:5F:80:51:A1:39:78:ED:26:87:8C X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:8f:5d:e8:98:16:da:cc:77:24:4d:6f:e5:3e:3d:50:5e:fa: 53:1e:37:e8:f9:b6:77:f9:30:f3:ac:16:e5:53:a7:f1:3b:ff: 9c:81:df:87:c6:48:36:12:fe:39:18:a4:a2:5b:a1:da:9b:45: 42:85:76:a3:60:ab:cc:7d:c5:b0:4e:37:e3:78:da:4d:2f:78: c5:b5:6c:b8:ad:45:04:f6:7f:cd:48:a3:f4:6c:a4:54:26:d5: 26:e3:f1:9b:29:50:8c:88:74:ed:7e:61:37:92:0c:d4:e9:6a: 17:38:0c:5d:49:fa:ca:d2:d3:5b:0d:f3:e8:c3:36:b8:59:6d: 53:b8:74:1a:4d:70:75:52:de:48:f7:10:55:55:3b:4d:ee:74: 9a:47:a0:22:c0:57:03:c0:5f:d4:40:8d:6c:08:dc:bd:2c:ff: 16:bc:2d:07:95:0e:ee:7f:82:e8:2b:62:c1:bc:11:81:51:e8: 1a:bc:4d:e7:24:a2:96:06:00:15:4d:e8:d4:25:45:b0:ab:9a: 7c:d0:a0:98:af:7c:b3:52:03:ce:28:80:fa:b3:e6:a4:f5:83: 8a:71:c4:48:76:52:fc:94:95:46:c6:94:4c:46:0b:41:b3:99: ab:08:bb:68:55:5e:b9:c9:47:d2:74:74:70:d4:2e:5d:7d:33: 2b:4a:a1:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjQxMTIzMDQxMDIzWhcNMjQxMTMwMDQxMDIzWjAYMRYwFAYD VQQDEw02NzQxNTVhZi1jNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+BvD2a8uC3ltrSFAb0egyaxFsKLDamcVruCdoOoW7OVHSCeTqPOvdDKRN+K EFCN+KGqfohlXSq9bisNHdcr+ZdoL7IAlxqRvyV7FIxXuUf6SDwg5dVpiqrG0WUC 2rnNclB45JGoiAyGUPNUzPoyBITyiTPnj7DL2qD9V+wo3JjtCHRu8QgFydoeY812 klEA4XjXrgepWIzS40+G0wIBtkaPb4kQu1uJZtAEpvx9i7zdTOFnPazj8PjUoqNq gM6egO3W/oLK+CNrJSSO2Z5T6y4N11FO9bRwicEzMCCQV/e+7L6/QHGZO73My5xa psz1dvBGmHpoNqx9zU6dBRWGhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS5IFaG ofPzPB1fgFGhOXjtJoeMMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoj13omBbazHckTW/lPj1QXvpTHjfo+bZ3+TDzrBblU6fxO/+cgd+H xkg2Ev45GKSiW6Ham0VChXajYKvMfcWwTjfjeNpNL3jFtWy4rUUE9n/NSKP0bKRU JtUm4/GbKVCMiHTtfmE3kgzU6WoXOAxdSfrK0tNbDfPowza4WW1TuHQaTXB1Ut5I 9xBVVTtN7nSaR6AiwFcDwF/UQI1sCNy9LP8WvC0HlQ7uf4LoK2LBvBGBUegavE3n JKKWBgAVTejUJUWwq5p80KCYr3yzUgPOKID6s+ak9YOKccRIdlL8lJVGxpRMRgtB s5mrCLtoVV65yUfSdHRw1C5dfTMrSqEm -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org