$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: mHvKBfhKsRIAIz/pJDDtVQt7qRIRWwDGzFzpy9siY94= Subject key identifier: A4:5E:53:4D:14:EC:AF:85:4A:72:94:AC:C4:6B:5F:CF:47:80:F3:49 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 276B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 275E Signing time: Fri 22 Nov 2024 15:38:51 +0000 Manifest this update: Fri 22 Nov 2024 15:38:50 +0000 Manifest next update: Fri 29 Nov 2024 15:38:50 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: 8ijhW0THryWeCUpojx5qpEOjqGt4vkwSTiOrlIzdgog=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: 5qHL59lcbLYTAOl+0OwQssvldpkSxAn75zMYI2/TSOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10091 (0x276b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Nov 22 15:38:50 2024 GMT Not After : Nov 29 15:38:50 2024 GMT Subject: CN=6740a58a-d182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:c4:40:e0:34:8d:d9:56:8d:e1:53:9c:90: 19:ef:ee:bc:40:1d:41:07:0a:81:ee:5d:dd:dd:ea: b4:9a:76:24:5f:b1:53:cd:ed:5c:c8:5c:69:e3:6f: a2:34:6c:d5:69:b7:85:cb:72:83:70:87:9d:84:57: 08:8f:e2:2d:8f:92:73:3a:f0:52:af:0d:f7:c4:eb: ac:ad:4b:a5:42:8a:37:48:45:47:33:7a:a7:34:25: 24:1f:db:b0:ba:1a:2b:c6:f8:03:12:97:ce:ab:71: 33:b7:d5:2e:cf:94:83:23:ce:d9:00:5c:6a:85:2f: 00:ee:27:ae:6b:e8:d3:78:8f:71:bb:cc:4c:94:6e: 11:2d:c7:d5:1f:40:c1:58:13:c9:df:41:c6:2f:79: 9a:9f:63:78:50:ba:f7:9a:da:fd:8a:f6:a8:8c:cd: e0:ee:51:e7:8d:0f:d4:2a:71:47:f3:55:ee:c1:b8: 89:42:05:56:fa:de:96:a1:11:75:d4:c2:ff:ea:6a: 0b:33:e0:d9:ad:18:4f:69:e6:58:e7:f2:5f:c7:5f: 36:97:9d:2d:29:6a:b0:16:b7:92:2e:fd:ac:71:d7: 0a:f1:14:ba:e2:78:34:e5:f5:03:64:17:8f:69:77: 06:42:d7:bb:30:bd:ed:b2:3c:37:fe:76:3b:70:68: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5E:53:4D:14:EC:AF:85:4A:72:94:AC:C4:6B:5F:CF:47:80:F3:49 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ec:2d:2e:5d:0c:82:48:0e:3e:3e:3c:a7:24:c5:08:c8:f1: ab:8d:57:ee:d2:4b:14:a0:0a:2b:0f:b8:52:53:b4:bb:bb:59: 83:c8:27:cf:04:69:d9:02:d9:28:fd:d9:a9:f1:cb:6b:9f:e0: d6:6a:ca:2e:38:8b:b9:fd:dc:59:7f:44:2f:5b:44:40:38:61: a8:ae:6e:20:65:e4:98:c2:ee:fc:e9:3a:89:d6:49:66:a6:55: 89:0f:17:95:3e:10:99:a1:38:d3:9b:6c:e1:f1:d5:43:a0:48: f0:7e:46:c0:10:f2:e9:d1:09:88:e6:28:9d:cd:2f:a6:b2:4d: cb:30:06:8c:ac:68:d0:e5:16:95:49:8b:2b:42:80:10:6c:fd: c9:70:ab:d6:e2:84:6b:5c:ad:73:14:8d:0b:56:c4:95:83:83: 45:72:df:5c:3a:7d:dd:ed:14:a3:7a:37:57:32:b3:7e:24:2d: f0:18:ba:17:87:c0:47:2c:88:57:82:7a:d3:ba:ca:80:85:19: 4e:79:bb:f0:19:d8:07:9e:b0:d6:b5:68:07:23:24:13:46:d3: 54:48:9c:27:3e:52:66:29:4f:8b:e7:38:04:27:eb:00:e2:1e: a8:d2:dd:f3:d3:d3:9f:4d:99:32:9a:71:3d:e7:2a:49:9d:87: e6:3c:10:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjQxMTIyMTUzODUwWhcNMjQxMTI5MTUzODUwWjAYMRYwFAYD VQQDEw02NzQwYTU4YS1kMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sTEQOA0jdlWjeFTnJAZ7+68QB1BBwqB7l3d3eq0mnYkX7FTze1cyFxp42+i NGzVabeFy3KDcIedhFcIj+Itj5JzOvBSrw33xOusrUulQoo3SEVHM3qnNCUkH9uw uhorxvgDEpfOq3Ezt9Uuz5SDI87ZAFxqhS8A7ieua+jTeI9xu8xMlG4RLcfVH0DB WBPJ30HGL3man2N4ULr3mtr9ivaojM3g7lHnjQ/UKnFH81XuwbiJQgVW+t6WoRF1 1ML/6moLM+DZrRhPaeZY5/Jfx182l50tKWqwFreSLv2scdcK8RS64ng05fUDZBeP aXcGQte7ML3tsjw3/nY7cGhWhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKReU00U 7K+FSnKUrMRrX89HgPNJMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq7C0uXQyCSA4+PjynJMUIyPGrjVfu0ksUoAorD7hSU7S7u1mDyCfP BGnZAtko/dmp8ctrn+DWasouOIu5/dxZf0QvW0RAOGGorm4gZeSYwu786TqJ1klm plWJDxeVPhCZoTjTm2zh8dVDoEjwfkbAEPLp0QmI5iidzS+msk3LMAaMrGjQ5RaV SYsrQoAQbP3JcKvW4oRrXK1zFI0LVsSVg4NFct9cOn3d7RSjejdXMrN+JC3wGLoX h8BHLIhXgnrTusqAhRlOebvwGdgHnrDWtWgHIyQTRtNUSJwnPlJmKU+L5zgEJ+sA 4h6o0t3z09OfTZkymnE95ypJnYfmPBAv -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org