$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: FXbv2KqS8IpDbIzw0afmisRtCoUX2Snk0q48W43DwDE= Subject key identifier: 42:00:6A:9F:27:23:77:76:D9:93:B6:6F:E6:33:C4:2A:9C:26:F8:D3 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: 4A Signing time: Thu 21 Nov 2024 05:22:27 +0000 Manifest this update: Thu 21 Nov 2024 05:22:26 +0000 Manifest next update: Thu 28 Nov 2024 05:22:26 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: xKhvC0XrAGaYFCgeBGqvBsQ7YVAxmeGHFwVtboOMUjg=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: QNsCGBs1m1kxcH19eAL+oNOTk3BSVk/mrReHFne6EVo=) 3: C82EFE8E38E311EF94CEFA33C4F9AE02.roa (hash: A22A7vfbdFCKohYtFWHmIoIwrTgE4FKBGK/cUFAx+GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Nov 21 05:22:26 2024 GMT Not After : Nov 28 05:22:26 2024 GMT Subject: CN=673ec392-b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:68:ff:ea:5b:e8:d1:63:51:75:1e:c8:d6: 86:45:93:22:a1:5a:6a:a3:9c:0f:7e:30:32:be:42: fd:97:f2:fd:7c:73:a7:a5:22:96:05:5f:ae:a3:38: 25:62:f6:3f:65:1b:46:0e:ef:6e:cc:32:81:d5:14: 06:bd:6b:74:7f:93:64:23:73:5f:d4:18:d1:59:cf: 54:48:2e:44:76:ed:8f:03:7d:76:db:d8:b6:7c:a9: 8c:11:94:91:3c:91:de:63:e4:bb:bd:60:05:8c:4e: 6f:17:88:c6:28:5e:67:96:10:cd:6e:0f:54:aa:d5: 74:a3:56:89:49:fb:15:fe:82:b8:ad:06:8f:24:4c: f3:2e:11:80:ec:56:0e:73:70:59:7a:7f:87:a6:77: 90:75:a5:dc:20:7f:71:e5:2a:1f:33:c5:94:b0:d8: af:e2:93:53:7b:60:88:72:23:81:04:67:88:1a:62: eb:da:a4:6e:03:10:c8:c6:54:50:5e:7e:ae:1c:77: 6a:37:ef:a2:15:b5:f1:51:c5:db:21:02:bd:ac:9a: 3c:fe:16:6b:c0:b1:17:15:ca:54:0c:7e:ee:32:7c: 21:13:60:ff:5f:10:d9:f0:dc:07:75:cf:7c:a6:51: e0:ab:7e:36:bc:ce:25:cc:3d:10:91:f3:cf:75:f9: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:6A:9F:27:23:77:76:D9:93:B6:6F:E6:33:C4:2A:9C:26:F8:D3 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:82:89:fb:b6:70:ac:0c:da:8e:b6:79:01:69:39:f6:c7:42: 92:80:d8:c9:5a:8d:e0:21:d5:16:5a:b7:75:c4:62:2c:e2:f8: 36:2e:ce:2f:8c:c8:94:dd:11:98:6d:57:77:ad:1a:b0:92:0b: 55:0c:85:87:ef:ca:cb:36:72:89:4a:ee:d9:2b:00:dc:99:1b: d2:de:84:59:df:93:e6:06:33:de:dc:98:95:34:61:b4:ae:a0: bf:1b:5a:5d:b1:bc:8b:7b:de:9b:4c:1e:35:8d:dc:73:7c:0a: ea:7e:14:89:51:86:b3:b0:5e:27:40:9b:a8:8e:19:d5:b8:a6: ee:1f:57:67:31:fc:fc:37:ee:a3:8f:2a:f5:54:7d:12:6b:6a: 74:f5:43:9d:e1:ac:1a:a5:35:46:67:6b:be:c6:55:0d:99:1c: 70:b8:6c:a1:57:a5:f6:ee:15:41:01:9b:56:c3:fc:bd:34:fc: 76:67:7d:05:5b:f7:bd:d4:8f:ec:af:9b:e4:de:30:e7:5b:e5: 74:27:3e:a0:73:6f:3b:ba:d3:eb:e1:91:b4:a1:8b:09:e8:d1: 92:20:bf:2e:38:1a:dd:e5:35:1c:f0:3e:a7:2f:e7:54:36:cb: 53:f1:a4:d6:37:d1:41:15:6c:89:49:a4:eb:fa:a4:3b:05:ef: 97:49:fb:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODQyNDExMC8GA1UEBRMoNjU4MTQwMkEyREFFQzUzRUNENjVGRDdDMURDODAwRkE2 RTc1NzNGQTAeFw0yNDExMjEwNTIyMjZaFw0yNDExMjgwNTIyMjZaMBgxFjAUBgNV BAMTDTY3M2VjMzkyLWI0YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUyWj/6lvo0WNRdR7I1oZFkyKhWmqjnA9+MDK+Qv2X8v18c6elIpYFX66jOCVi 9j9lG0YO727MMoHVFAa9a3R/k2Qjc1/UGNFZz1RILkR27Y8DfXbb2LZ8qYwRlJE8 kd5j5Lu9YAWMTm8XiMYoXmeWEM1uD1Sq1XSjVolJ+xX+gritBo8kTPMuEYDsVg5z cFl6f4emd5B1pdwgf3HlKh8zxZSw2K/ik1N7YIhyI4EEZ4gaYuvapG4DEMjGVFBe fq4cd2o376IVtfFRxdshAr2smjz+FmvAsRcVylQMfu4yfCETYP9fENnw3Ad1z3ym UeCrfja8ziXMPRCR8891+eGFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQgBqnycj d3bZk7Zv5jPEKpwm+NMwHwYDVR0jBBgwFoAUZYFAKi2uxT7NZf18HcgA+m51c/ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NDI0LzgyNUJFQjc0MzhF MzExRUY5MTRCMkYzM0M0RjlBRTAyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNf by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWllGQUtpMnV4VDdOWmYxOEhjZ0EtbTUxY19vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NDI0LzgyNUJFQjc0MzhFMzExRUY5MTRCMkYzM0M0RjlBRTAyL1pZRkFLaTJ1eFQ3 TlpmMThIY2dBLW01MWNfby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqCifu2cKwM2o62eQFpOfbHQpKA2MlajeAh1RZat3XEYizi+DYuzi+M yJTdEZhtV3etGrCSC1UMhYfvyss2colK7tkrANyZG9LehFnfk+YGM97cmJU0YbSu oL8bWl2xvIt73ptMHjWN3HN8Cup+FIlRhrOwXidAm6iOGdW4pu4fV2cx/Pw37qOP KvVUfRJranT1Q53hrBqlNUZna77GVQ2ZHHC4bKFXpfbuFUEBm1bD/L00/HZnfQVb 973Uj+yvm+TeMOdb5XQnPqBzbzu60+vhkbShiwno0ZIgvy44Gt3lNRzwPqcv51Q2 y1PxpNY30UEVbIlJpOv6pDsF75dJ+1w= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org