$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: oiVMeYgxb8+yztkXRdqo+sSxUUO5uLoRhrGfnCv0lto= Subject key identifier: 5C:27:47:AE:AA:40:68:2F:F0:10:0A:9A:EF:1D:9C:05:A2:E8:92:DB Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1A46 Signing time: Fri 22 Nov 2024 16:21:42 +0000 Manifest this update: Fri 22 Nov 2024 16:21:42 +0000 Manifest next update: Fri 29 Nov 2024 16:21:42 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: 0O2GpJ5orxhLCzecuILSJWfSa2JAkZUmsx9FPs0kmys=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: M0sEOECKh099Hf8syP6P2HCSbbiXrPOBjgjnrZFImS0=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6769 (0x1a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Nov 22 16:21:42 2024 GMT Not After : Nov 29 16:21:42 2024 GMT Subject: CN=6740af96-d6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:e7:ea:d6:e8:46:e8:b3:5f:8c:d9:f1:47: 40:57:d7:d7:ae:f2:80:9b:e2:45:2d:93:ba:2b:9a: 69:ea:9b:a7:f2:a1:ac:b4:5f:68:fe:d6:bc:b3:26: 91:b4:a5:3d:55:32:84:cf:01:cf:8f:3f:5a:4a:19: 75:c4:9d:27:86:bd:0b:64:59:9a:ed:1d:d8:96:41: 4f:76:2c:80:1a:ad:ee:0e:fd:02:ce:f9:f6:02:b2: 17:f5:f1:ea:22:97:68:c4:80:60:3c:31:c1:81:df: 2a:58:e6:ea:93:72:5f:28:84:76:47:0e:45:99:c5: e4:2c:85:19:c3:ce:16:19:f8:46:77:8f:b4:ff:f4: 15:00:d6:3f:39:93:de:98:63:ac:bb:08:64:e3:e8: 8e:71:69:06:7e:68:ff:c5:ee:7c:55:35:af:68:79: 54:a1:b3:c5:ad:03:ed:ca:1b:5a:6d:9f:18:74:aa: de:4b:2c:6a:ea:c3:b8:0b:10:a3:b5:13:66:ef:cf: 1b:d4:9f:03:bf:ae:ea:5c:dc:b7:65:05:87:70:bf: 66:99:e4:d0:16:1a:b8:d9:e7:7b:a4:38:97:52:36: 03:04:2b:f6:ab:ab:96:2a:b2:b5:a0:82:1c:5f:10: 24:59:7c:ef:ed:c8:f3:46:84:db:85:ee:35:69:ba: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:27:47:AE:AA:40:68:2F:F0:10:0A:9A:EF:1D:9C:05:A2:E8:92:DB X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:58:fa:37:32:5d:0c:3b:3b:64:2e:03:bf:4a:e2:19:f8: a1:ce:4f:b6:d2:3d:77:d5:90:d4:65:98:4e:f1:32:c9:5d:38: 65:eb:d3:b5:0d:80:5f:f8:fe:03:6d:73:85:8e:bf:66:62:f3: 35:1d:05:51:f4:fe:cd:25:0b:76:29:80:c3:3d:7e:e4:0d:f6: f3:bd:36:19:49:af:0b:13:42:b6:9d:38:1b:d3:3a:7d:cc:f3: 9b:de:92:55:aa:ce:e5:5d:b9:ad:89:b8:99:85:d0:9e:9d:b4: 28:62:77:29:65:2d:87:35:56:7a:72:05:e3:a1:d4:a3:8f:a1: b7:bb:61:c8:89:6d:87:c1:e4:57:00:ee:0d:e0:22:99:ba:05: e8:18:10:a2:ae:1f:66:8c:cf:19:fd:26:15:28:d5:35:b7:81: f7:45:a8:b9:65:de:75:c8:30:f9:f6:68:37:2b:31:0a:6c:1f: fd:32:7f:1d:ee:78:18:40:af:e1:a8:e4:88:a7:d3:52:38:66: 2c:44:7a:a7:6b:7b:68:6d:99:a9:2f:4d:b7:00:63:00:38:94: b9:6f:a9:10:d8:45:75:ae:b1:69:99:73:c6:1b:0f:55:df:75: d2:72:29:d8:b3:b5:70:d5:42:58:7c:34:0f:07:b8:ee:c5:56: 11:6d:f7:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjQxMTIyMTYyMTQyWhcNMjQxMTI5MTYyMTQyWjAYMRYwFAYD VQQDEw02NzQwYWY5Ni1kNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/Hn6tboRuizX4zZ8UdAV9fXrvKAm+JFLZO6K5pp6pun8qGstF9o/ta8syaR tKU9VTKEzwHPjz9aShl1xJ0nhr0LZFma7R3YlkFPdiyAGq3uDv0Czvn2ArIX9fHq IpdoxIBgPDHBgd8qWObqk3JfKIR2Rw5FmcXkLIUZw84WGfhGd4+0//QVANY/OZPe mGOsuwhk4+iOcWkGfmj/xe58VTWvaHlUobPFrQPtyhtabZ8YdKreSyxq6sO4CxCj tRNm788b1J8Dv67qXNy3ZQWHcL9mmeTQFhq42ed7pDiXUjYDBCv2q6uWKrK1oIIc XxAkWXzv7cjzRoTbhe41abrKEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwnR66q QGgv8BAKmu8dnAWi6JLbMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/+Vj6NzJdDDs7ZC4Dv0riGfihzk+20j131ZDUZZhO8TLJXThl69O1 DYBf+P4DbXOFjr9mYvM1HQVR9P7NJQt2KYDDPX7kDfbzvTYZSa8LE0K2nTgb0zp9 zPOb3pJVqs7lXbmtibiZhdCenbQoYncpZS2HNVZ6cgXjodSjj6G3u2HIiW2HweRX AO4N4CKZugXoGBCirh9mjM8Z/SYVKNU1t4H3Rai5Zd51yDD59mg3KzEKbB/9Mn8d 7ngYQK/hqOSIp9NSOGYsRHqna3tobZmpL023AGMAOJS5b6kQ2EV1rrFpmXPGGw9V 33XScinYs7Vw1UJYfDQPB7juxVYRbffL -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org