$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: mTBjNy0up1JHNUMMsLpFUy+kU3fpJ/7fKjj/vRRmOd4= Subject key identifier: 4E:A7:25:0D:76:B8:8E:E8:AA:B4:CF:DD:A1:30:EC:E1:62:9F:D9:A4 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0C11 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0BD9 Signing time: Wed 20 Nov 2024 16:54:18 +0000 Manifest this update: Wed 20 Nov 2024 16:54:18 +0000 Manifest next update: Wed 27 Nov 2024 16:54:18 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: EXeKYAmF2fHDxmQUrq4p2aVRO+TXbDuuXrb61m0cjlw=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: iEh0e/j5S4byh0yTrjljWwcw7nQXf6v4YDj94ztKhX4=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 3CFdx6XR3J9PdhVao7c8tK7DvtGCWPlPo7fHfVEStVA=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: lt1D5sciR+2lOQyy1N8uzWcJormxPCZGQ/QdfmIRJiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Nov 20 16:54:18 2024 GMT Not After : Nov 27 16:54:18 2024 GMT Subject: CN=673e143a-91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:11:ea:9e:0a:14:69:e1:8e:5d:70:e8:9b: 28:77:59:ed:6e:98:75:fd:17:a1:93:a5:ba:fc:a5: 60:d4:48:56:f5:07:8b:e7:aa:af:59:fe:60:ec:16: 2a:6c:97:b0:3f:c0:4e:7b:ea:37:e5:41:74:09:07: 5e:63:ee:20:fb:ba:bf:13:6b:70:3a:c0:43:3e:4a: 31:c3:d0:29:e1:cf:db:24:34:ee:ac:db:1f:31:c7: 40:83:67:82:05:61:86:57:32:48:d9:d0:0f:28:7a: 3e:32:3a:3a:cf:87:68:25:42:86:83:ad:d6:e0:e5: eb:c9:69:f9:eb:1d:4d:4d:56:fd:a4:cb:fe:3a:af: fa:fc:d9:e8:7e:ea:53:54:c4:4b:88:e4:8d:04:19: 0c:20:69:20:20:9b:81:87:77:dd:9d:8f:96:8d:52: c9:26:db:12:bd:4d:68:dd:0b:63:dc:ea:01:4e:30: 65:2f:f6:19:d3:73:c6:89:7b:61:5e:f0:e2:8e:fa: 68:50:e1:03:2c:5c:5a:e4:ce:b9:99:67:1d:66:b1: 06:d1:3a:d5:09:8b:5f:85:af:3b:c5:fe:e2:ec:be: b8:3c:23:03:79:55:f0:3a:44:01:cc:68:fb:41:56: a9:f1:5b:fc:ee:34:94:33:90:c1:0c:dd:c1:02:c6: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:25:0D:76:B8:8E:E8:AA:B4:CF:DD:A1:30:EC:E1:62:9F:D9:A4 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fd:08:7d:d0:6e:22:ba:3c:2d:0f:26:27:87:d7:13:12:26: 17:e3:6e:01:81:96:35:ec:40:e7:10:4b:22:65:1f:1b:8c:bc: 48:0e:8c:71:38:b7:ce:6b:e4:3e:ee:57:50:55:0b:4b:de:e9: 5f:73:2c:ea:f3:c0:de:86:db:6e:ff:c1:de:fb:78:ce:f4:f6: a4:37:3e:d6:fd:be:c2:9c:04:6a:3f:c9:85:ba:eb:98:4b:e4: d1:77:af:af:8f:89:4a:47:65:ac:c6:c7:3b:61:c2:3d:cf:62: 25:71:d7:5c:56:1a:a1:8a:57:f2:24:1e:1e:8b:ea:f1:0c:a3: f0:12:67:49:1f:dd:d6:63:7e:5f:0c:80:2a:88:60:33:60:60: 81:ac:9b:7c:c5:c0:3c:56:ec:6d:f3:4d:af:e8:80:3f:5f:e8: f8:14:fd:db:75:05:8a:9c:a6:17:4d:d2:d2:3c:35:96:b2:fb: 9f:c2:8f:75:ad:74:bb:07:ee:24:62:5b:04:26:0e:43:d0:47: b6:a9:4a:02:d0:a3:4f:47:31:d0:9b:59:d9:c9:c7:f0:db:d0: de:6e:f8:f3:86:16:56:69:47:c0:c6:6f:58:fa:14:41:aa:4d: 4a:f0:ca:3f:ae:b8:ea:f5:bb:c8:54:5a:b6:43:f5:6d:20:08: 8c:24:be:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjQxMTIwMTY1NDE4WhcNMjQxMTI3MTY1NDE4WjAYMRYwFAYD VQQDEw02NzNlMTQzYS05MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKgR6p4KFGnhjl1w6Jsod1ntbph1/Rehk6W6/KVg1EhW9QeL56qvWf5g7BYq bJewP8BOe+o35UF0CQdeY+4g+7q/E2twOsBDPkoxw9Ap4c/bJDTurNsfMcdAg2eC BWGGVzJI2dAPKHo+Mjo6z4doJUKGg63W4OXryWn56x1NTVb9pMv+Oq/6/NnofupT VMRLiOSNBBkMIGkgIJuBh3fdnY+WjVLJJtsSvU1o3Qtj3OoBTjBlL/YZ03PGiXth XvDijvpoUOEDLFxa5M65mWcdZrEG0TrVCYtfha87xf7i7L64PCMDeVXwOkQBzGj7 QVap8Vv87jSUM5DBDN3BAsYp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6nJQ12 uI7oqrTP3aEw7OFin9mkMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+/Qh90G4iujwtDyYnh9cTEiYX424BgZY17EDnEEsiZR8bjLxIDoxx OLfOa+Q+7ldQVQtL3ulfcyzq88Dehttu/8He+3jO9PakNz7W/b7CnARqP8mFuuuY S+TRd6+vj4lKR2Wsxsc7YcI9z2IlcddcVhqhilfyJB4ei+rxDKPwEmdJH93WY35f DIAqiGAzYGCBrJt8xcA8Vuxt802v6IA/X+j4FP3bdQWKnKYXTdLSPDWWsvufwo91 rXS7B+4kYlsEJg5D0Ee2qUoC0KNPRzHQm1nZycfw29DebvjzhhZWaUfAxm9Y+hRB qk1K8Mo/rrjq9bvIVFq2Q/VtIAiMJL78 -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:00 2024 by rpki-client on console-fra.rpki-client.org