$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: w6a/Pn0QNAGsoJx88tQNcem9wp0qXQ2bCkZYXItQOoQ= Subject key identifier: F1:EC:07:25:58:62:18:72:32:E9:10:7C:0D:D0:74:8A:14:54:D4:CA Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1CA8 Signing time: Fri 22 Nov 2024 16:10:41 +0000 Manifest this update: Fri 22 Nov 2024 16:10:40 +0000 Manifest next update: Fri 29 Nov 2024 16:10:40 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: jGQ1maKeKxGPwVdnXC0I+4ekOKUEGECA6FWUDEmRaZo=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: aIsyuWC96l7bSOILN2fqk5PGFD0DxQkh6IU3LvwQjDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7348 (0x1cb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Nov 22 16:10:40 2024 GMT Not After : Nov 29 16:10:40 2024 GMT Subject: CN=6740ad01-d250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:37:12:b8:f0:76:df:3a:42:a8:fe:54:95: d3:65:90:c6:07:be:8e:de:5c:3b:7b:2e:1f:cb:8e: d9:b0:de:f3:a8:d7:36:39:6b:1a:5e:13:ca:ab:d5: 1c:d6:60:25:4d:73:39:b0:de:ad:38:39:72:18:2b: c7:0f:41:5c:a7:2b:33:62:1e:1b:c3:5a:f7:05:32: f9:40:0e:a2:d5:e9:e0:8c:41:2f:41:ac:f4:fe:98: a8:8a:2c:a0:ab:09:1d:3a:57:cf:1c:f0:e4:8b:fe: b8:5f:a3:47:95:6b:19:48:51:28:fb:e1:8d:45:91: bd:dd:7b:16:db:cc:7e:da:d3:81:47:a1:e3:f0:2d: 24:1d:c3:cb:17:f2:e1:df:43:1c:9d:81:95:53:8f: a9:3e:e5:55:7f:ac:22:83:c0:65:3d:92:0f:de:ce: 8f:2f:46:35:0f:b6:49:91:52:b8:8e:8f:be:06:37: e5:33:bf:f4:cb:7c:6e:f6:5e:de:73:5f:d0:f6:0d: 2d:1e:b1:73:45:d9:f8:df:22:6b:39:89:2f:e2:f2: 55:3a:5b:d5:3b:d0:93:29:4a:dc:19:fe:22:d3:d2: 6e:7a:a5:3b:cc:d9:52:54:e6:21:6d:0f:f0:df:5e: ee:47:6e:8e:3f:59:37:8d:a5:01:26:79:96:1d:c5: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EC:07:25:58:62:18:72:32:E9:10:7C:0D:D0:74:8A:14:54:D4:CA X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:45:11:76:4b:39:f3:bd:d9:f0:22:9d:c0:74:b6:e8:02: 43:1e:6a:ff:06:be:5a:37:e3:3f:2c:0a:28:db:ff:5f:6f:94: 5d:08:f1:1e:a5:40:ab:70:2f:ac:78:79:46:47:88:fb:f0:db: d8:b1:e3:92:44:99:e4:41:09:c2:b5:1f:96:32:f0:b5:20:09: 4e:82:e6:67:07:54:88:b9:b3:3c:2b:27:53:5b:43:ca:fe:61: 16:a2:88:7f:11:da:c6:89:40:5a:af:ea:30:2b:65:a0:33:32: 31:5b:8d:11:d9:5a:f6:86:25:0f:94:6b:b4:c4:84:72:31:8b: 0d:b5:50:54:73:76:0c:97:62:f9:f1:b6:09:86:23:b5:5e:c1: 3c:da:51:ce:e7:c8:c2:ac:9c:39:5e:aa:fc:2a:dc:64:41:9f: 8e:32:c3:44:5f:26:3f:a0:6e:56:98:9c:1c:d8:ff:fc:5a:f3: bd:5b:b8:f3:b9:27:69:22:7c:56:44:99:18:60:e4:40:7b:6f: 89:01:67:c6:24:ad:ed:3b:5f:81:d6:31:4e:6b:49:0f:c6:7e: 87:33:ef:6f:25:4c:55:69:da:71:7a:ff:34:85:28:3d:c3:0f: 84:9d:24:65:da:b8:46:43:ba:09:23:c8:4c:5e:6b:a9:69:79: f5:1f:cd:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjQxMTIyMTYxMDQwWhcNMjQxMTI5MTYxMDQwWjAYMRYwFAYD VQQDEw02NzQwYWQwMS1kMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncM3Erjwdt86Qqj+VJXTZZDGB76O3lw7ey4fy47ZsN7zqNc2OWsaXhPKq9Uc 1mAlTXM5sN6tODlyGCvHD0FcpyszYh4bw1r3BTL5QA6i1engjEEvQaz0/pioiiyg qwkdOlfPHPDki/64X6NHlWsZSFEo++GNRZG93XsW28x+2tOBR6Hj8C0kHcPLF/Lh 30McnYGVU4+pPuVVf6wig8BlPZIP3s6PL0Y1D7ZJkVK4jo++BjflM7/0y3xu9l7e c1/Q9g0tHrFzRdn43yJrOYkv4vJVOlvVO9CTKUrcGf4i09JueqU7zNlSVOYhbQ/w 317uR26OP1k3jaUBJnmWHcXX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHsByVY YhhyMukQfA3QdIoUVNTKMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwfUURdks5873Z8CKdwHS26AJDHmr/Br5aN+M/LAoo2/9fb5RdCPEe pUCrcC+seHlGR4j78NvYseOSRJnkQQnCtR+WMvC1IAlOguZnB1SIubM8KydTW0PK /mEWooh/EdrGiUBar+owK2WgMzIxW40R2Vr2hiUPlGu0xIRyMYsNtVBUc3YMl2L5 8bYJhiO1XsE82lHO58jCrJw5Xqr8KtxkQZ+OMsNEXyY/oG5WmJwc2P/8WvO9W7jz uSdpInxWRJkYYORAe2+JAWfGJK3tO1+B1jFOa0kPxn6HM+9vJUxVadpxev80hSg9 ww+EnSRl2rhGQ7oJI8hMXmupaXn1H83g -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org