$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json) Hash identifier: fWGd9mGmKHsiKB7/beGQ4oaskMhS6O47ew7kY2tOmF0= Subject key identifier: 5A:F0:22:25:A8:56:B7:BE:E6:9A:20:39:DA:AC:07:4D:65:9E:8A:9E Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft Manifest number: 40 Signing time: Sun 15 Sep 2024 09:49:18 +0000 Manifest this update: Sun 15 Sep 2024 09:49:18 +0000 Manifest next update: Sun 22 Sep 2024 09:49:18 +0000 Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: 1j6TBPGXTqtF60FvTDgYhvVOWEzCMGbyrsrD88xX+Kc=) 2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: xUzOXANfh6mmG71QxkWCtyjsT3i0ndD8YHqWFZ6MWYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Validity Not Before: Sep 15 09:49:18 2024 GMT Not After : Sep 22 09:49:18 2024 GMT Subject: CN=66e6ad9e-c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:ac:d4:4e:70:52:31:f0:eb:a4:f3:86:b2: 7f:e3:a0:11:05:bb:9d:16:e7:a3:ad:ee:8a:e8:45: 42:90:23:fe:45:2e:51:48:9b:21:98:08:85:ab:94: 51:ab:34:68:c8:74:27:e2:0f:b2:09:2c:07:bd:6b: 2a:c7:1f:b4:4a:d7:d5:59:51:8d:29:ba:a7:43:60: d2:1d:27:62:2c:40:93:f3:9b:9c:15:e5:9c:87:b9: b8:9d:a9:78:f2:95:fa:c3:5e:54:06:ca:d9:49:a7: 17:95:8e:5f:8d:da:27:16:35:b1:07:a0:4d:e8:2b: 61:8b:2a:2a:02:5f:23:ac:c5:23:96:b9:03:e4:d9: 31:92:d5:cb:77:b1:91:ba:13:ff:1f:60:77:ca:11: 27:52:17:41:33:59:60:a4:4e:bd:a3:d2:81:59:c8: 3a:09:8d:23:e7:f5:f5:53:92:eb:37:3a:cb:70:97: 24:ac:8d:13:23:f1:0d:8f:36:e7:65:23:9e:28:ac: cd:87:20:51:2a:87:52:a0:11:58:ea:08:21:ce:40: ca:b2:6c:40:c9:fd:d2:6a:2d:84:7c:47:8c:6d:34: f0:45:d7:49:15:a9:e3:21:1e:28:a9:ca:be:bf:5a: 86:f7:a1:3d:63:a3:21:6a:a3:74:c7:df:96:20:2c: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F0:22:25:A8:56:B7:BE:E6:9A:20:39:DA:AC:07:4D:65:9E:8A:9E X509v3 Authority Key Identifier: keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:67:9d:7d:db:36:71:0b:9c:9a:bb:4a:90:1f:6c:ab:68:af: cd:e6:03:92:00:b9:04:be:93:f7:98:3a:32:9a:2c:aa:9c:a1: b7:55:92:1e:2d:c7:19:c2:d1:88:c2:9a:c9:58:05:5b:d2:56: 7f:e7:0a:15:03:86:85:e6:5d:03:9b:54:57:aa:df:cf:e6:70: 40:bc:44:cb:ef:b2:9f:04:b4:91:12:6f:ad:e2:80:03:f3:a9: ad:5d:50:62:36:a3:0d:bd:95:b1:8e:5c:df:9e:74:b4:d4:0a: 41:97:eb:f6:ec:bd:06:d2:7c:87:5c:a8:11:7a:f5:58:5f:50: d7:a1:48:52:8e:b7:8d:3d:e2:9e:4c:b1:88:a2:80:c3:98:28: 5a:09:a3:1e:68:47:df:59:b8:2d:ea:f0:1e:bf:43:cb:64:03: d4:ad:81:6e:d2:ba:04:dd:6c:ba:c8:2c:bb:57:b1:f7:c6:bf: c4:ab:57:25:04:82:3b:9b:8b:3e:66:77:09:23:c2:33:e1:8f: 35:fb:14:c5:65:a9:1f:db:db:7f:86:d2:51:b3:1b:fd:1e:5a: 2f:9e:6b:7b:3e:f0:1c:5e:50:84:73:e6:3f:90:1f:86:d1:c9: d9:ed:96:93:53:a4:c1:c7:1c:23:ea:e4:c5:ff:54:46:49:f2: 60:9f:db:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MkY4NjExMC8GA1UEBRMoQ0U2QkZCMDhGOTUyODYzNTI3QTkzQzEwREEzQ0E3REY5 MTEzQUNGMTAeFw0yNDA5MTUwOTQ5MThaFw0yNDA5MjIwOTQ5MThaMBgxFjAUBgNV BAMTDTY2ZTZhZDllLWMwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJlKzUTnBSMfDrpPOGsn/joBEFu50W56Ot7oroRUKQI/5FLlFImyGYCIWrlFGr NGjIdCfiD7IJLAe9ayrHH7RK19VZUY0puqdDYNIdJ2IsQJPzm5wV5ZyHubidqXjy lfrDXlQGytlJpxeVjl+N2icWNbEHoE3oK2GLKioCXyOsxSOWuQPk2TGS1ct3sZG6 E/8fYHfKESdSF0EzWWCkTr2j0oFZyDoJjSPn9fVTkus3OstwlySsjRMj8Q2PNudl I54orM2HIFEqh1KgEVjqCCHOQMqybEDJ/dJqLYR8R4xtNPBF10kVqeMhHiipyr6/ Wob3oT1joyFqo3TH35YgLBehAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWvAiJahW t77mmiA52qwHTWWeip4wHwYDVR0jBBgwFoAUzmv7CPlShjUnqTwQ2jyn35ETrPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyRjg2LzA5MDNEQjkwMTJC MTExRUY5MjExNTAzNkM0RjlBRTAyL3ptdjdDUGxTaGpVbnFUd1EyanluMzVFVHJQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem12N0NQbFNoalVucVR3UTJqeW4zNUVUclBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Rjg2LzA5MDNEQjkwMTJCMTExRUY5MjExNTAzNkM0RjlBRTAyL3ptdjdDUGxTaGpV bnFUd1EyanluMzVFVHJQRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJnnX3bNnELnJq7SpAfbKtor83mA5IAuQS+k/eYOjKaLKqcobdVkh4t xxnC0YjCmslYBVvSVn/nChUDhoXmXQObVFeq38/mcEC8RMvvsp8EtJESb63igAPz qa1dUGI2ow29lbGOXN+edLTUCkGX6/bsvQbSfIdcqBF69VhfUNehSFKOt4094p5M sYiigMOYKFoJox5oR99ZuC3q8B6/Q8tkA9StgW7SugTdbLrILLtXsffGv8SrVyUE gjubiz5mdwkjwjPhjzX7FMVlqR/b23+G0lGzG/0eWi+ea3s+8BxeUIRz5j+QH4bR ydntlpNTpMHHHCPq5MX/VEZJ8mCf2yc= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:21 2024 by rpki-client on console-ams.rpki-client.org