$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: iovYhuCiaBca2Xf+VD+tPNdtW3ruHWJteuu/xXyi1xA= Subject key identifier: E1:61:AB:E2:53:9F:62:C2:94:E4:2B:52:86:03:AA:76:5B:6E:3D:0D Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 028A Signing time: Thu 21 Nov 2024 01:09:58 +0000 Manifest this update: Thu 21 Nov 2024 01:09:58 +0000 Manifest next update: Thu 28 Nov 2024 01:09:58 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: LJ0cvLpSmHXNocYiNaItVZ8Gh4Q5y1OIaDBwmb/UAO4=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=) 3: 0E0E73A8EBFB11ED8184D438C4F9AE02.roa (hash: GOPGKEBm5eskFEYXZyjw1YogofV1M4ZMcIp168cRTSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Nov 21 01:09:58 2024 GMT Not After : Nov 28 01:09:58 2024 GMT Subject: CN=673e8866-45a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:2a:39:ba:be:17:20:d1:31:da:fe:60:64: 37:ab:c7:c1:51:21:65:0e:e8:85:d7:8c:42:a5:ae: e4:ab:f0:4a:08:b2:9a:db:e5:66:4c:d5:7d:5a:2b: 54:29:e3:e8:b2:64:9a:d6:a6:c6:d3:5d:b5:da:59: 5b:99:38:ef:a1:53:2a:1d:f7:1f:5a:a9:3b:4f:6b: 7e:bf:2c:76:18:6b:bf:29:71:37:50:23:f6:8e:58: 5d:09:40:3c:d2:9c:67:29:cd:1f:ba:f8:6c:d2:f0: ba:a8:35:60:87:2a:33:98:0e:e3:68:c1:f6:ba:e8: 83:27:17:e6:2d:6a:41:46:16:93:13:00:18:dc:32: 19:f9:53:01:00:f6:0e:eb:e6:69:0d:51:72:7a:61: 77:59:fa:17:16:ad:a6:1e:a6:de:0f:6e:1a:ea:6f: 5e:6a:b0:78:98:ba:db:da:3b:23:5b:f9:0a:ac:fa: 73:14:72:b3:59:7c:ef:d7:b3:98:e8:f8:f6:77:f8: 65:de:bf:17:37:07:e0:f4:95:67:c2:7a:ff:dd:01: 15:8f:f5:4a:2b:96:3d:fe:34:25:91:6a:a2:d8:0b: d2:e4:0b:ab:02:60:ff:73:ee:d3:c2:80:14:ec:fb: f4:53:16:3d:18:64:6f:91:7f:1a:56:83:d0:02:77: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:61:AB:E2:53:9F:62:C2:94:E4:2B:52:86:03:AA:76:5B:6E:3D:0D X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ab:1b:c2:b0:8d:96:ef:90:7d:6c:71:b7:39:ac:0c:d9:07: c3:25:12:1f:03:4e:b6:76:28:d6:ee:c4:c1:42:11:9d:7f:e7: ec:8e:d2:7b:ec:86:a2:95:27:4e:f0:f1:54:06:20:3c:30:d1: a5:9b:1d:ac:d8:56:a4:c3:f1:da:05:2b:d3:8a:fa:12:94:82: 7f:9a:93:90:37:85:9d:03:21:a8:e8:86:a6:18:0c:0c:57:58: 7f:ef:17:90:fe:dc:f4:10:33:27:11:67:96:47:a4:37:34:59: d5:87:e5:65:68:c2:0e:57:62:9e:1f:af:f3:c4:1c:04:15:42: 84:35:46:c4:90:c8:97:e1:94:55:52:82:8c:c0:f5:43:ed:04: d6:5e:b2:26:bb:eb:dd:7f:11:f7:73:5f:5d:c9:62:fc:51:b3: 9e:15:6d:db:0a:c4:69:8a:41:00:f1:91:e5:e3:4c:6d:37:c9: a1:af:f5:77:da:9c:a2:54:8e:1d:86:1e:91:c8:16:9f:a2:66: 84:d5:b4:a0:f5:f7:5c:b2:79:8f:fd:3d:4c:a3:ef:41:c9:da: 09:c6:80:99:e9:6a:ca:73:48:2c:89:b6:c2:e2:83:3a:d5:29: 14:01:41:dd:3a:cd:1c:90:71:33:c0:99:72:90:17:12:58:61: d1:92:61:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjQxMTIxMDEwOTU4WhcNMjQxMTI4MDEwOTU4WjAYMRYwFAYD VQQDEw02NzNlODg2Ni00NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY8qObq+FyDRMdr+YGQ3q8fBUSFlDuiF14xCpa7kq/BKCLKa2+VmTNV9WitU KePosmSa1qbG01212llbmTjvoVMqHfcfWqk7T2t+vyx2GGu/KXE3UCP2jlhdCUA8 0pxnKc0fuvhs0vC6qDVghyozmA7jaMH2uuiDJxfmLWpBRhaTEwAY3DIZ+VMBAPYO 6+ZpDVFyemF3WfoXFq2mHqbeD24a6m9earB4mLrb2jsjW/kKrPpzFHKzWXzv17OY 6Pj2d/hl3r8XNwfg9JVnwnr/3QEVj/VKK5Y9/jQlkWqi2AvS5AurAmD/c+7TwoAU 7Pv0UxY9GGRvkX8aVoPQAnfOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFhq+JT n2LClOQrUoYDqnZbbj0NMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTqxvCsI2W75B9bHG3OawM2QfDJRIfA062dijW7sTBQhGdf+fsjtJ7 7IailSdO8PFUBiA8MNGlmx2s2Fakw/HaBSvTivoSlIJ/mpOQN4WdAyGo6IamGAwM V1h/7xeQ/tz0EDMnEWeWR6Q3NFnVh+VlaMIOV2KeH6/zxBwEFUKENUbEkMiX4ZRV UoKMwPVD7QTWXrImu+vdfxH3c19dyWL8UbOeFW3bCsRpikEA8ZHl40xtN8mhr/V3 2pyiVI4dhh6RyBafomaE1bSg9fdcsnmP/T1Mo+9BydoJxoCZ6WrKc0gsibbC4oM6 1SkUAUHdOs0ckHEzwJlykBcSWGHRkmFY -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:00 2024 by rpki-client on console-fra.rpki-client.org