$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: xzZhZil8/ePVhdzcbWpEyENBk4iEAtUURFL7SDTTD+c= Subject key identifier: 31:E3:05:02:B9:E1:4D:BC:49:E8:A6:6F:C4:E4:E4:22:84:CB:68:BC Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: 42 Signing time: Thu 21 Nov 2024 05:32:38 +0000 Manifest this update: Thu 21 Nov 2024 05:32:37 +0000 Manifest next update: Thu 28 Nov 2024 05:32:37 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: JzvIHSB7ybPzY+U6zBGUONci0vBI+FjA+pPNL6RJNQs=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: Nov 21 05:32:37 2024 GMT Not After : Nov 28 05:32:37 2024 GMT Subject: CN=673ec5f5-a0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:77:95:25:fb:f8:28:82:bf:9c:ad:d4:05: 58:ee:5b:6a:6a:f5:da:3e:da:44:07:d4:b3:58:74: 73:7c:01:24:91:c1:e5:27:05:05:33:a9:0e:1e:1a: 5a:a5:5e:80:9c:6d:22:a8:73:1a:b3:19:99:f1:cd: 4b:f6:66:3b:2e:7a:72:49:ce:49:e2:23:b8:40:da: 45:91:b0:8b:5b:ba:00:21:1b:8e:76:6f:c3:b7:ad: a5:2e:ca:3d:8d:a6:ef:1d:2b:7a:dd:56:34:6d:8a: 94:ad:d3:50:a9:94:c8:b3:64:4b:af:2b:da:86:44: 5c:93:99:6c:c6:d8:db:3a:bb:84:bb:e3:5a:86:a7: f8:e4:6b:dc:5b:5f:d3:2a:17:70:cf:12:5b:23:c6: e4:18:40:6e:34:8f:58:e6:8f:8c:7e:21:0a:83:7d: b2:5e:c4:e5:d7:59:0a:29:39:7b:71:9f:aa:b2:7b: 7e:0d:7e:da:80:5c:2f:5e:fe:fc:92:cb:d1:7a:df: 49:02:19:ee:66:67:5d:53:87:d4:35:15:46:29:40: 5d:cb:4e:93:66:40:08:ba:d7:63:0e:d1:3f:27:91: 2a:99:93:fc:c4:8c:52:ab:f5:57:8b:f5:09:4b:4a: 50:ae:c1:b5:23:b3:b9:97:1f:4a:fd:f5:04:d2:c4: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:05:02:B9:E1:4D:BC:49:E8:A6:6F:C4:E4:E4:22:84:CB:68:BC X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:fa:bc:31:0f:ea:a4:72:42:cf:4f:f7:f9:80:ad:f4:1d:09: 60:6c:cf:4d:9b:18:fa:29:7c:7b:5c:6e:f9:22:e7:86:b6:6b: c6:00:cc:47:3c:1b:26:09:d2:51:fd:b2:fa:b2:1d:fb:5d:97: 9e:c5:4d:88:b7:d7:ff:82:11:5b:45:c5:60:fb:68:60:65:a0: db:19:7e:b5:93:2b:a2:2d:86:01:d1:80:75:42:cc:20:4a:e9: 2f:51:8b:1f:d8:83:27:e5:55:5c:30:8f:23:df:f8:02:d4:15: dd:25:26:b8:da:1e:d4:60:e8:5a:6d:02:67:bd:be:4f:50:77: a6:a9:9d:93:b2:b7:6c:8d:b0:d4:31:9a:c6:a1:77:76:b1:be: 2f:be:52:4a:16:95:cd:9c:de:85:88:cc:26:e1:d9:97:19:57: 18:d7:b0:81:63:e2:00:cf:c4:5a:7a:77:18:af:2d:32:0d:aa: ce:9e:e8:dc:19:85:6c:da:2d:76:c2:b7:0b:74:40:23:6f:7a: 68:18:63:16:5f:87:34:4e:ec:2a:7e:3b:89:52:2f:f4:8b:64: 26:71:60:ce:cf:38:c1:52:7e:ea:8b:4e:7a:cb:b9:39:e8:82: eb:7e:26:cf:88:0f:16:a3:69:58:98:cd:6d:a8:37:72:5e:46: 52:dc:d2:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTM1NDExMC8GA1UEBRMoQ0VDOUIxQjM1OUZFNThFOTAyM0E4NENGQzI2NzRDMTYx ODI4Rjk5OTAeFw0yNDExMjEwNTMyMzdaFw0yNDExMjgwNTMyMzdaMBgxFjAUBgNV BAMTDTY3M2VjNWY1LWEwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+neVJfv4KIK/nK3UBVjuW2pq9do+2kQH1LNYdHN8ASSRweUnBQUzqQ4eGlql XoCcbSKocxqzGZnxzUv2ZjsuenJJzkniI7hA2kWRsItbugAhG452b8O3raUuyj2N pu8dK3rdVjRtipSt01CplMizZEuvK9qGRFyTmWzG2Ns6u4S741qGp/jka9xbX9Mq F3DPElsjxuQYQG40j1jmj4x+IQqDfbJexOXXWQopOXtxn6qye34NftqAXC9e/vyS y9F630kCGe5mZ11Th9Q1FUYpQF3LTpNmQAi612MO0T8nkSqZk/zEjFKr9VeL9QlL SlCuwbUjs7mXH0r99QTSxLg7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMeMFArnh TbxJ6KZvxOTkIoTLaLwwHwYDVR0jBBgwFoAUzsmxs1n+WOkCOoTPwmdMFhgo+Zkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMzU0LzhENEVDRjg0NEQ4 NzExRUZCOTFDQjgzNUM0RjlBRTAyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenNteHMxbi1XT2tDT29UUHdtZE1GaGdvLVprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MzU0LzhENEVDRjg0NEQ4NzExRUZCOTFDQjgzNUM0RjlBRTAyL3pzbXhzMW4tV09r Q09vVFB3bWRNRmhnby1aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAID6vDEP6qRyQs9P9/mArfQdCWBsz02bGPopfHtcbvki54a2a8YAzEc8 GyYJ0lH9svqyHftdl57FTYi31/+CEVtFxWD7aGBloNsZfrWTK6IthgHRgHVCzCBK 6S9Rix/YgyflVVwwjyPf+ALUFd0lJrjaHtRg6FptAme9vk9Qd6apnZOyt2yNsNQx msahd3axvi++UkoWlc2c3oWIzCbh2ZcZVxjXsIFj4gDPxFp6dxivLTINqs6e6NwZ hWzaLXbCtwt0QCNvemgYYxZfhzRO7Cp+O4lSL/SLZCZxYM7POMFSfuqLTnrLuTno gut+Js+IDxajaViYzW2oN3JeRlLc0o4= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org