$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: za4tBNiMUJsyQwWwfFFZ3o1i7auun0zYLcRETA/FBMw= Subject key identifier: 8E:1C:13:8C:FC:48:7E:0F:78:03:E4:C9:5D:E1:B4:0F:5E:66:46:5A Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: 24 Signing time: Sat 23 Nov 2024 05:44:33 +0000 Manifest this update: Sat 23 Nov 2024 05:44:32 +0000 Manifest next update: Sat 30 Nov 2024 05:44:32 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: 8Ucregx0HJHAtWxhZm/VS7CuxJIYhyaKdlvgwmIMXI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: Nov 23 05:44:32 2024 GMT Not After : Nov 30 05:44:32 2024 GMT Subject: CN=67416bc0-26b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:30:da:de:4a:9c:20:55:97:d0:72:49:3a: 85:2d:54:a0:64:61:76:c1:3d:b2:8c:4e:52:3b:61: b9:e3:96:f9:60:d5:41:b7:3f:6d:37:31:61:8d:d9: b8:b6:d2:eb:21:27:f2:3a:32:db:59:dd:d3:8c:7c: 14:57:1f:a7:e7:61:9e:31:a3:5f:3a:bb:45:a6:c8: 38:ba:40:f9:f3:9c:8c:7c:6d:f8:23:a2:b1:15:73: e8:c8:7e:88:94:79:73:89:fd:55:f2:c8:ab:7c:37: 5e:dd:9f:73:cf:a6:45:20:6c:70:ea:59:fd:c4:17: 98:d6:27:ce:ca:9f:77:00:fb:e0:fd:c5:d7:3c:43: 36:ad:0b:fc:cc:ee:e3:de:ff:2c:75:38:cf:e5:b8: 8b:3f:7d:40:74:57:a8:53:10:00:3e:fa:68:75:26: 54:2d:aa:f1:58:e3:b5:f5:cb:c1:d5:9c:7f:9f:92: 6d:65:f1:20:ea:c3:5a:83:39:3a:be:2f:7d:ba:e9: a0:6f:93:c3:ba:1a:f8:47:cc:82:b7:02:57:d0:1f: 21:8b:d3:70:b4:f8:95:a2:ee:93:64:46:b9:1c:73: 89:51:01:00:50:e8:2c:9a:89:11:87:2c:4d:41:c0: c9:39:42:79:60:bb:c4:07:68:27:f3:20:67:cf:2f: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:13:8C:FC:48:7E:0F:78:03:E4:C9:5D:E1:B4:0F:5E:66:46:5A X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ac:37:1a:17:c0:97:77:1c:7f:ae:f3:6c:29:28:f8:7a:0f: 3a:b3:17:6c:50:96:ea:13:fb:65:5b:6b:06:3b:53:f4:d7:9d: 24:76:9b:9f:5b:a1:b3:08:ea:6b:5a:8a:37:a7:cf:0a:1c:3c: f8:b4:8c:91:5a:76:07:49:16:70:64:33:f6:bc:3b:4a:8b:bb: a7:31:88:c8:4d:9d:02:df:79:09:c7:46:23:45:b4:63:27:77: 60:5c:48:4d:e7:22:c7:f4:b5:f6:db:23:02:91:5b:f0:45:be: 69:e6:0a:ad:4d:dd:6b:dc:69:ab:e1:b9:47:91:c9:34:be:42: 77:ad:5f:47:74:40:bb:ed:f7:db:a8:40:81:f0:83:1f:8a:16: 8b:9a:3e:37:30:c8:84:d3:9b:8c:d1:b2:4b:6f:9d:c4:c8:ba: 25:ce:dd:1c:13:2b:95:6f:1e:0b:38:9e:4e:99:c9:8f:23:30: f3:6a:8a:c1:32:6e:d3:8f:61:60:23:c3:75:bd:bc:9d:9c:fa: 58:bc:4e:57:0d:80:0e:0a:d0:1c:59:92:c8:71:ba:c2:33:3d: fe:91:34:15:65:37:72:1b:f9:2f:fa:02:0d:e4:5f:ba:e9:fe: 5b:69:91:81:a9:92:45:b1:11:2e:2d:10:be:a5:d3:46:a8:77: 46:5b:32:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDNGMDExMC8GA1UEBRMoQkQ5MjYyNkI0MDBCQjE0REU0MUE1MDUzOUQ5NjBGQzVE RDYxREMzNzAeFw0yNDExMjMwNTQ0MzJaFw0yNDExMzAwNTQ0MzJaMBgxFjAUBgNV BAMTDTY3NDE2YmMwLTI2YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdPzDa3kqcIFWX0HJJOoUtVKBkYXbBPbKMTlI7Ybnjlvlg1UG3P203MWGN2bi2 0ushJ/I6MttZ3dOMfBRXH6fnYZ4xo186u0WmyDi6QPnznIx8bfgjorEVc+jIfoiU eXOJ/VXyyKt8N17dn3PPpkUgbHDqWf3EF5jWJ87Kn3cA++D9xdc8QzatC/zM7uPe /yx1OM/luIs/fUB0V6hTEAA++mh1JlQtqvFY47X1y8HVnH+fkm1l8SDqw1qDOTq+ L3266aBvk8O6GvhHzIK3AlfQHyGL03C0+JWi7pNkRrkcc4lRAQBQ6CyaiRGHLE1B wMk5Qnlgu8QHaCfzIGfPL9RXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjhwTjPxI fg94A+TJXeG0D15mRlowHwYDVR0jBBgwFoAUvZJia0ALsU3kGlBTnZYPxd1h3Dcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0M0YwL0NBNkI5NENDNzRG ODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlpKaWEwQUxzVTNrR2xCVG5aWVB4ZDFoM0RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 M0YwL0NBNkI5NENDNzRGODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uz a0dsQlRuWllQeGQxaDNEYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFesNxoXwJd3HH+u82wpKPh6DzqzF2xQluoT+2VbawY7U/TXnSR2m59b obMI6mtaijenzwocPPi0jJFadgdJFnBkM/a8O0qLu6cxiMhNnQLfeQnHRiNFtGMn d2BcSE3nIsf0tfbbIwKRW/BFvmnmCq1N3WvcaavhuUeRyTS+QnetX0d0QLvt99uo QIHwgx+KFouaPjcwyITTm4zRsktvncTIuiXO3RwTK5VvHgs4nk6ZyY8jMPNqisEy btOPYWAjw3W9vJ2c+li8TlcNgA4K0BxZkshxusIzPf6RNBVlN3Ib+S/6Ag3kX7rp /ltpkYGpkkWxES4tEL6l00aod0ZbMh8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org