$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: zPQDm8DUMsQi39Uix0150NW2kehr6FB9/N7Jr2wJsHM= Subject key identifier: 87:13:7A:21:C3:97:C1:75:0B:3C:64:DF:70:B2:DB:99:FA:28:96:93 Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: 1A Signing time: Wed 23 Oct 2024 06:36:41 +0000 Manifest this update: Wed 23 Oct 2024 06:36:41 +0000 Manifest next update: Wed 30 Oct 2024 06:36:41 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: 0vl4KWOrJScI4pgR5n4gyglQIpTejUhMH3FiUHcs3yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Oct 23 06:36:41 2024 GMT Not After : Oct 30 06:36:41 2024 GMT Subject: CN=67189979-de84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:a4:41:6c:5b:d7:88:da:44:0e:bd:a8:25: 82:79:97:6e:b0:cb:b2:31:1a:9d:b1:8d:f3:84:72: ec:81:6c:57:2a:e1:c2:db:f0:7a:f4:07:2e:62:6a: 18:23:c8:e3:ab:32:c1:72:55:1b:b5:fd:9d:6a:d4: ec:ea:57:fa:79:5b:ca:11:2e:20:6f:54:79:2d:39: ca:7d:21:51:12:4f:72:ac:d8:d5:38:af:4b:4d:5d: c2:fd:05:4a:d8:e1:01:4e:90:c9:f9:66:86:7c:7e: 04:24:aa:81:81:4a:6c:67:8f:da:4c:9c:ad:ad:c4: 87:88:7b:98:4c:cd:88:60:d9:7a:ce:4c:bc:93:42: 4d:a1:64:c3:42:12:68:22:bf:61:81:6b:1c:49:e9: bc:e0:b6:c3:fd:2c:78:96:56:e3:91:f9:6e:a7:c3: 73:58:c6:cc:76:4a:67:3e:30:e4:1a:e1:b9:90:f4: 3b:3f:a9:62:14:90:a6:93:84:f6:5f:f3:28:76:81: 98:f0:19:0e:69:fb:a4:73:62:f0:38:73:a2:e8:a9: 5f:bf:71:8a:33:af:ce:89:c8:47:2c:7e:30:ba:82: aa:3e:ed:36:9c:15:c2:88:89:a3:2f:8d:6e:10:48: ec:cf:7f:0a:0c:be:fb:a5:37:06:8d:7c:86:04:6e: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:7A:21:C3:97:C1:75:0B:3C:64:DF:70:B2:DB:99:FA:28:96:93 X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:61:f9:a5:60:6b:b7:80:2b:b0:43:8e:97:ef:b1:b5:3b: b8:94:60:44:64:ef:52:ca:e0:06:e5:5d:3a:17:3f:33:8a:d0: 7d:4e:ab:4a:8b:2a:52:4d:38:61:22:7c:84:95:e6:17:86:24: 9b:5e:c5:a0:c5:9a:46:f7:d8:a2:3e:e4:9c:80:f4:c6:42:05: 54:02:ab:3f:50:0a:f1:96:bb:af:d3:dd:96:60:30:1d:77:01: 32:80:db:ac:cf:f0:12:c2:06:d4:3b:96:5d:89:e3:ca:08:e2: b4:3b:5d:33:ae:88:20:e0:c3:5c:d7:96:1a:83:85:45:aa:64: 58:55:7c:0f:0e:fd:a5:cb:91:a4:38:e9:25:cb:2a:bd:70:f0: 7e:87:a0:b3:94:a8:43:46:6e:9a:69:4b:c0:92:c5:ae:fa:83: a4:53:7b:55:33:6b:6c:03:27:56:45:fe:2c:f1:0c:da:fb:be: 14:23:79:ac:86:a5:63:80:57:b0:61:97:97:2e:d1:b3:5c:07: ed:31:23:c8:fd:23:de:4a:7a:d3:ce:1b:b9:70:aa:1a:c5:de: 3c:d5:a1:fa:e1:6e:20:6a:dc:84:dd:ac:1b:3c:5c:3f:c6:d9: 0b:a7:9e:1e:2c:f2:5e:d7:f4:bf:01:64:fa:1e:e4:21:d4:00: ed:8c:21:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTJDNDExMC8GA1UEBRMoNjZDNUIxOTA0QjM1QzQ3RDk0NTA4RUMwQTFBQ0RBODM2 OERFRjRBOTAeFw0yNDEwMjMwNjM2NDFaFw0yNDEwMzAwNjM2NDFaMBgxFjAUBgNV BAMTDTY3MTg5OTc5LWRlODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpPqRBbFvXiNpEDr2oJYJ5l26wy7IxGp2xjfOEcuyBbFcq4cLb8Hr0By5iahgj yOOrMsFyVRu1/Z1q1OzqV/p5W8oRLiBvVHktOcp9IVEST3Ks2NU4r0tNXcL9BUrY 4QFOkMn5ZoZ8fgQkqoGBSmxnj9pMnK2txIeIe5hMzYhg2XrOTLyTQk2hZMNCEmgi v2GBaxxJ6bzgtsP9LHiWVuOR+W6nw3NYxsx2Smc+MOQa4bmQ9Ds/qWIUkKaThPZf 8yh2gZjwGQ5p+6RzYvA4c6LoqV+/cYozr86JyEcsfjC6gqo+7TacFcKIiaMvjW4Q SOzPfwoMvvulNwaNfIYEbsWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhxN6IcOX wXULPGTfcLLbmfoolpMwHwYDVR0jBBgwFoAUZsWxkEs1xH2UUI7Aoazag2je9Kkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMkM0L0ZCRjE0RTcyNkMx NzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNXeGtFczF4SDJVVUk3QW9hemFnMmplOUtrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx MkM0L0ZCRjE0RTcyNkMxNzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgy VVVJN0FvYXphZzJqZTlLay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCzYfmlYGu3gCuwQ46X77G1O7iUYERk71LK4AblXToXPzOK0H1Oq0qL KlJNOGEifISV5heGJJtexaDFmkb32KI+5JyA9MZCBVQCqz9QCvGWu6/T3ZZgMB13 ATKA26zP8BLCBtQ7ll2J48oI4rQ7XTOuiCDgw1zXlhqDhUWqZFhVfA8O/aXLkaQ4 6SXLKr1w8H6HoLOUqENGbpppS8CSxa76g6RTe1Uza2wDJ1ZF/izxDNr7vhQjeayG pWOAV7Bhl5cu0bNcB+0xI8j9I95KetPOG7lwqhrF3jzVofrhbiBq3ITdrBs8XD/G 2Qunnh4s8l7X9L8BZPoe5CHUAO2MIc8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:58 2024 by rpki-client on console-ams.rpki-client.org