$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: +aIuhkboHUUkJTiGbqx7Rxxs26JKtIvTxhLrizbTqEM= Subject key identifier: 86:14:36:15:18:34:FC:CA:DC:DA:85:EE:BC:AB:CA:16:83:3D:10:8F Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 0501 Signing time: Fri 22 Nov 2024 23:13:32 +0000 Manifest this update: Fri 22 Nov 2024 23:13:31 +0000 Manifest next update: Fri 29 Nov 2024 23:13:31 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: ClQ4LCRUFynqF7i/yn8YEoVDwYL0REeyg0uZr/9pBZM=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: CRLW/v275CUlaeWr5oEQBrUTv3O40NRfAD7Vi/IYlCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Nov 22 23:13:31 2024 GMT Not After : Nov 29 23:13:31 2024 GMT Subject: CN=6741101b-638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:41:d2:ba:6a:72:d8:d1:d2:a2:8b:de:66: dc:57:ef:20:38:c4:b9:20:9c:c8:30:75:55:72:68: be:25:ec:3c:47:27:dd:b0:b6:01:f5:85:e8:26:52: f6:36:1e:6e:4d:41:00:0f:a3:02:1c:cc:87:cc:da: 2b:00:bf:51:21:c3:40:0d:81:1c:cf:cc:a4:2b:00: 89:72:e5:94:b3:a3:4c:d2:4a:03:bd:33:d3:18:1b: f1:8d:7d:06:a8:f3:50:d6:a4:2f:df:e1:29:68:1b: 43:45:24:23:94:11:d3:c7:18:f0:ee:ef:ee:bb:6b: f3:f0:27:48:58:18:53:ac:24:a4:a5:49:27:3d:0b: f6:62:47:d5:11:63:24:d4:ca:e8:79:90:6f:09:fd: 89:f4:6f:01:c9:0c:c8:ab:1d:21:24:af:41:97:62: 29:7a:a4:3a:d1:a3:ac:33:d3:e6:8f:c6:96:af:9a: 80:e8:d8:e4:b0:1e:e7:20:ce:da:3c:85:75:21:b2: 66:54:88:e7:ab:05:33:55:29:08:f8:2a:75:ee:02: 4b:4a:d0:0b:da:1b:42:c5:35:b2:ad:ac:15:4a:a4: 23:dd:cf:c1:24:42:96:c7:ce:ec:04:7e:16:4f:b0: 74:53:d1:b2:29:0f:10:1a:15:da:18:4b:9d:5f:15: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:36:15:18:34:FC:CA:DC:DA:85:EE:BC:AB:CA:16:83:3D:10:8F X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:52:33:e4:27:cd:f0:99:63:1e:7d:1c:9d:d1:de:7a:77: c5:8f:66:4b:5f:0d:4a:4a:e8:78:89:fa:01:04:5b:8e:5a:e1: c5:dc:56:00:28:54:32:56:be:be:e6:1a:e4:65:1c:2c:6f:d1: f5:06:ab:c0:e9:cf:ff:8d:a3:fd:80:3c:07:41:57:7e:57:c3: 1c:98:4c:ec:8c:8e:e8:55:fe:e4:7d:a1:e4:06:dd:13:4a:c5: 83:ff:d1:c4:31:d5:83:d4:ba:69:df:dc:cd:b6:e4:60:c4:b2: ac:7b:67:1e:83:0c:5d:9c:70:58:90:37:b7:b4:e4:62:d0:e0: a1:80:05:61:75:e2:d9:d4:8f:ca:76:d2:69:bc:7e:4c:1e:c0: 99:e4:3b:5a:fb:75:ca:fd:dd:b5:14:72:20:86:14:cf:27:5d: f1:1c:50:00:c7:d4:7c:9e:1f:5d:9e:6a:da:dd:2b:03:08:29: 9e:c1:5f:b6:03:a7:dc:18:92:fb:a1:c0:50:a7:44:3c:58:aa: 4f:0d:df:11:70:f2:ac:9c:d2:7b:77:3d:81:55:8b:9f:da:ba: 0f:3e:59:13:6a:47:f5:15:32:6a:e3:71:9f:b3:77:86:0c:1e: 93:bb:e0:4c:36:c0:88:82:86:88:ca:00:8b:1a:40:3c:93:23: bb:1d:3a:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjQxMTIyMjMxMzMxWhcNMjQxMTI5MjMxMzMxWjAYMRYwFAYD VQQDEw02NzQxMTAxYi02MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnlB0rpqctjR0qKL3mbcV+8gOMS5IJzIMHVVcmi+Jew8RyfdsLYB9YXoJlL2 Nh5uTUEAD6MCHMyHzNorAL9RIcNADYEcz8ykKwCJcuWUs6NM0koDvTPTGBvxjX0G qPNQ1qQv3+EpaBtDRSQjlBHTxxjw7u/uu2vz8CdIWBhTrCSkpUknPQv2YkfVEWMk 1MroeZBvCf2J9G8ByQzIqx0hJK9Bl2IpeqQ60aOsM9Pmj8aWr5qA6NjksB7nIM7a PIV1IbJmVIjnqwUzVSkI+Cp17gJLStAL2htCxTWyrawVSqQj3c/BJEKWx87sBH4W T7B0U9GyKQ8QGhXaGEudXxU+GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYUNhUY NPzK3NqF7ryryhaDPRCPMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtw1Iz5CfN8JljHn0cndHeenfFj2ZLXw1KSuh4ifoBBFuOWuHF3FYA KFQyVr6+5hrkZRwsb9H1BqvA6c//jaP9gDwHQVd+V8McmEzsjI7oVf7kfaHkBt0T SsWD/9HEMdWD1Lpp39zNtuRgxLKse2cegwxdnHBYkDe3tORi0OChgAVhdeLZ1I/K dtJpvH5MHsCZ5Dta+3XK/d21FHIghhTPJ13xHFAAx9R8nh9dnmra3SsDCCmewV+2 A6fcGJL7ocBQp0Q8WKpPDd8RcPKsnNJ7dz2BVYuf2roPPlkTakf1FTJq43Gfs3eG DB6Tu+BMNsCIgoaIygCLGkA8kyO7HTqK -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org