$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: 9pB947NYT+nG+57bdyzy1IXyhGh2yD4YTXs4R/h7WS8= Subject key identifier: 11:82:87:6C:ED:19:8E:82:C2:D9:B5:98:4C:9C:A2:99:42:E2:97:49 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 01A8 Signing time: Thu 21 Nov 2024 01:55:17 +0000 Manifest this update: Thu 21 Nov 2024 01:55:16 +0000 Manifest next update: Thu 28 Nov 2024 01:55:16 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: vBExJPh1heB4gSq1kyFF/p2IYs0HsYCe5CImAPm2GSQ=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: F4raeokC024t1MUrlhDL6rWPjTH1bexdrjC1fmAeN5w=) 3: 2E926DC45B7C11EDAAFAB831C4F9AE02.roa (hash: +MQtCQHeCX2iY48UaFSn65H7kDION537WTHbDf8n7ek=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: mx6+6j+rPH6Qv01GJND4WqM9bVhBikNZUGqkETCElPI=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: QpvoelvPEpatl7vZX1ju+e5IS1LSZA6xD22XxjXPiwQ=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: 45bdUCPbK7oSCmPfWeHAL17vZIfbPntU2ZfyP6PApsU=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: iyrJi4PQB+8IwRqaOSyDOTSwrytZkk/phQrLWRjDbIk=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: FI2U+hrQ41k6WYBbXjuJ88xzkLiEru6gKMZeHYmB74E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Nov 21 01:55:16 2024 GMT Not After : Nov 28 01:55:16 2024 GMT Subject: CN=673e9304-c22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:34:69:45:fc:80:92:28:a6:ae:fa:9b:53: 61:57:33:68:e7:d7:81:34:84:ed:df:04:76:91:18: 5e:46:53:ae:fc:0a:74:c4:74:e3:e3:67:98:6e:40: 4b:7d:b0:0b:a3:ae:5e:0f:43:42:e9:20:de:7f:82: 7e:61:63:09:5a:ce:fb:29:8b:cd:91:45:20:c4:01: 70:e1:d2:b2:18:f1:13:cf:1d:91:aa:46:07:b5:3f: ac:0b:8d:92:6d:92:b9:d1:42:84:0e:b9:81:8a:aa: 2d:e7:69:90:f4:64:a6:0b:bd:fd:27:17:f8:5d:e0: c2:b6:0b:5d:09:aa:36:0d:db:25:db:69:b1:3d:b8: ac:79:fc:bf:27:f1:b5:e2:83:35:6e:90:3e:13:23: 5d:b3:c9:20:4a:6d:18:c3:f5:fe:84:6c:56:81:21: c0:f8:c8:82:83:0b:13:c2:dc:9b:3d:1b:c9:c4:38: bf:4d:3f:13:24:3d:7b:91:22:58:48:74:b9:bd:e6: 71:7e:4d:4b:60:fb:e1:18:63:ab:62:2b:4f:d8:a5: 5b:a2:1f:63:cf:c1:22:1a:c9:3c:ec:bb:93:1d:cb: a0:18:2e:4f:0c:3c:a3:46:3d:80:7e:77:cc:69:3c: 82:76:a8:87:b7:c3:69:c6:03:32:a3:5a:99:3e:52: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:87:6C:ED:19:8E:82:C2:D9:B5:98:4C:9C:A2:99:42:E2:97:49 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:ba:d9:27:07:09:98:15:53:b7:7e:21:93:4b:ca:da:a5: 72:34:3e:35:96:c6:f4:06:43:d1:b1:ad:51:e3:70:c9:87:b1: e4:34:90:f8:b1:5d:79:e3:5b:af:80:dd:dd:1f:e2:94:51:3a: b4:d9:1a:40:69:50:81:71:24:1f:7f:70:4c:72:41:13:16:b2: 9b:0e:5d:05:1b:c0:d9:04:5d:0a:7a:74:f7:b5:1c:08:03:a6: 91:1a:05:15:fb:05:66:69:71:dc:97:f3:c3:c1:68:dd:4b:b5: 38:3b:e2:ba:00:a7:5d:43:5a:1f:a0:6f:5c:54:36:99:5d:2a: 5a:23:4a:90:d2:ec:df:a4:38:59:15:2d:d8:55:be:11:a2:4a: 1d:7b:c4:52:9b:51:6a:6b:fc:3e:95:be:69:ae:fe:dd:5d:41: 31:94:d8:2f:c2:d0:92:6c:79:83:47:9f:61:d4:cb:11:b6:e2: a5:af:f9:9a:5a:df:20:8d:2f:b1:70:40:66:6f:45:24:2a:de: 02:80:42:cb:61:57:10:b9:f6:fd:19:32:35:15:36:93:5b:2c: 3d:9a:f2:83:fd:3a:7c:bc:49:69:0c:5f:3c:a9:44:4f:70:7b: 62:34:1e:c3:68:fd:e9:96:25:e8:43:ed:8c:a9:09:c9:2b:f2: 7c:b2:50:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQxMTIxMDE1NTE2WhcNMjQxMTI4MDE1NTE2WjAYMRYwFAYD VQQDEw02NzNlOTMwNC1jMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+A0aUX8gJIopq76m1NhVzNo59eBNITt3wR2kRheRlOu/Ap0xHTj42eYbkBL fbALo65eD0NC6SDef4J+YWMJWs77KYvNkUUgxAFw4dKyGPETzx2RqkYHtT+sC42S bZK50UKEDrmBiqot52mQ9GSmC739Jxf4XeDCtgtdCao2Ddsl22mxPbisefy/J/G1 4oM1bpA+EyNds8kgSm0Yw/X+hGxWgSHA+MiCgwsTwtybPRvJxDi/TT8TJD17kSJY SHS5veZxfk1LYPvhGGOrYitP2KVboh9jz8EiGsk87LuTHcugGC5PDDyjRj2AfnfM aTyCdqiHt8NpxgMyo1qZPlKlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGCh2zt GY6Cwtm1mEycoplC4pdJMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO4rrZJwcJmBVTt34hk0vK2qVyND41lsb0BkPRsa1R43DJh7HkNJD4 sV1541uvgN3dH+KUUTq02RpAaVCBcSQff3BMckETFrKbDl0FG8DZBF0KenT3tRwI A6aRGgUV+wVmaXHcl/PDwWjdS7U4O+K6AKddQ1ofoG9cVDaZXSpaI0qQ0uzfpDhZ FS3YVb4Rokode8RSm1Fqa/w+lb5prv7dXUExlNgvwtCSbHmDR59h1MsRtuKlr/ma Wt8gjS+xcEBmb0UkKt4CgELLYVcQufb9GTI1FTaTWyw9mvKD/Tp8vElpDF88qURP cHtiNB7DaP3pliXoQ+2MqQnJK/J8slBz -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:03 2024 by rpki-client on console-fra.rpki-client.org