$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json) Hash identifier: TJYQZ4twRzD+3ZokGBegQOh7SEDUcuzfYHJSO3JyJBQ= Subject key identifier: 35:7C:79:51:D5:67:5D:A4:3B:49:E9:F2:46:7B:B5:02:4D:C0:86:A9 Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft Manifest number: 0422 Signing time: Wed 20 Nov 2024 23:53:47 +0000 Manifest this update: Wed 20 Nov 2024 23:53:46 +0000 Manifest next update: Wed 27 Nov 2024 23:53:46 +0000 Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: bjQqJWzQCndiAQYoLcf4/fS+I810CY16dj3h/KGoexs=) 2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Validity Not Before: Nov 20 23:53:46 2024 GMT Not After : Nov 27 23:53:46 2024 GMT Subject: CN=673e768a-0d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:df:ce:54:58:37:15:e0:55:d0:a8:3e:83: c7:35:eb:58:06:d9:a8:0d:d0:1f:9a:1b:f0:47:fc: bd:51:c6:f5:03:20:05:27:8a:e3:14:cf:7f:46:63: fd:25:d2:8a:bc:52:a7:54:8d:94:9e:bd:13:a3:d4: e2:5f:ce:fe:e7:47:b1:22:0b:66:0b:ad:48:a9:b1: b6:b1:79:3c:68:92:6e:48:24:db:e4:d5:64:3e:c1: 3d:fe:c7:ea:62:e6:26:3f:c2:36:48:44:16:91:ec: 1d:a6:bd:94:92:55:bb:c3:e1:d3:19:d0:b3:73:23: d3:ad:50:25:51:35:b7:ce:ef:e8:dd:9a:57:2a:57: 43:02:00:35:44:28:23:db:d8:86:06:45:e5:d6:2f: 48:f7:91:93:c3:cc:85:b8:f8:d6:ab:b8:12:56:02: 21:0b:cc:df:cc:c6:e9:7c:a9:74:e9:09:4f:fc:0c: 15:0f:a0:65:ed:12:ae:73:c7:f9:3a:6f:29:15:23: e8:d1:54:6f:1d:0d:05:1a:88:98:09:e7:24:b1:80: eb:94:c6:1b:76:3e:2a:f1:6e:3a:05:43:88:a9:34: 57:7b:c9:0f:cd:4a:11:c6:0e:1d:12:b2:81:17:9d: 5c:c8:8d:fd:53:e2:6e:17:47:61:98:14:d8:e4:5e: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7C:79:51:D5:67:5D:A4:3B:49:E9:F2:46:7B:B5:02:4D:C0:86:A9 X509v3 Authority Key Identifier: keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:f4:18:0e:85:dd:eb:e4:95:05:b3:70:af:d1:15:d0:83: ab:51:70:79:8b:c4:a5:3c:73:d3:56:ed:98:00:a4:e2:e0:e2: 4d:ac:66:67:7c:0d:59:8f:1e:fa:13:32:bf:e3:21:8d:73:81: f9:33:82:f3:53:e8:68:10:24:8b:cd:ee:5f:37:c5:b9:1e:ae: 08:e1:26:6a:9f:0f:98:2b:6b:2e:81:8b:c5:ac:4e:7c:8f:60: ce:1b:e3:f1:c5:d0:ee:76:77:24:3d:4a:a7:f7:8c:0b:d6:85: 09:11:bf:1f:b3:7c:25:44:02:83:d7:f9:06:80:16:0d:af:47: f0:3a:f5:56:18:cf:4e:1c:4b:df:60:dc:a1:2c:b1:85:1c:c4: 3d:f7:8b:8b:26:7b:be:90:aa:e7:e8:07:38:cc:2c:19:b2:8b: ce:dd:c0:12:71:ed:49:d9:4c:41:fe:06:6c:a7:02:07:55:de: c7:94:0f:5e:e1:42:c6:90:68:42:25:b6:ad:10:fa:34:8f:7a: 1b:6b:bb:b2:b8:d4:f7:b2:77:8d:40:39:6c:fb:94:c1:6d:02: 2c:e1:98:0e:b4:91:22:ee:b3:69:b8:4e:92:73:bc:a8:01:72: 85:5b:58:1b:7e:b5:7d:04:7a:39:a3:7f:71:5e:e5:2d:fb:45: 06:59:87:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF Qjk4RTFCNUQwHhcNMjQxMTIwMjM1MzQ2WhcNMjQxMTI3MjM1MzQ2WjAYMRYwFAYD VQQDEw02NzNlNzY4YS0wZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoHfzlRYNxXgVdCoPoPHNetYBtmoDdAfmhvwR/y9Ucb1AyAFJ4rjFM9/RmP9 JdKKvFKnVI2Unr0To9TiX87+50exIgtmC61IqbG2sXk8aJJuSCTb5NVkPsE9/sfq YuYmP8I2SEQWkewdpr2UklW7w+HTGdCzcyPTrVAlUTW3zu/o3ZpXKldDAgA1RCgj 29iGBkXl1i9I95GTw8yFuPjWq7gSVgIhC8zfzMbpfKl06QlP/AwVD6Bl7RKuc8f5 Om8pFSPo0VRvHQ0FGoiYCecksYDrlMYbdj4q8W46BUOIqTRXe8kPzUoRxg4dErKB F51cyI39U+JuF0dhmBTY5F5zDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV8eVHV Z12kO0np8kZ7tQJNwIapMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2 Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdsvQYDoXd6+SVBbNwr9EV0IOrUXB5i8SlPHPTVu2YAKTi4OJNrGZn fA1Zjx76EzK/4yGNc4H5M4LzU+hoECSLze5fN8W5Hq4I4SZqnw+YK2sugYvFrE58 j2DOG+PxxdDudnckPUqn94wL1oUJEb8fs3wlRAKD1/kGgBYNr0fwOvVWGM9OHEvf YNyhLLGFHMQ994uLJnu+kKrn6Ac4zCwZsovO3cASce1J2UxB/gZspwIHVd7HlA9e 4ULGkGhCJbatEPo0j3oba7uyuNT3sneNQDls+5TBbQIs4ZgOtJEi7rNpuE6Sc7yo AXKFW1gbfrV9BHo5o39xXuUt+0UGWYfp -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org