$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: H+RgwgRGB26SBS+2/8AHg8u/tuD5JZ77GNb1HDaQA/c= Subject key identifier: 66:E4:CE:86:42:C6:1E:DE:03:2B:A2:3C:D6:35:9E:86:06:6B:0C:9B Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 11 Signing time: Wed 23 Oct 2024 06:42:03 +0000 Manifest this update: Wed 23 Oct 2024 06:42:02 +0000 Manifest next update: Wed 30 Oct 2024 06:42:02 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: bdNiI1mJ56xgPq6fAPU/jLQwMQFos66fjuiBiM5Z+gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Oct 23 06:42:02 2024 GMT Not After : Oct 30 06:42:02 2024 GMT Subject: CN=67189aba-ce2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:0f:1f:db:76:b3:fd:e4:c2:42:cf:b7:46: ae:59:02:16:95:4c:08:1e:72:cc:4b:02:8c:bf:f6: 10:1a:eb:81:c1:bf:1e:c7:f6:ed:67:a1:dc:24:a1: 62:9a:ed:85:dd:dd:aa:ae:76:4e:a9:e6:94:0e:ee: 43:92:07:f0:f1:1e:3b:e7:69:2f:e8:e8:3d:cc:1e: 26:48:8a:ae:a1:18:ac:07:51:6c:7a:d4:6a:fe:05: 31:1d:96:81:82:d6:45:15:40:22:66:7a:e5:4c:b2: 82:6e:ea:48:4d:2e:a0:af:66:a6:ec:da:00:e6:c4: 53:06:64:8c:96:bf:f1:fa:6f:96:4f:5b:e8:91:76: d9:69:9a:bc:da:87:e0:7e:57:06:5d:c0:9d:af:7b: 32:a9:0c:de:e1:4d:9d:18:1e:5a:11:75:4c:c8:61: 04:74:45:37:e7:43:fb:a9:33:d2:e1:50:b2:7e:9a: d1:f2:e9:94:41:5e:b5:78:ec:cd:a5:5c:b9:87:c3: e4:90:c0:32:f6:49:db:c6:b8:10:6f:31:65:14:91: ac:4d:8f:6d:fb:f5:66:7b:b4:a0:63:3f:55:1a:74: 2d:06:a9:4f:7d:1e:01:89:b4:76:68:27:3c:0b:33: fb:d6:e0:85:76:82:8a:95:42:34:4d:7d:4f:b0:a5: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:CE:86:42:C6:1E:DE:03:2B:A2:3C:D6:35:9E:86:06:6B:0C:9B X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4e:32:63:1d:31:ba:e6:e9:9c:60:c7:53:eb:84:d5:bc:8b: 30:d8:18:fd:fc:b6:dc:00:82:2e:67:62:ca:3c:30:9c:93:7d: e9:3f:90:8c:23:ee:b5:6c:11:65:6f:bc:19:fd:54:04:6a:96: 68:13:53:97:4f:f3:87:d9:80:a4:be:fb:90:f3:89:0c:40:1a: 02:07:1d:6b:4a:49:c9:1c:5c:69:0e:d8:ab:d9:6e:8d:f8:f6: 93:c8:66:bb:e9:ce:f5:92:d7:89:75:47:b2:ff:71:41:11:b0: c2:fd:b2:85:76:ec:36:0a:85:21:5c:54:97:38:91:d0:e0:bb: 3c:a2:8d:6a:ad:2d:6b:0f:78:37:19:13:1b:54:ff:2c:93:98: 73:01:7a:80:81:ca:1d:89:13:79:54:3c:f5:e1:e0:46:b5:57: 13:97:b3:19:4c:df:6b:a9:ef:f2:4e:b2:5b:bd:7c:a8:1b:0c: e0:94:45:5e:57:8a:9a:1f:40:76:ae:56:d7:ef:0d:ea:d1:45: 6e:73:c0:4e:ed:c4:37:08:2a:e2:dd:fd:55:f8:b5:9b:1a:e9: 11:c3:f7:b8:3f:a8:9e:2a:8c:97:b6:2d:b3:51:d4:84:7d:32: f0:e1:e8:f8:2a:91:2e:5d:a0:05:aa:a8:9c:ab:3e:09:b6:ec: cb:e1:2a:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoNjQzMTk1NjUyQjIyMERDQjIyREE5MUQwN0ZENjNEQTY5 RUI4MTRENTAeFw0yNDEwMjMwNjQyMDJaFw0yNDEwMzAwNjQyMDJaMBgxFjAUBgNV BAMTDTY3MTg5YWJhLWNlMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYqg8f23az/eTCQs+3Rq5ZAhaVTAgecsxLAoy/9hAa64HBvx7H9u1nodwkoWKa 7YXd3aqudk6p5pQO7kOSB/DxHjvnaS/o6D3MHiZIiq6hGKwHUWx61Gr+BTEdloGC 1kUVQCJmeuVMsoJu6khNLqCvZqbs2gDmxFMGZIyWv/H6b5ZPW+iRdtlpmrzah+B+ VwZdwJ2vezKpDN7hTZ0YHloRdUzIYQR0RTfnQ/upM9LhULJ+mtHy6ZRBXrV47M2l XLmHw+SQwDL2SdvGuBBvMWUUkaxNj2379WZ7tKBjP1UadC0GqU99HgGJtHZoJzwL M/vW4IV2goqVQjRNfU+wpTffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZuTOhkLG Ht4DK6I81jWehgZrDJswHwYDVR0jBBgwFoAUZDGVZSsiDcsi2pHQf9Y9pp64FNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzU1NUIwNDBBNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRHVlpTc2lEY3NpMnBIUWY5WTlwcDY0Rk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNz aTJwSFFmOVk5cHA2NEZOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5OMmMdMbrm6Zxgx1PrhNW8izDYGP38ttwAgi5nYso8MJyTfek/kIwj 7rVsEWVvvBn9VARqlmgTU5dP84fZgKS++5DziQxAGgIHHWtKSckcXGkO2KvZbo34 9pPIZrvpzvWS14l1R7L/cUERsML9soV27DYKhSFcVJc4kdDguzyijWqtLWsPeDcZ ExtU/yyTmHMBeoCByh2JE3lUPPXh4Ea1VxOXsxlM32up7/JOslu9fKgbDOCURV5X ipofQHauVtfvDerRRW5zwE7txDcIKuLd/VX4tZsa6RHD97g/qJ4qjJe2LbNR1IR9 MvDh6PgqkS5doAWqqJyrPgm27MvhKp4= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org