$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: SE5a2CzBMSpaHWjBrCjbXyQV9LOTNRaxtd2BkOQXklk= Subject key identifier: 1A:93:BC:93:95:74:63:BC:93:04:06:08:3F:B8:5C:AB:DE:12:E8:10 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 20 Signing time: Thu 21 Nov 2024 05:53:44 +0000 Manifest this update: Thu 21 Nov 2024 05:53:43 +0000 Manifest next update: Thu 28 Nov 2024 05:53:43 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: fgQeadF5tAlRdhW4iiHLw6EbelfhcmWZn/kQuK3Gu+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Nov 21 05:53:43 2024 GMT Not After : Nov 28 05:53:43 2024 GMT Subject: CN=673ecae8-68d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:ef:12:82:6b:c3:9d:39:7d:d5:70:e7:35: 43:ac:09:4b:81:32:c7:d4:73:53:aa:85:91:d8:34: 4f:5e:51:7d:16:15:c0:16:5d:33:75:c2:fa:73:d6: c0:02:72:b9:b6:92:2e:67:09:5a:9d:08:a3:36:e4: a5:58:99:22:fd:05:d7:33:b1:0c:e5:99:37:b8:69: 06:41:ac:1c:1c:61:77:69:a9:9c:03:fb:63:48:99: 11:82:0f:2a:2f:2b:7d:ff:ec:f3:8d:4c:82:e1:ef: 98:73:c0:22:b4:10:f5:98:11:aa:50:98:a4:91:b3: d7:88:dc:8d:b3:18:76:c0:12:20:69:48:31:c6:e2: 25:ce:6b:66:51:8e:b2:60:12:d5:5c:95:c9:80:65: 7f:66:76:bb:8a:a7:05:43:68:62:7d:31:b5:c4:3b: b0:4d:99:3e:62:0b:5a:ed:ad:6d:84:31:47:2a:34: f9:9a:51:75:4b:10:93:54:76:52:f0:0f:3d:70:06: c1:10:d7:29:12:b6:c1:65:de:b4:86:61:4c:4c:69: d8:de:66:14:d8:99:9e:90:4b:83:b3:43:9c:f1:b2: 20:57:d2:fd:f3:db:9b:da:da:13:1e:fe:f8:79:f0: 5b:d7:64:b3:8d:fd:b3:03:4a:af:50:9f:8d:95:8c: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:93:BC:93:95:74:63:BC:93:04:06:08:3F:B8:5C:AB:DE:12:E8:10 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f3:e3:95:45:94:22:01:d4:2d:6c:43:55:49:41:2b:8f:7d: 0d:b5:95:39:86:56:51:34:d4:91:bf:d5:e0:5a:58:17:a3:bc: f3:98:04:1e:7f:c8:05:e9:19:6c:e6:a3:f1:33:2f:bf:20:9e: 60:c5:a0:91:60:64:67:c0:c7:ec:44:00:7b:dd:15:6c:cc:e2: c0:21:b6:c2:1d:11:14:f3:a0:0c:c4:d4:8a:dd:a9:56:b3:b4: 11:2c:bf:59:3e:8b:b9:68:12:7f:85:1c:6b:87:7e:b5:aa:f3: 19:46:b8:47:08:16:53:92:18:89:87:f7:2c:05:35:0e:c6:99: 55:e3:7d:cd:8c:94:45:03:73:c6:d2:f8:c5:ef:f0:5d:69:ef: 98:10:af:d6:c1:ad:c3:bb:0e:ad:5d:06:2c:36:82:53:dd:72: b6:10:ca:72:fd:32:9c:71:99:ff:92:a5:08:3c:aa:19:4d:0c: 7f:e6:dd:82:fa:9d:a0:09:c1:e0:24:56:26:0f:53:b2:e8:c3: 04:61:14:ff:96:0b:b2:c6:99:bb:7e:f0:2a:1e:7b:68:fc:2d: f0:e1:dd:27:30:79:b6:0f:6f:97:14:af:d7:c8:9f:97:93:99: ee:5f:ed:f3:7d:88:17:5c:59:3b:6e:30:fa:d0:2f:89:2c:cc: d1:d5:49:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoNjQzMTk1NjUyQjIyMERDQjIyREE5MUQwN0ZENjNEQTY5 RUI4MTRENTAeFw0yNDExMjEwNTUzNDNaFw0yNDExMjgwNTUzNDNaMBgxFjAUBgNV BAMTDTY3M2VjYWU4LTY4ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDARe8SgmvDnTl91XDnNUOsCUuBMsfUc1OqhZHYNE9eUX0WFcAWXTN1wvpz1sAC crm2ki5nCVqdCKM25KVYmSL9BdczsQzlmTe4aQZBrBwcYXdpqZwD+2NImRGCDyov K33/7PONTILh75hzwCK0EPWYEapQmKSRs9eI3I2zGHbAEiBpSDHG4iXOa2ZRjrJg EtVclcmAZX9mdruKpwVDaGJ9MbXEO7BNmT5iC1rtrW2EMUcqNPmaUXVLEJNUdlLw Dz1wBsEQ1ykStsFl3rSGYUxMadjeZhTYmZ6QS4OzQ5zxsiBX0v3z25va2hMe/vh5 8FvXZLON/bMDSq9Qn42VjPt7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGpO8k5V0 Y7yTBAYIP7hcq94S6BAwHwYDVR0jBBgwFoAUZDGVZSsiDcsi2pHQf9Y9pp64FNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzU1NUIwNDBBNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRHVlpTc2lEY3NpMnBIUWY5WTlwcDY0Rk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNz aTJwSFFmOVk5cHA2NEZOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK/z45VFlCIB1C1sQ1VJQSuPfQ21lTmGVlE01JG/1eBaWBejvPOYBB5/ yAXpGWzmo/EzL78gnmDFoJFgZGfAx+xEAHvdFWzM4sAhtsIdERTzoAzE1IrdqVaz tBEsv1k+i7loEn+FHGuHfrWq8xlGuEcIFlOSGImH9ywFNQ7GmVXjfc2MlEUDc8bS +MXv8F1p75gQr9bBrcO7Dq1dBiw2glPdcrYQynL9Mpxxmf+SpQg8qhlNDH/m3YL6 naAJweAkViYPU7LowwRhFP+WC7LGmbt+8Coee2j8LfDh3ScwebYPb5cUr9fIn5eT me5f7fN9iBdcWTtuMPrQL4kszNHVSTQ= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org