$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: hVespN8/sWn1vutqFyyAY85NjConE+l9hvUG2v8vgNI= Subject key identifier: FF:00:00:69:90:DB:F7:62:38:43:AF:44:56:06:4B:0B:9F:42:18:48 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: 30 Signing time: Thu 21 Nov 2024 05:44:07 +0000 Manifest this update: Thu 21 Nov 2024 05:44:06 +0000 Manifest next update: Thu 28 Nov 2024 05:44:06 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: vFCkdni4opW5SFkrD4FTk1X4ESoMWSJnRhjXPxD3OzA=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Nov 21 05:44:06 2024 GMT Not After : Nov 28 05:44:06 2024 GMT Subject: CN=673ec8a7-ea3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:4b:0b:da:d7:0e:da:a6:90:95:79:2e:be: 39:c2:3c:8c:91:84:35:8c:ad:9e:48:bf:35:d0:33: ee:9b:82:15:ba:c3:22:08:ca:4e:df:50:db:54:d5: ca:f5:b7:dc:75:4f:61:34:a0:03:6a:f8:91:ba:97: fb:33:be:fc:c8:f9:98:29:7b:dd:35:5e:1a:8d:3b: 6b:7d:39:63:dd:6c:a5:7c:f9:b4:71:52:87:82:49: 06:5d:c9:1d:87:07:f1:92:a2:d8:3d:56:d9:b3:85: 35:6d:76:19:30:a9:bd:ce:ba:06:0b:33:87:51:0c: 53:b1:18:d6:0c:b3:00:e2:0a:d1:5c:d8:20:07:da: 50:20:f4:61:e1:14:7c:5f:34:fc:ec:a7:0f:de:de: 26:2f:35:8d:61:0b:32:29:f7:88:35:14:4d:90:4a: 6c:35:81:5a:80:38:ec:55:b1:69:b0:d1:ed:9a:dd: 8b:d2:a1:74:fe:87:e9:0f:91:6b:58:4d:90:7a:98: f7:1b:82:c4:65:36:3e:65:03:2f:1f:8f:19:60:82: fd:d8:4a:cb:bc:25:15:6f:64:40:34:cd:31:20:ca: 03:cc:6e:77:e4:f7:69:82:12:15:0f:db:51:48:cb: 5f:0f:f4:1d:c9:50:bf:be:60:e2:02:a9:55:02:e0: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:00:69:90:DB:F7:62:38:43:AF:44:56:06:4B:0B:9F:42:18:48 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1f:02:e2:e7:10:d5:a6:92:5d:a7:6f:28:5f:ba:16:aa:12: 97:71:e3:85:79:e6:e5:9a:5b:1b:cd:cc:ce:9a:4d:8b:65:05: dc:fb:73:52:cf:f0:0d:d8:da:0c:22:7f:24:f6:d5:28:d3:95: 27:59:ff:53:08:e1:9a:21:f8:8d:dc:d3:96:ee:c5:a9:5d:ab: 88:e0:8b:6e:bc:85:c1:14:6a:24:8d:14:4a:c4:b5:9f:f6:09: 0c:98:3c:81:2b:f0:f6:e5:16:f5:a8:4e:1f:5f:aa:0b:79:35: 23:2f:9d:b4:ac:f8:2c:9e:bc:9c:8f:3b:26:04:40:a4:fe:ad: d3:58:99:d9:3a:4b:9d:04:c5:72:1b:e7:db:df:06:0a:ce:b3: 34:df:dc:74:78:ee:75:cf:76:74:03:34:5e:fa:ea:6e:24:3a: fa:a7:d6:8b:d1:44:70:23:e4:45:49:a3:48:db:74:e2:cb:57: c3:91:29:a8:2d:7c:0e:ed:4d:2d:1d:f6:1a:11:c6:ce:c2:34: fb:84:c6:3c:c2:f5:60:7f:6e:c0:d8:18:61:d5:3b:f9:63:01: da:a5:7e:f3:52:c1:19:ed:be:59:62:2a:c3:93:a4:c2:64:f0: 45:ad:72:e6:3c:9c:71:97:4e:3e:37:46:82:f1:b5:89:c6:31: 73:d9:b6:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEMxQjExMC8GA1UEBRMoQ0VFNzNBOTVENUNDRUUwNjJFN0Q1RUJBMUI1QTEyNzA1 MkUxMjUzODAeFw0yNDExMjEwNTQ0MDZaFw0yNDExMjgwNTQ0MDZaMBgxFjAUBgNV BAMTDTY3M2VjOGE3LWVhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWqUsL2tcO2qaQlXkuvjnCPIyRhDWMrZ5IvzXQM+6bghW6wyIIyk7fUNtU1cr1 t9x1T2E0oANq+JG6l/szvvzI+Zgpe901XhqNO2t9OWPdbKV8+bRxUoeCSQZdyR2H B/GSotg9VtmzhTVtdhkwqb3OugYLM4dRDFOxGNYMswDiCtFc2CAH2lAg9GHhFHxf NPzspw/e3iYvNY1hCzIp94g1FE2QSmw1gVqAOOxVsWmw0e2a3YvSoXT+h+kPkWtY TZB6mPcbgsRlNj5lAy8fjxlggv3YSsu8JRVvZEA0zTEgygPMbnfk92mCEhUP21FI y18P9B3JUL++YOICqVUC4C1vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/wAAaZDb 92I4Q69EVgZLC59CGEgwHwYDVR0jBBgwFoAUzuc6ldXM7gYufV66G1oScFLhJTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QzFCL0NGMzczNUQwNjQx QjExRUY5ODkxNTQ3RkM0RjlBRTAyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenVjNmxkWE03Z1l1ZlY2Nkcxb1NjRkxoSlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QzFCL0NGMzczNUQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL3p1YzZsZFhNN2dZ dWZWNjZHMW9TY0ZMaEpUZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYfAuLnENWmkl2nbyhfuhaqEpdx44V55uWaWxvNzM6aTYtlBdz7c1LP 8A3Y2gwifyT21SjTlSdZ/1MI4Zoh+I3c05buxaldq4jgi268hcEUaiSNFErEtZ/2 CQyYPIEr8PblFvWoTh9fqgt5NSMvnbSs+CyevJyPOyYEQKT+rdNYmdk6S50ExXIb 59vfBgrOszTf3HR47nXPdnQDNF766m4kOvqn1ovRRHAj5EVJo0jbdOLLV8ORKagt fA7tTS0d9hoRxs7CNPuExjzC9WB/bsDYGGHVO/ljAdqlfvNSwRntvlliKsOTpMJk 8EWtcuY8nHGXTj43RoLxtYnGMXPZtj8= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org