$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: hfutr2bNFljmu50feMsm/3Xx6NXvF3xE9U0vKHKNuAY= Subject key identifier: 3D:4C:C5:B6:B4:1E:DA:47:72:87:F7:6C:6E:C1:6F:D8:84:18:03:D9 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: 21 Signing time: Wed 23 Oct 2024 06:31:54 +0000 Manifest this update: Wed 23 Oct 2024 06:31:54 +0000 Manifest next update: Wed 30 Oct 2024 06:31:54 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: w03naeQ4LHzm3N8gO2+RmkBwJi/pezDHaZPNzuI4EwU=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Oct 23 06:31:54 2024 GMT Not After : Oct 30 06:31:54 2024 GMT Subject: CN=6718985a-c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b0:bd:68:ae:6b:50:10:ed:f2:7d:2d:fd:4f: 9c:2e:07:c0:4e:5f:4c:c8:d3:fd:90:b7:11:43:a4: 01:5f:e7:ff:ce:c5:92:40:43:26:0e:30:36:cf:03: db:8f:7c:b4:20:aa:c8:f2:49:66:13:b8:7c:c9:72: e6:02:8b:3f:d5:47:78:2f:fc:22:34:d4:cb:62:4a: 27:6f:e9:86:aa:ac:e1:2c:09:41:b8:8f:53:73:c9: f7:04:d7:3e:5d:83:ce:58:03:3c:7b:ab:59:92:3f: 6e:be:b6:c5:5a:08:d2:a2:f7:b5:37:e0:0c:57:1e: a6:14:d9:16:de:22:02:43:64:e8:89:49:bf:32:64: ec:90:f4:de:5e:a0:de:5b:40:f7:2c:89:35:63:64: 2a:95:29:a2:87:3e:c2:83:d0:36:36:42:08:cc:10: 4d:9b:51:6b:a3:10:7f:0b:fd:e8:46:ba:99:d4:1f: 5e:0d:54:25:a7:38:24:75:f3:be:22:ef:c7:37:ef: 89:f2:eb:37:92:19:8c:61:bd:7e:88:0a:80:65:4a: 0f:e1:63:71:1c:0f:66:fe:52:36:df:56:a0:fe:a2: 90:8c:77:c8:d9:2d:80:b5:72:dd:c8:5f:ab:5a:70: b5:04:67:1c:e4:22:37:f9:ff:05:2d:e1:1f:37:93: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:C5:B6:B4:1E:DA:47:72:87:F7:6C:6E:C1:6F:D8:84:18:03:D9 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3f:28:ae:0e:c0:39:23:87:7b:79:ea:3a:77:08:5d:6a:22: b7:56:24:8d:33:97:cf:99:54:dc:74:91:df:b9:4d:cd:43:cb: 2d:12:45:c1:ef:c2:12:e2:56:1f:dd:0c:11:31:45:8e:8c:3c: cd:64:92:cd:8a:29:62:21:61:8b:3d:a2:68:0f:a3:ff:c6:38: 2c:6f:04:e2:44:da:d2:7c:02:a7:54:7b:7f:e1:1e:85:80:d1: db:a8:a4:32:e7:9d:cf:20:41:c9:42:df:09:cb:11:5d:0b:ba: 34:6d:6f:56:8d:86:38:bd:2a:ab:07:d6:f1:03:7a:fe:11:62: 5c:e4:bc:99:94:79:20:9e:2a:6b:ed:b8:a0:c9:bb:73:d5:23: 2c:b1:3e:58:2b:53:53:6d:d6:9a:cf:82:e6:a6:3e:30:e6:89: 4c:48:4d:1b:60:71:00:ee:9d:90:94:0a:a0:74:cd:e7:90:a2: f5:00:c3:7c:0a:e0:5e:a6:44:e9:9c:5f:f0:dd:a1:b6:3e:ae: 39:63:4a:44:dc:ac:10:23:0b:92:95:f3:c9:96:b8:15:7b:8b: 5b:c5:9d:52:fe:43:0b:11:8b:55:d9:09:82:41:07:0c:8b:dd: 3f:fe:a1:6b:57:9f:ad:21:98:93:2b:d9:2a:c8:67:76:35:bd: d6:e1:3d:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEMxQjExMC8GA1UEBRMoQ0VFNzNBOTVENUNDRUUwNjJFN0Q1RUJBMUI1QTEyNzA1 MkUxMjUzODAeFw0yNDEwMjMwNjMxNTRaFw0yNDEwMzAwNjMxNTRaMBgxFjAUBgNV BAMTDTY3MTg5ODVhLWMwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmsL1ormtQEO3yfS39T5wuB8BOX0zI0/2QtxFDpAFf5//OxZJAQyYOMDbPA9uP fLQgqsjySWYTuHzJcuYCiz/VR3gv/CI01MtiSidv6YaqrOEsCUG4j1NzyfcE1z5d g85YAzx7q1mSP26+tsVaCNKi97U34AxXHqYU2RbeIgJDZOiJSb8yZOyQ9N5eoN5b QPcsiTVjZCqVKaKHPsKD0DY2QgjMEE2bUWujEH8L/ehGupnUH14NVCWnOCR1874i 78c374ny6zeSGYxhvX6ICoBlSg/hY3EcD2b+UjbfVqD+opCMd8jZLYC1ct3IX6ta cLUEZxzkIjf5/wUt4R83k37DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPUzFtrQe 2kdyh/dsbsFv2IQYA9kwHwYDVR0jBBgwFoAUzuc6ldXM7gYufV66G1oScFLhJTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QzFCL0NGMzczNUQwNjQx QjExRUY5ODkxNTQ3RkM0RjlBRTAyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenVjNmxkWE03Z1l1ZlY2Nkcxb1NjRkxoSlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QzFCL0NGMzczNUQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL3p1YzZsZFhNN2dZ dWZWNjZHMW9TY0ZMaEpUZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAY/KK4OwDkjh3t56jp3CF1qIrdWJI0zl8+ZVNx0kd+5Tc1Dyy0SRcHv whLiVh/dDBExRY6MPM1kks2KKWIhYYs9omgPo//GOCxvBOJE2tJ8AqdUe3/hHoWA 0duopDLnnc8gQclC3wnLEV0LujRtb1aNhji9KqsH1vEDev4RYlzkvJmUeSCeKmvt uKDJu3PVIyyxPlgrU1Nt1prPguamPjDmiUxITRtgcQDunZCUCqB0zeeQovUAw3wK 4F6mROmcX/DdobY+rjljSkTcrBAjC5KV88mWuBV7i1vFnVL+QwsRi1XZCYJBBwyL 3T/+oWtXn60hmJMr2SrIZ3Y1vdbhPRM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org