$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: HztXKWrZpYYlVOYDzj84PCM7XnKAtiC2J4sPIy4FYy0= Subject key identifier: 2D:D3:34:87:C4:41:0D:65:96:AC:57:D5:49:8B:A2:4F:42:97:88:71 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: 55 Signing time: Sun 15 Sep 2024 09:43:48 +0000 Manifest this update: Sun 15 Sep 2024 09:43:48 +0000 Manifest next update: Sun 22 Sep 2024 09:43:48 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: 4jyz5FbWJeFggNn9n80L0u56jSh22eFK4GqtD2H3Jg0=) 2: 758D7C140AC611EF805C3840C4F9AE02.roa (hash: mXX/S1ZAowoBmhXNAUjql/b0o4tCgx0gjB97LLmOsJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Sep 15 09:43:48 2024 GMT Not After : Sep 22 09:43:48 2024 GMT Subject: CN=66e6ac54-6f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:dd:b3:96:dc:62:0b:5e:34:7d:0d:5b:ed: 3a:46:c6:33:29:25:79:d0:0b:d1:c4:01:7a:80:0a: 87:6c:79:f7:0a:4c:46:ad:b1:23:4f:6c:7e:c5:f7: c8:a4:bc:47:05:1e:a7:ad:42:c9:a7:4b:3c:a8:63: 69:f1:66:6b:66:2d:59:e1:13:e4:d8:69:8c:6b:a6: 72:9a:02:3b:0a:59:19:64:7c:c2:8d:90:39:9f:05: 37:18:94:6d:dd:cb:86:08:a8:43:cf:83:45:97:29: 17:5e:7c:cc:96:45:fb:e0:0c:d0:93:dc:8d:42:39: 54:d1:8b:7f:38:8d:5c:78:b1:35:28:cc:30:75:f2: f6:81:c1:41:e2:d5:33:0e:0f:4b:5e:29:92:25:9f: f3:d1:f2:e1:a6:53:2a:94:e3:1d:f1:73:dd:e9:05: 95:f7:3f:23:00:93:e2:80:f0:73:47:d0:6f:9e:9d: 8f:5c:bc:34:13:22:c6:2e:cd:bf:86:f1:10:d8:58: 49:8d:da:38:d7:b5:5a:d8:1e:6c:11:01:61:24:8a: 09:1b:b1:5c:70:9d:68:c6:43:d3:3f:cb:11:fa:66: 78:1c:08:18:e1:24:ef:d5:82:74:4e:60:b9:91:89: 3a:d5:ec:df:2a:56:a2:0b:84:27:b1:1f:2d:61:96: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:34:87:C4:41:0D:65:96:AC:57:D5:49:8B:A2:4F:42:97:88:71 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:f0:6d:00:83:7a:c9:46:2f:46:87:db:34:c4:69:8e:07: d3:4d:d7:ad:46:4a:6f:6d:d0:5b:df:b1:9c:a1:3f:e6:0d:72: 98:ba:9c:36:7f:af:2b:bb:9a:76:1a:c1:e9:69:d7:fd:6b:9f: b6:62:86:8f:69:fd:c5:3b:2e:ad:93:1f:8c:a2:fa:c4:dc:64: 85:0c:48:06:42:2a:19:6b:ab:77:ee:fc:01:5e:f5:0d:90:0d: 4f:c9:4f:de:92:58:bc:60:ac:89:7e:38:43:16:b6:01:36:e1: 0b:68:8a:2e:41:68:73:96:6b:57:bd:50:94:f2:bb:77:77:a5: 88:bf:b1:25:2c:ae:8a:d3:66:fc:aa:8c:51:2d:52:52:4e:cf: ca:05:5a:81:a6:50:1a:f5:dc:91:79:31:06:73:c4:6a:3c:83: 5c:6a:da:74:49:ac:de:3e:6e:f8:5f:d8:92:63:fa:95:59:e1: a0:4e:b1:d9:75:59:03:d3:c2:58:9f:63:f1:a0:96:49:57:95: db:a3:15:e4:ca:ca:6a:60:99:ce:2f:35:a9:a2:80:8e:89:24: e6:aa:33:7d:08:26:07:c8:09:8d:ec:a4:ed:df:bd:b3:17:29: 9d:4b:1c:98:02:da:e9:0e:ed:68:be:6c:47:a9:5b:93:4d:49: 45:4a:8f:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODBDMjExMC8GA1UEBRMoQ0VFMDdDODcxNEYxOTI3ODEzOUQyMzk2MDUwNDNFQ0M2 QkRCRDMyMjAeFw0yNDA5MTUwOTQzNDhaFw0yNDA5MjIwOTQzNDhaMBgxFjAUBgNV BAMTDTY2ZTZhYzU0LTZmNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1id2zltxiC140fQ1b7TpGxjMpJXnQC9HEAXqACodsefcKTEatsSNPbH7F98ik vEcFHqetQsmnSzyoY2nxZmtmLVnhE+TYaYxrpnKaAjsKWRlkfMKNkDmfBTcYlG3d y4YIqEPPg0WXKRdefMyWRfvgDNCT3I1COVTRi384jVx4sTUozDB18vaBwUHi1TMO D0teKZIln/PR8uGmUyqU4x3xc93pBZX3PyMAk+KA8HNH0G+enY9cvDQTIsYuzb+G 8RDYWEmN2jjXtVrYHmwRAWEkigkbsVxwnWjGQ9M/yxH6ZngcCBjhJO/VgnROYLmR iTrV7N8qVqILhCexHy1hltPFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULdM0h8RB DWWWrFfVSYuiT0KXiHEwHwYDVR0jBBgwFoAUzuB8hxTxkngTnSOWBQQ+zGvb0yIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MEMyL0ZFNDhBQkY0MDZC MjExRUZCQ0UwMzQ1Q0M0RjlBRTAyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVCOGh4VHhrbmdUblNPV0JRUS16R3ZiMHlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MEMyL0ZFNDhBQkY0MDZCMjExRUZCQ0UwMzQ1Q0M0RjlBRTAyL3p1QjhoeFR4a25n VG5TT1dCUVEtekd2YjB5SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUB8G0Ag3rJRi9Gh9s0xGmOB9NN161GSm9t0FvfsZyhP+YNcpi6nDZ/ ryu7mnYawelp1/1rn7Ziho9p/cU7Lq2TH4yi+sTcZIUMSAZCKhlrq3fu/AFe9Q2Q DU/JT96SWLxgrIl+OEMWtgE24Qtoii5BaHOWa1e9UJTyu3d3pYi/sSUsrorTZvyq jFEtUlJOz8oFWoGmUBr13JF5MQZzxGo8g1xq2nRJrN4+bvhf2JJj+pVZ4aBOsdl1 WQPTwlifY/GglklXldujFeTKympgmc4vNamigI6JJOaqM30IJgfICY3spO3fvbMX KZ1LHJgC2ukO7Wi+bEepW5NNSUVKj3s= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:12 2024 by rpki-client on console-fra.rpki-client.org