$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: PJlbmFdrohu5Kz8C6rEAcdqBSvbdjmiy5uVqFsgJ42o= Subject key identifier: 5C:EB:B5:52:90:24:09:5A:91:B9:26:C8:43:6A:E0:BD:87:75:2C:31 Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 03CD Signing time: Sat 23 Nov 2024 00:13:51 +0000 Manifest this update: Sat 23 Nov 2024 00:13:51 +0000 Manifest next update: Sat 30 Nov 2024 00:13:51 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: DIQ0//BORuAYLW194yhg63AyHFb4XmVR3iMcVZ1DXGA=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: mPZNuKlmoik6ecfgLSUJSnNAwqX7KJZV7MydUnK5gbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Nov 23 00:13:51 2024 GMT Not After : Nov 30 00:13:51 2024 GMT Subject: CN=67411e3f-f433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:56:d8:3d:e9:54:db:85:d8:10:d9:a2:e8: 58:2f:7f:aa:90:19:34:c4:22:1c:11:f3:ae:05:81: 93:06:02:db:92:c1:3d:98:02:77:2a:dd:ab:15:09: d8:b4:cd:5d:8e:c7:f4:ec:0a:e9:43:32:4c:5f:2a: 8e:a9:a6:32:b3:15:24:1c:d9:ba:11:6d:2e:41:76: 1c:a4:e5:52:8e:e3:e0:6e:81:fa:1d:56:d5:a0:3f: a1:02:d8:b4:34:33:5e:e0:85:3a:48:45:ae:6a:e6: c4:4e:d0:f2:70:b8:99:4e:b3:12:a9:0c:b8:46:43: ce:82:b8:25:c4:d1:18:73:ab:3d:8a:41:44:d8:8f: 57:d2:1f:1c:51:8e:c4:9b:9f:e0:44:b9:42:15:ee: de:23:92:c5:12:eb:22:2c:a3:2b:5c:66:fb:dc:f6: 10:55:9f:72:d8:65:18:bc:24:18:0b:88:b8:f9:83: 44:71:ed:8b:1c:ea:f3:7c:2e:83:bd:52:8d:ed:c7: 05:0d:5d:1e:86:14:ef:05:12:94:b5:71:e6:81:57: a5:c6:2c:99:0c:c1:bb:5f:ce:f5:d4:cc:af:ec:49: db:13:14:23:35:43:c3:6c:4f:9e:78:df:12:13:7d: 7f:76:5a:39:3d:7a:3c:08:61:17:83:64:97:da:e3: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:B5:52:90:24:09:5A:91:B9:26:C8:43:6A:E0:BD:87:75:2C:31 X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a9:72:61:39:6c:45:b9:4d:71:aa:9b:66:b6:a2:87:15:2c: 28:fd:4a:19:25:a6:a0:16:1b:9e:66:81:e0:c0:14:ec:58:99: 15:ef:4b:5a:3f:8a:5d:3f:ce:42:ef:83:6f:b9:78:1c:bc:f1: 81:06:41:53:59:a4:01:09:82:8f:89:00:d6:82:67:23:18:43: a0:cb:5b:71:69:7a:89:be:32:36:07:f0:c9:33:fb:a1:e8:fd: fc:38:3d:48:dd:e8:7b:12:f5:17:03:54:80:66:ca:92:e6:2f: db:52:b0:56:4e:e0:28:8b:a5:a1:53:2c:d6:e3:9a:c8:be:8c: 23:fe:70:b2:cd:71:4f:31:73:9a:3d:04:b5:0c:9f:67:aa:8a: 07:ef:e8:11:e8:16:24:2c:6c:c1:e1:ed:a6:5a:ab:4f:8a:74: 65:31:00:bc:56:db:9c:69:61:cb:45:fa:dc:87:ae:e7:20:e0: b8:bb:ca:e1:3e:ed:24:3f:18:1f:62:ea:35:ae:56:a6:e1:e3: d5:84:ec:29:9c:06:71:90:f1:af:d5:89:20:fa:af:94:c3:00: ca:bf:a9:f9:65:02:26:9e:60:18:6e:0e:15:e6:52:18:35:cc: 0f:6d:28:4c:2f:08:a2:1d:b6:8c:ac:1e:2d:2f:85:88:96:08: b5:b8:ba:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjQxMTIzMDAxMzUxWhcNMjQxMTMwMDAxMzUxWjAYMRYwFAYD VQQDEw02NzQxMWUzZi1mNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuURW2D3pVNuF2BDZouhYL3+qkBk0xCIcEfOuBYGTBgLbksE9mAJ3Kt2rFQnY tM1djsf07ArpQzJMXyqOqaYysxUkHNm6EW0uQXYcpOVSjuPgboH6HVbVoD+hAti0 NDNe4IU6SEWuaubETtDycLiZTrMSqQy4RkPOgrglxNEYc6s9ikFE2I9X0h8cUY7E m5/gRLlCFe7eI5LFEusiLKMrXGb73PYQVZ9y2GUYvCQYC4i4+YNEce2LHOrzfC6D vVKN7ccFDV0ehhTvBRKUtXHmgVelxiyZDMG7X8711Myv7EnbExQjNUPDbE+eeN8S E31/dlo5PXo8CGEXg2SX2uORpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzrtVKQ JAlakbkmyENq4L2HdSwxMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZqXJhOWxFuU1xqptmtqKHFSwo/UoZJaagFhueZoHgwBTsWJkV70ta P4pdP85C74NvuXgcvPGBBkFTWaQBCYKPiQDWgmcjGEOgy1txaXqJvjI2B/DJM/uh 6P38OD1I3eh7EvUXA1SAZsqS5i/bUrBWTuAoi6WhUyzW45rIvowj/nCyzXFPMXOa PQS1DJ9nqooH7+gR6BYkLGzB4e2mWqtPinRlMQC8VtucaWHLRfrch67nIOC4u8rh Pu0kPxgfYuo1rlam4ePVhOwpnAZxkPGv1Ykg+q+UwwDKv6n5ZQImnmAYbg4V5lIY NcwPbShMLwiiHbaMrB4tL4WIlgi1uLq7 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org