$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: dq32BjlidDWT/oDmUQz9xZpCfUMWKiywD7NMivY87rM= Subject key identifier: 35:A3:1E:D0:1D:D9:AE:A0:FB:69:9F:53:26:24:56:97:15:F3:88:1D Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: AD Signing time: Sat 23 Nov 2024 04:19:15 +0000 Manifest this update: Sat 23 Nov 2024 04:19:14 +0000 Manifest next update: Sat 30 Nov 2024 04:19:14 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: oGIaH6rpgHob/6QLcAmKIm0r0RYYQeZG4DXMwkFsXzc=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 007pZaHi7dzfk1B80jPKtGC0xcoQZrmeiL6AHZuwDA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Nov 23 04:19:14 2024 GMT Not After : Nov 30 04:19:14 2024 GMT Subject: CN=674157c3-d4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:43:a6:a7:4b:a9:8b:50:e2:5f:8a:93:70: b0:99:ab:2e:97:d3:f4:d9:7b:7c:33:3c:23:e7:44: 9c:61:1d:61:e7:3a:35:a3:e0:e7:4c:da:7d:ec:f5: 35:47:e1:00:4a:d3:76:74:ab:89:fe:ac:39:22:37: 32:81:f1:79:02:ab:03:ad:70:d4:c5:94:8a:20:9d: 3d:f0:49:9f:d1:a5:62:44:56:a8:2b:03:19:f3:b4: c3:f0:a3:d6:37:4d:e9:e0:b3:78:28:33:9c:6c:45: 48:1f:cb:14:cb:c4:51:09:76:20:51:c5:f1:bf:8a: 1b:61:4d:ad:98:18:75:2b:c2:5c:2e:89:29:f1:ee: 9b:b1:e5:66:01:1f:99:55:c1:f0:e1:3f:6a:70:56: db:80:a5:fe:05:86:5f:e0:e5:9f:b7:0a:52:72:fc: 9d:28:ef:f7:6f:fe:6c:5b:fb:67:ed:78:78:6a:ad: 4e:81:8d:8a:14:55:37:09:44:51:e9:d4:75:3a:09: dd:f4:9f:f2:21:a8:2b:c6:d9:9f:ea:08:40:80:6f: 00:e9:e8:28:57:50:54:18:36:d7:43:5b:10:c1:9a: 06:4b:71:30:4b:0f:f8:a9:66:eb:35:50:5b:17:e0: 5b:d2:ec:d2:69:a8:85:67:90:ad:8a:4c:a3:49:a1: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:1E:D0:1D:D9:AE:A0:FB:69:9F:53:26:24:56:97:15:F3:88:1D X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:84:ba:90:9f:63:98:d5:c8:c0:d8:ba:ec:c8:7d:d4:31:15: 88:7f:f1:3e:db:1c:70:ee:96:7c:87:28:30:52:6d:31:00:75: 2e:51:9a:f9:93:57:6b:61:95:71:bd:8c:e2:67:8a:da:23:48: 9e:6e:87:c1:87:37:8d:2c:fb:b5:4c:e8:36:4f:54:75:f3:2a: 31:ad:1b:07:b1:df:30:82:01:9e:19:17:b3:81:be:74:68:5b: 5e:ac:7e:ac:26:55:4b:d5:5f:43:cf:8e:58:63:3b:6e:82:2f: ff:31:32:d1:a9:4a:51:0e:52:10:30:2a:70:0e:53:04:7b:59: 29:67:3b:e9:b3:81:58:6d:1d:38:4e:6f:7d:2b:0a:ad:f0:46: 23:40:e7:87:9b:32:ce:69:56:76:ae:98:83:b4:e9:ee:d2:f0: 16:35:f3:ea:fb:ce:ed:cf:82:2d:a2:57:eb:d4:34:97:56:86: 78:1c:7d:07:1f:ac:80:31:2b:3d:ee:dd:31:83:92:fc:04:92: ab:2e:e1:94:f2:f0:78:ab:20:37:d2:16:4a:c5:10:78:43:21: d3:2d:56:6b:04:b4:46:3e:b3:9f:9f:e6:6b:c6:ce:52:7a:2c: 38:8f:7b:6b:d3:e8:0c:8c:7f:0e:27:47:ce:72:a8:c5:ca:62: e2:21:99:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjQxMTIzMDQxOTE0WhcNMjQxMTMwMDQxOTE0WjAYMRYwFAYD VQQDEw02NzQxNTdjMy1kNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAJDpqdLqYtQ4l+Kk3Cwmasul9P02Xt8Mzwj50ScYR1h5zo1o+DnTNp97PU1 R+EAStN2dKuJ/qw5IjcygfF5AqsDrXDUxZSKIJ098Emf0aViRFaoKwMZ87TD8KPW N03p4LN4KDOcbEVIH8sUy8RRCXYgUcXxv4obYU2tmBh1K8JcLokp8e6bseVmAR+Z VcHw4T9qcFbbgKX+BYZf4OWftwpScvydKO/3b/5sW/tn7Xh4aq1OgY2KFFU3CURR 6dR1Ognd9J/yIagrxtmf6ghAgG8A6egoV1BUGDbXQ1sQwZoGS3EwSw/4qWbrNVBb F+Bb0uzSaaiFZ5CtikyjSaGetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWjHtAd 2a6g+2mfUyYkVpcV84gdMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDyhLqQn2OY1cjA2LrsyH3UMRWIf/E+2xxw7pZ8hygwUm0xAHUuUZr5 k1drYZVxvYziZ4raI0iebofBhzeNLPu1TOg2T1R18yoxrRsHsd8wggGeGRezgb50 aFterH6sJlVL1V9Dz45YYztugi//MTLRqUpRDlIQMCpwDlMEe1kpZzvps4FYbR04 Tm99Kwqt8EYjQOeHmzLOaVZ2rpiDtOnu0vAWNfPq+87tz4Itolfr1DSXVoZ4HH0H H6yAMSs97t0xg5L8BJKrLuGU8vB4qyA30hZKxRB4QyHTLVZrBLRGPrOfn+Zrxs5S eiw4j3tr0+gMjH8OJ0fOcqjFymLiIZn6 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org