$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: n46Ow4/Mzb9PrZhzeeK1CPIr/cK/wmggIeHKJM+JZLc= Subject key identifier: 45:16:2F:0C:FC:8C:F8:96:66:BD:B7:37:05:34:D4:D5:36:0B:29:D3 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 3D Signing time: Sat 23 Nov 2024 05:26:14 +0000 Manifest this update: Sat 23 Nov 2024 05:26:14 +0000 Manifest next update: Sat 30 Nov 2024 05:26:14 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: WjQspYbrB3hteNG7jXOqAdnh20sTChEFkvRG1vBvKKM=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Nov 23 05:26:14 2024 GMT Not After : Nov 30 05:26:14 2024 GMT Subject: CN=67416776-42d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:32:88:97:35:b7:e4:4b:5c:f2:c6:80:cf: 21:56:31:66:b1:c4:03:58:00:8c:a7:b4:17:b4:7b: 7e:ca:f3:b9:2f:da:9e:27:a5:81:65:98:13:4f:04: 7b:10:dd:3b:bc:0e:7c:82:ed:fe:af:5a:7c:a2:0c: 92:f6:f2:34:78:7f:e0:80:68:3e:af:a4:55:a8:13: a6:bc:9e:11:1f:51:7b:91:65:a3:aa:74:3f:c7:e7: a5:59:8d:b9:61:d9:00:ed:2f:45:be:7a:90:a6:cf: 99:f5:11:ae:2e:9f:06:34:68:18:69:80:33:cb:86: 90:6c:02:9e:23:ec:3f:43:01:d9:c7:b5:0f:a6:98: 46:cf:f1:7a:af:fc:0f:a7:e1:c7:4a:3a:75:bc:bc: 17:79:66:65:e8:97:ec:e3:0f:a0:24:d1:75:fc:49: cc:d0:23:a7:99:1d:cf:a6:7c:be:41:8a:c3:36:8f: 4a:26:65:f4:b0:a9:76:78:31:ac:f5:c8:b7:de:f5: 34:c4:cf:e7:34:06:bf:07:1b:dc:0d:02:68:19:16: cb:77:4b:76:0c:23:ee:c7:b0:2c:02:5e:95:25:21: cc:52:63:c6:72:04:6c:3e:df:7a:8a:42:73:f5:92: a7:1f:d0:6a:34:61:37:ae:3c:86:4d:5f:85:fc:f1: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:16:2F:0C:FC:8C:F8:96:66:BD:B7:37:05:34:D4:D5:36:0B:29:D3 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:21:6d:d4:e5:68:d4:6b:01:fc:4f:3c:21:75:1c:49:c3:a1: fa:cc:8a:45:ae:09:78:21:f6:f5:f3:78:e2:1c:4c:d8:fc:35: cc:00:81:76:4b:b6:2a:d9:f7:d5:52:98:5b:f1:d1:82:91:81: cb:6e:c7:58:7f:be:57:6a:06:1d:a3:f5:79:68:47:7e:88:3e: 31:68:e9:cb:82:b5:a5:22:fe:2d:10:a2:9b:b1:9e:de:78:27: 88:6f:db:68:c7:84:26:83:56:3a:f2:5b:bc:b3:d1:01:72:73: e9:43:1e:12:e2:de:9a:63:ef:cd:ac:54:37:0f:65:bf:f5:73: 7d:5f:dd:aa:af:4b:fe:ab:cb:d8:5f:23:13:8b:9c:93:a3:59: b7:fe:a5:64:73:9d:81:08:5c:0b:6c:28:d5:4f:cf:0a:2e:41: fb:69:c5:8e:0c:11:2c:b0:26:70:c0:cd:e5:0f:57:05:54:0d: 8e:bc:0e:58:3f:13:56:a1:1e:51:19:67:33:43:e8:68:96:21: c9:ae:bf:2e:a7:42:f0:cc:fa:27:18:74:4a:f0:0d:7f:3f:6e: 93:51:50:11:4f:5d:d1:85:5d:90:65:bf:2f:97:01:64:ca:07: 21:e8:eb:0f:5e:79:3e:73:84:3b:c4:c9:b3:e2:82:8c:a0:37: 34:74:4b:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDZENDExMC8GA1UEBRMoNjUyOEE2MTQ1OTU5OUMwNjAxOTdFQjU5QTlGQzc4RTY2 NTg0OTc1NTAeFw0yNDExMjMwNTI2MTRaFw0yNDExMzAwNTI2MTRaMBgxFjAUBgNV BAMTDTY3NDE2Nzc2LTQyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFIzKIlzW35Etc8saAzyFWMWaxxANYAIyntBe0e37K87kv2p4npYFlmBNPBHsQ 3Tu8DnyC7f6vWnyiDJL28jR4f+CAaD6vpFWoE6a8nhEfUXuRZaOqdD/H56VZjblh 2QDtL0W+epCmz5n1Ea4unwY0aBhpgDPLhpBsAp4j7D9DAdnHtQ+mmEbP8Xqv/A+n 4cdKOnW8vBd5ZmXol+zjD6Ak0XX8SczQI6eZHc+mfL5BisM2j0omZfSwqXZ4Maz1 yLfe9TTEz+c0Br8HG9wNAmgZFst3S3YMI+7HsCwCXpUlIcxSY8ZyBGw+33qKQnP1 kqcf0Go0YTeuPIZNX4X88RmRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURRYvDPyM +JZmvbc3BTTU1TYLKdMwHwYDVR0jBBgwFoAUZSimFFlZnAYBl+tZqfx45mWEl1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENkQ0L0IzNDFFMDMwNTM4 RDExRUY4MjQwMEIxQ0M0RjlBRTAyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlNpbUZGbFpuQVlCbC10WnFmeDQ1bVdFbDFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE NkQ0L0IzNDFFMDMwNTM4RDExRUY4MjQwMEIxQ0M0RjlBRTAyL1pTaW1GRmxabkFZ QmwtdFpxZng0NW1XRWwxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI0hbdTlaNRrAfxPPCF1HEnDofrMikWuCXgh9vXzeOIcTNj8NcwAgXZL tirZ99VSmFvx0YKRgctux1h/vldqBh2j9XloR36IPjFo6cuCtaUi/i0Qopuxnt54 J4hv22jHhCaDVjryW7yz0QFyc+lDHhLi3ppj782sVDcPZb/1c31f3aqvS/6ry9hf IxOLnJOjWbf+pWRznYEIXAtsKNVPzwouQftpxY4MESywJnDAzeUPVwVUDY68Dlg/ E1ahHlEZZzND6GiWIcmuvy6nQvDM+icYdErwDX8/bpNRUBFPXdGFXZBlvy+XAWTK ByHo6w9eeT5zhDvEybPigoygNzR0S74= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org