$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: xu/iVXoUwJcFdxxLnT84FN4Vm2sTWPH3gYqnWx/XOXg= Subject key identifier: CA:2E:78:10:78:2D:DA:EE:F8:CC:61:1F:56:E2:F2:83:D2:F0:4D:9B Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: DF Signing time: Thu 21 Nov 2024 03:39:13 +0000 Manifest this update: Thu 21 Nov 2024 03:39:13 +0000 Manifest next update: Thu 28 Nov 2024 03:39:12 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: ioKPdN30ncN7JU0TW7SZntCjAL7u+9lTu5SOGUnZ9Eo=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: 2s5gkngOK59DiysB1YmvMz8Te2seOcIHGEh5IB+1ylY=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: TxxXs+lTVXPqMW17NmL2mebSUiWOxU2SvP1uJGvuz/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Nov 21 03:39:13 2024 GMT Not After : Nov 28 03:39:12 2024 GMT Subject: CN=673eab61-a379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:c1:35:be:fb:30:a0:56:7c:0c:de:4c:c7: 43:6e:52:88:3e:e4:e9:da:7d:f0:71:52:dc:f4:bf: a9:a5:ef:e7:10:79:5b:2c:86:93:7d:19:62:eb:34: 6d:3f:4e:b6:4e:24:e1:40:5e:6d:37:29:00:68:b1: 04:01:b6:4f:7e:16:fc:4b:af:31:e7:10:26:ee:a8: 13:4d:51:05:5f:0d:b7:69:79:81:0d:28:9f:6f:34: 8e:55:26:9c:53:8d:7a:15:c1:e4:62:e8:62:04:2c: 44:30:41:78:0c:71:50:2d:bb:61:1b:29:73:2a:fb: 18:13:ab:2f:6f:c4:56:b3:fe:d8:c3:38:d1:a9:ad: 9f:9c:eb:80:6b:bc:a0:44:97:cc:54:68:e6:d2:f6: e5:b5:85:cc:37:8a:32:ca:8c:1e:6d:d6:52:02:28: 3e:13:77:ba:85:3e:dd:79:37:5b:80:8c:26:05:f7: 45:06:0e:fb:e7:88:ae:ce:9c:86:99:b7:68:85:54: 10:27:73:36:d4:3d:b8:bc:53:bc:f2:cf:03:67:1e: a3:ba:c4:c0:92:a7:0f:db:6e:48:2c:fb:b1:19:78: 2d:05:29:2a:7e:fb:6c:b8:da:6e:d6:3d:74:34:6e: 48:57:f9:b7:03:57:22:36:cb:5a:d4:27:81:8e:66: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2E:78:10:78:2D:DA:EE:F8:CC:61:1F:56:E2:F2:83:D2:F0:4D:9B X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:44:ae:3b:20:99:b1:9b:41:1c:9f:7d:07:f1:c3:a8:6e:4f: 2b:6e:52:53:a9:90:f0:05:4b:64:aa:e3:52:41:14:e4:e6:0d: 3a:6e:bf:8e:9f:ae:60:94:3d:42:6f:1a:6a:b8:52:a1:69:37: f0:8a:03:16:5b:bb:de:c8:9d:a7:a5:39:fd:24:b6:5e:09:d0: 12:36:cf:a6:a6:55:bc:3f:98:72:c0:58:6e:e2:e9:7f:5e:e6: ac:83:2d:2f:78:47:98:f0:28:1c:c4:16:3f:33:8f:39:c9:aa: 83:75:5c:c9:c9:34:8b:6a:4e:a3:d9:30:34:8a:c9:64:69:c1: 79:57:ab:4d:f2:f9:c1:56:1d:f7:74:f6:46:12:bf:93:88:65: dc:a1:d8:2a:25:b6:ae:0a:26:14:d8:9a:62:d8:d9:37:30:29: c2:07:1d:57:b8:41:d0:87:a4:d3:2f:ba:e6:d2:f8:cb:f6:52: a4:0b:c5:8d:ae:57:3f:4a:28:2e:f0:12:82:86:5f:8c:0a:0f: c4:05:4c:c9:ed:26:4b:fe:6f:e3:5a:71:f9:10:00:0e:d5:97: de:42:3b:d5:6d:87:5c:97:1a:ad:e2:6e:be:d6:27:39:6b:cc: d8:65:56:50:ef:d4:c6:b1:54:ff:54:b1:26:6c:ce:de:3f:62: 1d:b1:e6:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjQxMTIxMDMzOTEzWhcNMjQxMTI4MDMzOTEyWjAYMRYwFAYD VQQDEw02NzNlYWI2MS1hMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUbBNb77MKBWfAzeTMdDblKIPuTp2n3wcVLc9L+ppe/nEHlbLIaTfRli6zRt P062TiThQF5tNykAaLEEAbZPfhb8S68x5xAm7qgTTVEFXw23aXmBDSifbzSOVSac U416FcHkYuhiBCxEMEF4DHFQLbthGylzKvsYE6svb8RWs/7YwzjRqa2fnOuAa7yg RJfMVGjm0vbltYXMN4oyyowebdZSAig+E3e6hT7deTdbgIwmBfdFBg7754iuzpyG mbdohVQQJ3M21D24vFO88s8DZx6jusTAkqcP225ILPuxGXgtBSkqfvtsuNpu1j10 NG5IV/m3A1ciNsta1CeBjmbU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoueBB4 Ldru+MxhH1bi8oPS8E2bMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPRK47IJmxm0Ecn30H8cOobk8rblJTqZDwBUtkquNSQRTk5g06br+O n65glD1CbxpquFKhaTfwigMWW7veyJ2npTn9JLZeCdASNs+mplW8P5hywFhu4ul/ Xuasgy0veEeY8CgcxBY/M485yaqDdVzJyTSLak6j2TA0islkacF5V6tN8vnBVh33 dPZGEr+TiGXcodgqJbauCiYU2Jpi2Nk3MCnCBx1XuEHQh6TTL7rm0vjL9lKkC8WN rlc/Sigu8BKChl+MCg/EBUzJ7SZL/m/jWnH5EAAO1ZfeQjvVbYdclxqt4m6+1ic5 a8zYZVZQ79TGsVT/VLEmbM7eP2IdseYR -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org