$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: rBy9pGQ3a4s6WcXn+tuO3zq/E4WR7memAh7yJ4baARk= Subject key identifier: ED:B4:81:9A:4D:D5:64:3D:04:CC:8A:7C:E6:11:FE:60:CE:E1:15:1D Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0DDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 288E Signing time: Fri 22 Nov 2024 17:01:06 +0000 Manifest this update: Fri 22 Nov 2024 17:01:06 +0000 Manifest next update: Fri 29 Nov 2024 17:01:06 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: AzKFLM/ohjXfSPqgQy9eYkTYyMwMPwyVxnl76DlSUxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Nov 22 17:01:06 2024 GMT Not After : Nov 29 17:01:06 2024 GMT Subject: CN=6740b8d2-eb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:e2:80:48:20:13:7c:c1:d1:18:0b:a4:27: 18:8d:86:19:b1:f2:b6:a2:07:f7:dd:32:e2:7f:c0: 12:47:22:21:22:31:c2:4b:80:57:c5:b9:7c:ed:e3: 7e:d9:4c:39:24:40:32:e5:4b:52:50:99:14:a2:29: af:e6:bd:3e:86:f4:37:ac:19:b8:bb:24:51:29:2b: 27:ee:0e:bc:4c:23:c8:a1:24:cd:5c:f2:93:b2:a7: 66:2c:3f:e8:d6:43:16:9c:14:a4:55:25:4d:49:43: 74:cb:59:5b:1a:81:9b:0b:1c:79:6a:64:ed:40:5a: 77:5f:42:3f:0e:be:24:91:e1:7f:51:45:47:63:4f: 33:40:d4:cc:21:c8:c3:22:97:5e:c8:33:82:1d:21: 39:12:c4:be:da:2d:f1:47:72:73:68:99:5f:20:0c: d1:dc:06:6c:b8:ef:c5:08:3a:bb:b0:93:0e:45:3c: 5f:42:97:eb:d7:6a:d7:28:9e:8c:1f:3a:15:01:e2: 8b:66:ba:d8:a5:11:a4:d0:7f:9b:11:2b:bf:06:98: 48:e4:22:8b:d0:0f:04:bb:8d:5a:c8:8a:7a:c3:4b: a2:1f:df:2b:41:04:55:12:0d:ee:0f:f7:75:d4:6c: ba:3a:06:3f:59:4a:3c:7a:dc:99:ec:80:03:ab:ae: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B4:81:9A:4D:D5:64:3D:04:CC:8A:7C:E6:11:FE:60:CE:E1:15:1D X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:11:86:d5:b6:5b:0d:50:d8:a9:57:60:85:85:58:af:e1:66: 49:1d:ad:b5:39:35:d9:d6:c4:e8:85:9e:0f:4b:8c:c1:ab:77: 46:d5:32:b8:c2:55:f4:46:da:46:b7:fb:24:9c:9b:39:77:b4: 6d:8b:a3:68:d2:b1:e4:a3:50:06:9f:18:af:b3:6e:57:30:cd: db:39:1e:ed:0d:0d:c4:21:7c:a2:28:e3:5a:63:8c:17:95:4c: 7a:71:4c:f5:0b:e3:6d:a6:67:c9:53:64:87:97:10:14:d2:a4: b2:c0:bd:4e:aa:1d:93:de:8b:19:f9:fd:50:42:ac:e8:d5:de: 15:21:3a:cd:a7:28:c7:fe:11:39:f0:94:cc:60:19:e9:22:5a: ec:8f:21:e8:6b:e1:9d:17:0d:85:b5:76:0c:cb:0d:0f:12:c9: 2a:1f:fc:08:28:51:2b:31:c3:f6:7e:7e:fe:f0:33:28:88:28: 63:a9:4b:f3:73:a8:9c:38:a0:84:f8:5e:c3:09:69:a3:cf:1b: 9e:c5:6a:a4:b0:44:5a:bc:a2:be:aa:36:c5:7c:4a:3f:04:6d: 65:c6:ce:96:72:f5:7b:97:40:90:86:38:3c:84:3b:1a:8a:18: a3:d9:74:ce:20:80:dd:f4:b0:26:37:ac:36:2d:88:91:0b:28: a3:57:47:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjQxMTIyMTcwMTA2WhcNMjQxMTI5MTcwMTA2WjAYMRYwFAYD VQQDEw02NzQwYjhkMi1lYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3STigEggE3zB0RgLpCcYjYYZsfK2ogf33TLif8ASRyIhIjHCS4BXxbl87eN+ 2Uw5JEAy5UtSUJkUoimv5r0+hvQ3rBm4uyRRKSsn7g68TCPIoSTNXPKTsqdmLD/o 1kMWnBSkVSVNSUN0y1lbGoGbCxx5amTtQFp3X0I/Dr4kkeF/UUVHY08zQNTMIcjD IpdeyDOCHSE5EsS+2i3xR3JzaJlfIAzR3AZsuO/FCDq7sJMORTxfQpfr12rXKJ6M HzoVAeKLZrrYpRGk0H+bESu/BphI5CKL0A8Eu41ayIp6w0uiH98rQQRVEg3uD/d1 1Gy6OgY/WUo8etyZ7IADq65zqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO20gZpN 1WQ9BMyKfOYR/mDO4RUdMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwEYbVtlsNUNipV2CFhViv4WZJHa21OTXZ1sTohZ4PS4zBq3dG1TK4 wlX0RtpGt/sknJs5d7Rti6No0rHko1AGnxivs25XMM3bOR7tDQ3EIXyiKONaY4wX lUx6cUz1C+NtpmfJU2SHlxAU0qSywL1Oqh2T3osZ+f1QQqzo1d4VITrNpyjH/hE5 8JTMYBnpIlrsjyHoa+GdFw2FtXYMyw0PEskqH/wIKFErMcP2fn7+8DMoiChjqUvz c6icOKCE+F7DCWmjzxuexWqksERavKK+qjbFfEo/BG1lxs6WcvV7l0CQhjg8hDsa ihij2XTOIIDd9LAmN6w2LYiRCyijV0cZ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org