$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: vLQTLeCjytiZztM/jABvWXfa5Q0VgYPFIgM3I1D20ws= Subject key identifier: 44:C2:E8:28:5E:A5:40:A3:67:2B:5B:60:03:DC:96:31:1D:B8:2E:9B Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: 33 Signing time: Fri 22 Nov 2024 21:56:55 +0000 Manifest this update: Fri 22 Nov 2024 21:56:54 +0000 Manifest next update: Fri 29 Nov 2024 21:56:54 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: u1osiIGO/cS0DLZ+GFcJv9c+e7SXIfelcV0l8+uxd8I=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: g+wT6Ez1r4BofdZFTdTULjIDgwJ9CgK12xlHp/5Bj2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Nov 22 21:56:54 2024 GMT Not After : Nov 29 21:56:54 2024 GMT Subject: CN=6740fe26-2691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:2b:c5:ef:73:f8:0f:12:35:35:2a:d4:b6: ef:99:23:84:5f:99:6a:31:87:6f:ed:6c:1f:73:5c: 35:f8:c2:49:84:50:6b:da:00:c4:d0:f2:1f:74:cb: 56:60:9e:98:12:e5:a5:b3:e9:58:f3:cb:7a:c1:0f: 28:aa:eb:ae:c0:5b:3c:d5:bd:17:58:98:42:c0:09: ca:ed:61:a2:b5:aa:56:3b:29:05:03:43:d1:38:25: 09:98:1e:2e:3b:c2:29:c3:66:ff:d0:f1:0c:4e:53: 53:b4:3f:84:88:87:77:96:4e:05:f4:21:ff:7c:9f: 8c:ec:f9:8f:83:27:df:eb:cd:4c:2a:d9:6e:63:79: af:ea:f0:a3:3d:bf:19:b5:a6:29:6b:d1:7e:47:49: 0c:a6:2f:12:19:09:68:c7:7b:ba:99:b8:75:20:b1: 00:d0:34:55:f2:bc:34:cd:fc:f9:c8:26:e3:28:77: 39:3e:09:b4:10:e1:49:b4:72:7d:72:ac:91:96:6f: aa:9e:af:54:ef:a5:2c:04:d5:57:a3:f3:85:cf:65: 40:30:ac:91:17:40:b8:e0:da:79:e6:8c:ca:38:fc: 72:17:fe:d2:9c:0d:a1:a3:c7:41:ff:fc:d9:23:52: 92:89:19:51:42:f3:ff:e1:f2:6d:a2:84:3c:ec:65: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C2:E8:28:5E:A5:40:A3:67:2B:5B:60:03:DC:96:31:1D:B8:2E:9B X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e4:d2:76:ce:9f:d5:97:04:67:96:99:24:05:c3:e6:eb:4e: f0:11:7b:48:3f:54:f4:7d:df:79:71:e3:5e:24:0e:80:32:3d: 7f:e1:b4:3c:75:18:cf:50:7c:ad:2e:8c:eb:91:b9:2f:a1:c8: 27:24:c3:e8:7f:9f:25:dc:45:d6:e4:85:d2:42:3c:48:fa:a3: d6:2a:a1:91:9f:c8:44:c1:5d:a7:62:39:d2:59:cc:d0:83:66: d6:9a:2e:f9:b2:eb:6d:32:8c:60:11:20:b1:16:8b:3f:95:00: 20:32:81:71:17:08:a4:0d:42:9f:d4:0b:00:fa:44:a6:56:19: 14:42:53:e6:2b:40:ef:44:17:75:de:f5:db:ce:8c:bc:d0:fc: 43:c0:85:f3:e5:14:50:9c:dd:fc:dd:b3:c3:ff:a3:3e:81:bc: 41:7d:b9:e1:1a:9a:92:75:80:a6:e8:26:7a:bb:8f:cb:21:3e: 9f:4d:b6:ba:fc:49:f5:28:56:7a:6c:b4:fb:b0:90:28:5e:fa: f9:49:17:08:73:f1:a8:ff:70:b5:bc:22:8e:e7:85:e0:65:8e: b3:14:9e:cf:9d:f0:74:d4:15:90:c9:4d:a2:37:b8:ff:c9:13: 94:b9:e0:76:30:14:77:48:6e:55:ff:b6:4d:3b:d3:c3:96:0e: a2:b2:80:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjQzNTExMC8GA1UEBRMoNjZEOUQ4MTdGODZDODJEQjNERjNBMUM0RDk3MEYyQUE4 NUNBQUQ3RTAeFw0yNDExMjIyMTU2NTRaFw0yNDExMjkyMTU2NTRaMBgxFjAUBgNV BAMTDTY3NDBmZTI2LTI2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLXyvF73P4DxI1NSrUtu+ZI4RfmWoxh2/tbB9zXDX4wkmEUGvaAMTQ8h90y1Zg npgS5aWz6Vjzy3rBDyiq667AWzzVvRdYmELACcrtYaK1qlY7KQUDQ9E4JQmYHi47 winDZv/Q8QxOU1O0P4SIh3eWTgX0If98n4zs+Y+DJ9/rzUwq2W5jea/q8KM9vxm1 pilr0X5HSQymLxIZCWjHe7qZuHUgsQDQNFXyvDTN/PnIJuModzk+CbQQ4Um0cn1y rJGWb6qer1TvpSwE1Vej84XPZUAwrJEXQLjg2nnmjMo4/HIX/tKcDaGjx0H//Nkj UpKJGVFC8//h8m2ihDzsZf/pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURMLoKF6l QKNnK1tgA9yWMR24LpswHwYDVR0jBBgwFoAUZtnYF/hsgts986HE2XDyqoXKrX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNDM1L0Y1RTYyNzI0NUVD RTExRUY4ODU0Q0E1RUM0RjlBRTAyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnRuWUZfaHNndHM5ODZIRTJYRHlxb1hLclg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NDM1L0Y1RTYyNzI0NUVDRTExRUY4ODU0Q0E1RUM0RjlBRTAyL1p0bllGX2hzZ3Rz OTg2SEUyWER5cW9YS3JYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL7k0nbOn9WXBGeWmSQFw+brTvARe0g/VPR933lx414kDoAyPX/htDx1 GM9QfK0ujOuRuS+hyCckw+h/nyXcRdbkhdJCPEj6o9YqoZGfyETBXadiOdJZzNCD ZtaaLvmy620yjGARILEWiz+VACAygXEXCKQNQp/UCwD6RKZWGRRCU+YrQO9EF3Xe 9dvOjLzQ/EPAhfPlFFCc3fzds8P/oz6BvEF9ueEampJ1gKboJnq7j8shPp9Ntrr8 SfUoVnpstPuwkChe+vlJFwhz8aj/cLW8Io7nheBljrMUns+d8HTUFZDJTaI3uP/J E5S54HYwFHdIblX/tk0708OWDqKygG4= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org