$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: zXFbSz2WAPfwZsFTjDkKQSwzNQOmiEQjnOtcQwEPr8c= Subject key identifier: 3F:76:1B:B4:DA:C6:AE:3D:A1:D8:F8:1B:A9:4B:26:D7:34:ED:D1:9E Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 16 Signing time: Thu 21 Nov 2024 06:02:45 +0000 Manifest this update: Thu 21 Nov 2024 06:02:44 +0000 Manifest next update: Thu 28 Nov 2024 06:02:44 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: Elt/YaGGddjOQ+XgsWDxLAinlms2xmqwr/RZd/mDKhQ=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Nov 21 06:02:44 2024 GMT Not After : Nov 28 06:02:44 2024 GMT Subject: CN=673ecd04-d906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:e0:d4:d2:3a:fb:97:49:92:65:a1:d7:9c: 2a:fa:1a:33:1b:bf:6b:db:fa:79:de:a3:8b:4b:04: a7:a1:00:a2:a2:ff:90:10:2f:1e:59:32:05:40:38: 7a:0e:f6:15:c0:ff:e2:d9:f8:ec:ff:29:c3:fa:68: 26:a4:cb:f1:de:3a:64:0d:55:6f:dd:85:cf:20:f2: 23:57:d6:da:dd:88:ae:2a:d7:db:08:ff:1c:44:3d: ef:8d:84:24:bc:61:f6:df:f0:f1:c9:6c:0a:e4:22: 2c:0e:12:ed:65:53:80:e5:24:30:3a:9a:1a:0c:24: f7:c2:05:4d:34:e4:52:12:07:ef:6e:f6:b4:e2:4e: de:bc:4f:73:21:17:68:8a:9c:44:f6:bd:eb:21:c9: 56:38:bb:66:69:33:c2:0b:af:75:25:5e:f5:8f:7b: d8:6c:87:02:c0:ce:03:34:3c:25:74:01:b2:7d:64: 51:5a:ba:33:b3:bd:3f:a7:39:60:53:2a:71:76:3b: 91:b7:d7:65:d4:6b:fe:d8:0b:62:46:62:a5:23:94: 41:97:34:21:ad:14:ac:8e:8f:28:ff:77:e8:9d:a8: 9d:05:b7:c3:f1:ba:37:b8:aa:df:48:dd:96:00:84: f1:17:77:1c:28:ed:21:5b:fa:b8:1f:44:55:60:b1: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:1B:B4:DA:C6:AE:3D:A1:D8:F8:1B:A9:4B:26:D7:34:ED:D1:9E X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9b:82:3d:f3:ff:d9:7c:95:be:bf:12:99:1a:a0:2c:22:7c: a4:40:1e:4e:20:d5:4a:83:e8:b1:a9:ba:6c:4e:04:b4:66:ec: fc:e9:77:d7:55:a1:3e:e0:e1:11:35:75:31:4e:13:95:28:aa: 9c:da:c1:73:3e:dd:fb:96:f2:83:2c:12:49:6d:e0:49:35:0c: d9:f7:4e:36:81:ba:c2:f7:44:e3:98:3a:a5:76:b9:7c:a3:f6: ea:0d:fe:f2:b4:90:a8:b9:40:e5:e5:ba:18:32:1b:18:f8:94: 05:2d:b9:19:2b:02:10:b4:e2:10:e2:d1:83:42:14:01:3e:7e: 64:a1:1a:b4:1e:c0:b9:ca:37:42:ba:23:6d:e7:16:0a:76:49: 02:3c:56:e6:8a:9f:e8:86:32:bb:a2:e1:b1:6e:c6:45:74:3c: 43:ea:2f:0b:c3:dd:c5:d1:0e:3b:d7:58:d6:c8:90:41:7c:58: 96:11:4d:89:5b:f1:2a:77:b8:83:04:dd:ba:e0:40:b2:e2:f5: f6:ca:f4:3a:c9:ff:98:ea:31:ca:83:1b:b4:9f:be:fb:3d:40: e6:e3:7e:2f:05:b6:b3:f6:58:0b:a1:09:38:2a:51:e6:8b:3f: 98:22:28:4e:18:e9:e9:21:19:57:3e:cd:ca:c1:a3:00:9c:9a: 3c:45:ff:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FGMTExMC8GA1UEBRMoNjY5NDFEQTdFQUYzMEU5MzQ0RTAzMjFGMEI3NTRFN0FF RkZDMzUyOTAeFw0yNDExMjEwNjAyNDRaFw0yNDExMjgwNjAyNDRaMBgxFjAUBgNV BAMTDTY3M2VjZDA0LWQ5MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCwuDU0jr7l0mSZaHXnCr6GjMbv2vb+nneo4tLBKehAKKi/5AQLx5ZMgVAOHoO 9hXA/+LZ+Oz/KcP6aCaky/HeOmQNVW/dhc8g8iNX1trdiK4q19sI/xxEPe+NhCS8 Yfbf8PHJbArkIiwOEu1lU4DlJDA6mhoMJPfCBU005FISB+9u9rTiTt68T3MhF2iK nET2veshyVY4u2ZpM8ILr3UlXvWPe9hshwLAzgM0PCV0AbJ9ZFFaujOzvT+nOWBT KnF2O5G312XUa/7YC2JGYqUjlEGXNCGtFKyOjyj/d+idqJ0Ft8Pxuje4qt9I3ZYA hPEXdxwo7SFb+rgfRFVgsV9jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP3YbtNrG rj2h2PgbqUsm1zTt0Z4wHwYDVR0jBBgwFoAUZpQdp+rzDpNE4DIfC3VOeu/8NSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzAwMzEzQzMyOEFB RDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5T ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnBRZHAtcnpEcE5FNERJZkMzVk9ldV84TlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUYxLzAwMzEzQzMyOEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBO RTRESWZDM1ZPZXVfOE5Tay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHibgj3z/9l8lb6/EpkaoCwifKRAHk4g1UqD6LGpumxOBLRm7Pzpd9dV oT7g4RE1dTFOE5UoqpzawXM+3fuW8oMsEklt4Ek1DNn3TjaBusL3ROOYOqV2uXyj 9uoN/vK0kKi5QOXluhgyGxj4lAUtuRkrAhC04hDi0YNCFAE+fmShGrQewLnKN0K6 I23nFgp2SQI8VuaKn+iGMrui4bFuxkV0PEPqLwvD3cXRDjvXWNbIkEF8WJYRTYlb 8Sp3uIME3brgQLLi9fbK9DrJ/5jqMcqDG7Sfvvs9QObjfi8FtrP2WAuhCTgqUeaL P5giKE4Y6ekhGVc+zcrBowCcmjxF/3Q= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org