$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: 51AYdU2KhDvnqQwpZSqR685h345QXu9u9B6MSv2QJs8= Subject key identifier: 63:84:5E:37:49:B1:11:2A:67:2E:8E:12:33:C8:86:5B:99:D8:4A:98 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 07 Signing time: Wed 23 Oct 2024 06:51:01 +0000 Manifest this update: Wed 23 Oct 2024 06:51:00 +0000 Manifest next update: Wed 30 Oct 2024 06:51:00 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: GYPJtVrSNr+P9KuBcW2lujMlclS5VMt9WJ719tyv3mU=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Oct 23 06:51:00 2024 GMT Not After : Oct 30 06:51:00 2024 GMT Subject: CN=67189cd5-510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:58:23:02:6c:49:97:e9:73:d0:ef:f7:4e: 88:0f:0d:b1:92:5a:22:2a:f6:4f:a2:96:be:04:e7: 1a:0d:01:2f:da:41:85:6a:f1:be:9a:c1:12:a4:87: 01:7c:45:6c:6d:53:58:07:f3:7f:87:ef:b5:1c:22: 7b:c1:46:4c:e3:f8:9a:af:e7:c8:d3:80:33:a7:65: d4:c3:67:e9:79:b6:b5:96:2d:f0:9d:6d:1a:5d:f3: a5:a6:ec:57:25:75:0b:da:96:3d:5b:ea:f8:82:3f: b5:d9:51:f7:8f:b0:18:dc:1c:8f:22:4b:5e:29:64: 48:93:fd:51:33:49:a3:83:ca:a9:f9:21:92:e5:b0: 72:2d:e2:67:b8:bc:a6:3c:55:ca:bf:43:cf:80:d7: 01:bc:38:70:a2:28:16:22:ca:38:b5:e0:c9:58:81: 8f:68:2f:89:16:c6:a0:8f:41:0e:ef:b6:3c:18:ed: 2c:88:bd:78:a8:5b:05:8c:06:c3:a9:a8:62:b4:ac: 59:47:4f:f5:0d:f8:a4:7c:49:bb:85:84:4b:c1:81: 53:63:dd:c0:6d:3a:92:47:6e:4e:53:c2:63:ae:fe: 19:e4:f3:a2:7e:ba:80:6e:b4:e9:d0:b4:21:f9:46: b9:0b:f9:81:58:ed:e3:40:f0:a5:ba:b8:d9:10:5f: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:5E:37:49:B1:11:2A:67:2E:8E:12:33:C8:86:5B:99:D8:4A:98 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ac:94:6f:c8:9a:b4:6e:e4:38:bd:b9:63:46:b4:cc:9d:54: a7:b4:69:8e:d9:d1:84:fb:35:b4:2e:ce:4c:53:af:6b:22:e2: fc:3c:c9:ea:cb:03:44:f1:4a:5c:64:df:35:f5:17:c2:14:db: ee:39:69:bc:a5:2f:75:d2:d8:3c:fe:26:1e:e3:ae:e9:64:75: af:a7:4e:46:9c:91:9b:a7:c4:63:04:be:a7:4d:74:e7:24:d9: 11:e7:53:35:7c:d4:bd:8b:37:b9:ae:82:37:b0:ee:ee:3d:eb: 7f:86:1b:ed:c9:88:5b:2c:4c:6e:4f:0b:3f:3b:82:5d:6d:7f: 3e:51:c5:78:71:ba:85:ff:c1:96:c5:19:62:af:d1:c0:78:57: 66:4b:37:b6:0c:ef:bd:29:e1:ef:73:c8:94:fa:75:60:a1:5b: a1:39:07:ab:42:d2:c1:a4:b1:2a:c9:59:8a:32:ae:7d:fb:cf: a1:9a:4b:99:07:06:63:5a:1c:96:b3:64:1c:90:ab:91:d7:02: a0:46:a0:f8:d7:f9:f9:a0:5f:2a:32:f8:4b:7b:61:8a:7f:b7: 91:e9:a5:53:e3:81:b8:ca:2f:36:03:cd:0b:66:a2:56:61:07: a9:b6:18:88:5c:28:d4:4b:66:a8:54:8a:e2:0e:1c:01:05:67: 79:85:df:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FGMTExMC8GA1UEBRMoNjY5NDFEQTdFQUYzMEU5MzQ0RTAzMjFGMEI3NTRFN0FF RkZDMzUyOTAeFw0yNDEwMjMwNjUxMDBaFw0yNDEwMzAwNjUxMDBaMBgxFjAUBgNV BAMTDTY3MTg5Y2Q1LTUxMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcKVgjAmxJl+lz0O/3TogPDbGSWiIq9k+ilr4E5xoNAS/aQYVq8b6awRKkhwF8 RWxtU1gH83+H77UcInvBRkzj+Jqv58jTgDOnZdTDZ+l5trWWLfCdbRpd86Wm7Fcl dQvalj1b6viCP7XZUfePsBjcHI8iS14pZEiT/VEzSaODyqn5IZLlsHIt4me4vKY8 Vcq/Q8+A1wG8OHCiKBYiyji14MlYgY9oL4kWxqCPQQ7vtjwY7SyIvXioWwWMBsOp qGK0rFlHT/UN+KR8SbuFhEvBgVNj3cBtOpJHbk5TwmOu/hnk86J+uoButOnQtCH5 RrkL+YFY7eNA8KW6uNkQXzU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY4ReN0mx ESpnLo4SM8iGW5nYSpgwHwYDVR0jBBgwFoAUZpQdp+rzDpNE4DIfC3VOeu/8NSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzAwMzEzQzMyOEFB RDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5T ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnBRZHAtcnpEcE5FNERJZkMzVk9ldV84TlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUYxLzAwMzEzQzMyOEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBO RTRESWZDM1ZPZXVfOE5Tay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGslG/ImrRu5Di9uWNGtMydVKe0aY7Z0YT7NbQuzkxTr2si4vw8yerL A0TxSlxk3zX1F8IU2+45abylL3XS2Dz+Jh7jrulkda+nTkackZunxGMEvqdNdOck 2RHnUzV81L2LN7mugjew7u4963+GG+3JiFssTG5PCz87gl1tfz5RxXhxuoX/wZbF GWKv0cB4V2ZLN7YM770p4e9zyJT6dWChW6E5B6tC0sGksSrJWYoyrn37z6GaS5kH BmNaHJazZByQq5HXAqBGoPjX+fmgXyoy+Et7YYp/t5HppVPjgbjKLzYDzQtmolZh B6m2GIhcKNRLZqhUiuIOHAEFZ3mF3xI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org