$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: xUb74ar4ybZ7iwlqXAF1gzRzsWrg5oGCm8rDWXGbRiU= Subject key identifier: BA:68:8B:DC:53:0D:43:94:32:B0:EE:BD:2B:E5:19:77:83:C4:CB:52 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0DD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0DC6 Signing time: Fri 22 Nov 2024 17:49:25 +0000 Manifest this update: Fri 22 Nov 2024 17:49:24 +0000 Manifest next update: Fri 29 Nov 2024 17:49:24 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: tGXB/tsIeiEJgKmpgNJgkUNGrCNyDO9ybu0iXDekhPU=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: Wqabe9w2Uqip6TelVZ+NxYToXtXUdZ2r3Jhmi1abvwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3539 (0xdd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Nov 22 17:49:24 2024 GMT Not After : Nov 29 17:49:24 2024 GMT Subject: CN=6740c424-7e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:32:87:5e:0f:c8:c8:d9:a3:0a:6d:24:4b: e7:1d:4e:3e:ea:59:94:19:5d:62:cc:3f:d5:b9:36: f6:d3:39:0f:c3:27:1f:22:e3:a0:37:1e:59:3f:65: cb:8b:db:cb:dc:92:31:52:13:e3:28:98:6e:b9:61: 54:6c:71:34:25:48:fe:c1:04:f7:4c:0b:1c:9d:be: b7:bc:da:2e:b4:e1:96:e2:33:37:8a:9a:21:65:38: 04:d3:70:da:d9:97:94:bd:00:df:36:6b:43:9b:d0: 44:0e:26:b8:bc:25:4a:eb:a7:54:6b:15:fd:0f:c5: fc:43:27:2d:4e:14:2e:51:57:96:d9:e7:d5:84:11: a8:b6:c2:a6:87:c3:69:61:21:4c:03:85:24:e9:b1: ed:13:95:d5:0c:a9:16:44:2a:a0:cb:3f:32:83:d0: 24:2d:17:d2:27:42:b4:ac:da:6d:f8:b8:ad:2f:34: ed:3b:fd:86:b9:63:5f:b4:4f:fe:66:4c:16:96:f3: 47:3b:5c:86:cd:25:3d:2d:58:ef:26:32:84:75:89: 8d:94:c9:3c:47:00:df:2c:f7:40:71:6c:dc:8c:3b: 95:7e:29:ec:5f:12:c0:bf:57:b6:ec:41:ec:a1:78: fc:5b:08:03:c7:e4:d1:29:ac:e7:a7:2a:09:6b:6f: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:68:8B:DC:53:0D:43:94:32:B0:EE:BD:2B:E5:19:77:83:C4:CB:52 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1e:71:04:5c:df:9a:3a:06:43:54:3d:39:4e:05:58:2d:c8: 57:94:64:cf:d5:6b:10:1b:fd:75:53:c3:ed:eb:2a:d9:84:8e: d0:d4:71:28:2f:99:a2:c4:e9:cf:13:f2:fa:1a:d4:18:40:b6: c2:1a:23:83:63:80:1e:2e:8b:ce:4c:80:95:72:e9:ed:5e:2f: f3:fa:0e:bb:65:68:cf:c2:6c:17:b6:35:8f:19:bc:c0:5c:bd: ff:79:cc:57:5b:b0:47:9a:18:05:f0:41:ed:f8:47:c3:5a:5d: 48:c8:b4:b6:dc:cc:ef:88:95:68:f0:11:26:b8:2c:ec:60:56: ff:2e:21:98:c1:99:93:93:1f:d5:58:aa:b0:e0:52:bd:10:61: a6:4e:21:00:f3:ce:9a:a8:13:6f:4f:c5:1d:78:53:17:20:e1: 33:d3:fd:80:dd:82:0d:9e:a3:a6:27:08:b6:d3:3f:96:5c:51: d7:3d:a2:4a:78:5b:06:c6:db:f1:10:c5:75:85:c4:77:b8:3b: a7:f8:cd:c9:db:2e:9a:3f:6c:38:e0:be:60:42:f7:08:7c:00: f6:f7:68:6f:ad:2a:79:8f:f9:63:18:58:80:8c:f9:82:32:aa: 2d:d4:7a:59:74:1b:a3:9a:f5:5b:4d:87:c8:4e:8d:ed:b1:37: b9:5e:f2:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjQxMTIyMTc0OTI0WhcNMjQxMTI5MTc0OTI0WjAYMRYwFAYD VQQDEw02NzQwYzQyNC03ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1syh14PyMjZowptJEvnHU4+6lmUGV1izD/VuTb20zkPwycfIuOgNx5ZP2XL i9vL3JIxUhPjKJhuuWFUbHE0JUj+wQT3TAscnb63vNoutOGW4jM3ipohZTgE03Da 2ZeUvQDfNmtDm9BEDia4vCVK66dUaxX9D8X8QyctThQuUVeW2efVhBGotsKmh8Np YSFMA4Uk6bHtE5XVDKkWRCqgyz8yg9AkLRfSJ0K0rNpt+LitLzTtO/2GuWNftE/+ ZkwWlvNHO1yGzSU9LVjvJjKEdYmNlMk8RwDfLPdAcWzcjDuVfinsXxLAv1e27EHs oXj8WwgDx+TRKaznpyoJa29cKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpoi9xT DUOUMrDuvSvlGXeDxMtSMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHnEEXN+aOgZDVD05TgVYLchXlGTP1WsQG/11U8Pt6yrZhI7Q1HEo L5mixOnPE/L6GtQYQLbCGiODY4AeLovOTICVcuntXi/z+g67ZWjPwmwXtjWPGbzA XL3/ecxXW7BHmhgF8EHt+EfDWl1IyLS23MzviJVo8BEmuCzsYFb/LiGYwZmTkx/V WKqw4FK9EGGmTiEA886aqBNvT8UdeFMXIOEz0/2A3YINnqOmJwi20z+WXFHXPaJK eFsGxtvxEMV1hcR3uDun+M3J2y6aP2w44L5gQvcIfAD292hvrSp5j/ljGFiAjPmC Mqot1HpZdBujmvVbTYfITo3tsTe5XvJ9 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org