$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: dVVU8L0r6kQhXJbDFr4i95or6zuVeYal2XNNhSPn434= Subject key identifier: A1:6F:8E:D1:D7:2C:FC:47:56:FD:13:BA:2A:7B:A0:2E:B6:31:FF:45 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 085E Signing time: Fri 22 Nov 2024 20:24:43 +0000 Manifest this update: Fri 22 Nov 2024 20:24:43 +0000 Manifest next update: Fri 29 Nov 2024 20:24:43 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: LMmJBKGrpXj69o+eJiRCzXupcVL3hWhoE5AC0c8yB3E=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: Nov 22 20:24:43 2024 GMT Not After : Nov 29 20:24:43 2024 GMT Subject: CN=6740e88b-89ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:cc:7b:c2:7c:23:c0:74:a9:a1:7c:03:d0: 2d:b0:82:d5:b9:20:df:34:7e:44:2b:78:4a:d3:5b: ac:2a:0a:b9:a2:e8:ba:c3:8d:8a:31:24:ff:dd:09: 88:c2:40:c5:35:97:d5:ee:58:6c:40:b6:f7:ed:fc: 03:eb:99:f1:65:fe:c8:bf:fa:c2:77:9e:01:93:37: df:44:1a:b9:a4:a8:0e:04:5c:f6:ed:31:73:05:d3: ee:73:01:46:92:6d:9f:d7:2f:9b:94:3c:12:48:e3: a0:ae:e3:16:83:d3:8e:9e:58:e5:44:ec:ba:61:e2: 73:51:69:76:49:a5:02:32:08:46:2f:57:1b:84:38: 61:d2:ab:8f:61:95:26:b7:b6:4f:ac:5f:b5:4b:87: eb:d6:08:e4:65:88:81:71:89:9e:05:51:c1:21:f1: 99:79:91:33:34:20:d5:7e:20:59:c4:06:d4:7b:06: cc:97:6d:36:81:06:db:2e:e1:6d:4c:9a:c5:9a:7e: 8e:80:c0:48:94:ce:e7:cb:fd:44:23:1d:3e:be:a8: c9:a9:7a:a1:85:1e:76:31:20:30:41:ac:87:41:5d: 3d:eb:02:c3:ac:b3:10:54:83:c1:00:42:6e:42:71: a7:98:59:80:a3:fc:0f:10:39:a9:bb:b5:88:b3:cd: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6F:8E:D1:D7:2C:FC:47:56:FD:13:BA:2A:7B:A0:2E:B6:31:FF:45 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2f:c7:5b:ad:ee:eb:ca:12:a6:d7:2d:ea:a7:f3:f8:1c:a3: 5e:ed:fa:32:b0:24:0b:bb:7e:11:81:a0:66:1d:9f:d0:f8:70: 89:5f:af:64:bf:f5:f4:da:d7:f1:92:80:74:8b:48:8e:d0:34: 6c:21:de:e5:83:61:1d:1d:32:a2:94:5e:34:a4:06:9d:ee:50: e3:2a:96:87:53:f1:e7:88:09:db:44:0a:2a:7b:e4:ba:60:fd: 9f:5a:b1:41:e7:d5:74:75:7a:47:51:fc:b6:33:7b:85:11:3f: b5:a5:50:d6:5a:1b:7e:34:0d:5a:fb:e5:d3:da:77:3a:98:49: 06:60:0d:f3:01:8c:5b:ca:59:df:43:9f:ea:56:7d:36:51:8d: a7:bd:e9:21:26:65:0f:68:c6:b5:40:be:f1:40:75:94:61:7a: e7:24:90:80:75:88:88:42:9f:75:52:8b:1f:b9:f7:6a:d6:54: 9d:86:45:73:ab:af:c8:b6:7f:82:b4:cc:15:d5:90:d0:d5:36: 6f:aa:b4:d1:d3:fe:49:00:47:a2:e0:05:3d:27:e1:e4:26:87: fa:6e:9c:aa:f6:c6:36:7d:d9:26:cd:11:6a:2e:fd:36:59:03: aa:4c:b3:7c:cc:77:bc:a5:82:3f:0c:48:21:42:f7:be:8f:f8: 3a:94:53:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjQxMTIyMjAyNDQzWhcNMjQxMTI5MjAyNDQzWjAYMRYwFAYD VQQDEw02NzQwZTg4Yi04OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7PMe8J8I8B0qaF8A9AtsILVuSDfNH5EK3hK01usKgq5oui6w42KMST/3QmI wkDFNZfV7lhsQLb37fwD65nxZf7Iv/rCd54BkzffRBq5pKgOBFz27TFzBdPucwFG km2f1y+blDwSSOOgruMWg9OOnljlROy6YeJzUWl2SaUCMghGL1cbhDhh0quPYZUm t7ZPrF+1S4fr1gjkZYiBcYmeBVHBIfGZeZEzNCDVfiBZxAbUewbMl202gQbbLuFt TJrFmn6OgMBIlM7ny/1EIx0+vqjJqXqhhR52MSAwQayHQV096wLDrLMQVIPBAEJu QnGnmFmAo/wPEDmpu7WIs83/ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFvjtHX LPxHVv0Tuip7oC62Mf9FMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcL8dbre7ryhKm1y3qp/P4HKNe7foysCQLu34RgaBmHZ/Q+HCJX69k v/X02tfxkoB0i0iO0DRsId7lg2EdHTKilF40pAad7lDjKpaHU/HniAnbRAoqe+S6 YP2fWrFB59V0dXpHUfy2M3uFET+1pVDWWht+NA1a++XT2nc6mEkGYA3zAYxbylnf Q5/qVn02UY2nvekhJmUPaMa1QL7xQHWUYXrnJJCAdYiIQp91Uosfufdq1lSdhkVz q6/Itn+CtMwV1ZDQ1TZvqrTR0/5JAEei4AU9J+HkJof6bpyq9sY2fdkmzRFqLv02 WQOqTLN8zHe8pYI/DEghQve+j/g6lFPu -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org