$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: Z+4fKLdQQSbPO2BnMp77CdVcmC10fWxk29b9Hjd8F8Q= Subject key identifier: C3:42:B5:FB:44:DB:F6:89:21:66:D8:74:16:B5:74:BE:52:52:00:B0 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0BD8 Signing time: Fri 22 Nov 2024 18:30:28 +0000 Manifest this update: Fri 22 Nov 2024 18:30:28 +0000 Manifest next update: Fri 29 Nov 2024 18:30:28 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: PYAD+hPouCCQXVh4tIjIivU95AbnYJU5Ux5LDa1Hnvw=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Nov 22 18:30:28 2024 GMT Not After : Nov 29 18:30:28 2024 GMT Subject: CN=6740cdc4-008e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:ac:92:8e:2c:36:92:df:e5:8c:70:88:05: f8:2a:fb:4f:98:8f:e0:52:7d:5b:bb:67:dc:16:46: a1:03:2b:98:c1:4a:51:c6:74:f4:9f:ec:45:8d:ed: f2:ae:d1:1d:1c:81:fd:28:06:b7:ac:a0:42:6e:c2: 90:91:ef:0b:db:4d:52:77:46:6b:06:88:3e:47:7a: 9a:b4:18:44:b1:6c:63:16:65:0c:3b:19:b7:bd:9f: 89:60:0a:b7:c8:39:46:d4:ba:ae:c9:20:87:b4:de: 19:4f:3e:a2:1c:87:ad:db:18:1e:e0:83:e9:ee:20: a9:fc:74:61:d2:10:ba:45:06:71:2c:42:b2:d5:7f: 34:c0:7c:69:52:fd:11:44:89:47:e3:f2:90:74:18: aa:cf:74:63:20:08:0a:74:6e:99:98:c5:6b:f0:aa: 06:4b:58:ee:74:7b:90:a4:79:68:ac:48:f0:88:4b: 66:2f:50:c5:63:83:90:de:50:e0:7e:09:06:57:aa: 6e:c5:0c:1c:f6:f5:b4:0d:c1:24:3a:fd:f8:75:36: c4:86:e0:b7:84:96:21:a4:42:75:29:a9:11:2c:ad: 8f:4a:24:ba:67:3d:b0:0c:ec:87:ff:92:33:49:5d: 8e:c8:a1:5c:61:cd:a8:63:bb:39:17:0d:20:50:ad: 45:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:42:B5:FB:44:DB:F6:89:21:66:D8:74:16:B5:74:BE:52:52:00:B0 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3d:bf:f3:93:44:f4:e7:09:6c:6f:80:66:ab:b7:ec:c1:e8: 3d:31:88:6c:d4:9a:c2:69:df:73:39:b1:05:a3:08:e4:bf:c2: 4c:8f:45:b1:a4:f3:93:2f:c5:8d:2b:94:50:6b:91:08:b6:0d: 14:ad:ef:2d:c3:cf:9d:8e:7f:76:98:9f:e2:a2:72:ad:b5:f6: 80:e8:d8:80:e0:75:92:fe:73:0a:9f:f5:a9:57:15:56:45:36: 64:d2:d8:2e:5c:49:06:5f:bc:1d:12:a4:ed:0e:ed:71:f8:3e: 93:4b:84:ea:0c:44:80:fa:bf:6c:60:c5:a3:ce:06:2b:b4:06: 41:7d:ca:ec:63:11:bd:1a:d5:24:1a:6e:92:ab:d1:a1:59:66: 8e:70:ef:b0:9f:38:a0:ae:87:19:07:a4:12:13:7b:8e:b4:20: bd:30:50:70:71:f9:50:55:de:7d:ea:96:90:8a:48:9f:5e:96: f0:14:5c:08:19:7f:97:ea:38:cb:9e:da:3f:34:07:74:03:d3: f1:63:16:f1:94:c0:01:66:3b:30:74:fd:b8:d5:50:5f:cd:4c: 03:dd:cc:06:97:ce:5c:3b:df:b2:b2:8f:65:20:7d:86:eb:35: 39:4a:0d:8e:d2:d5:66:de:06:67:3e:5f:92:b2:3d:0b:7d:3b: 09:4b:2a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjQxMTIyMTgzMDI4WhcNMjQxMTI5MTgzMDI4WjAYMRYwFAYD VQQDEw02NzQwY2RjNC0wMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjusko4sNpLf5YxwiAX4KvtPmI/gUn1bu2fcFkahAyuYwUpRxnT0n+xFje3y rtEdHIH9KAa3rKBCbsKQke8L201Sd0ZrBog+R3qatBhEsWxjFmUMOxm3vZ+JYAq3 yDlG1LquySCHtN4ZTz6iHIet2xge4IPp7iCp/HRh0hC6RQZxLEKy1X80wHxpUv0R RIlH4/KQdBiqz3RjIAgKdG6ZmMVr8KoGS1judHuQpHlorEjwiEtmL1DFY4OQ3lDg fgkGV6puxQwc9vW0DcEkOv34dTbEhuC3hJYhpEJ1KakRLK2PSiS6Zz2wDOyH/5Iz SV2OyKFcYc2oY7s5Fw0gUK1FUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNCtftE 2/aJIWbYdBa1dL5SUgCwMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjPb/zk0T05wlsb4Bmq7fsweg9MYhs1JrCad9zObEFowjkv8JMj0Wx pPOTL8WNK5RQa5EItg0Ure8tw8+djn92mJ/ionKttfaA6NiA4HWS/nMKn/WpVxVW RTZk0tguXEkGX7wdEqTtDu1x+D6TS4TqDESA+r9sYMWjzgYrtAZBfcrsYxG9GtUk Gm6Sq9GhWWaOcO+wnzigrocZB6QSE3uOtCC9MFBwcflQVd596paQikifXpbwFFwI GX+X6jjLnto/NAd0A9PxYxbxlMABZjswdP241VBfzUwD3cwGl85cO9+yso9lIH2G 6zU5Sg2O0tVm3gZnPl+Ssj0LfTsJSypK -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org