$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: UpuONXBbcQ5joZf2R3ZO6WSSggGGSnkIlmBa68F6Zfk= Subject key identifier: C5:13:1E:43:9E:B7:CA:CA:7B:5A:1D:17:C6:07:B0:34:E3:52:14:BE Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 1768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 171E Signing time: Wed 20 Nov 2024 16:35:19 +0000 Manifest this update: Wed 20 Nov 2024 16:35:18 +0000 Manifest next update: Wed 27 Nov 2024 16:35:18 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: HdI2Sl2Kvxy9t+OrLUPwxTiBO+q9ugjHsf41vJAScjw=) 2: 7166B29E9AD811EE999AC186C4F9AE02.roa (hash: 9L0FYBm6vBSRwVAFtNppTiFQXy8CRKKZY6ZKorYpHxA=) 3: EE2B9106D95E11E7A5E2E166C4F9AE02.roa (hash: 464b1biL/7a6FIAKPAceLOp0kJT6PQlnl7HNFihj0TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5992 (0x1768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Nov 20 16:35:18 2024 GMT Not After : Nov 27 16:35:18 2024 GMT Subject: CN=673e0fc6-dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:c1:70:8a:f9:f0:69:c3:f5:11:58:e9:f3: 68:5a:7d:65:0c:44:13:61:46:29:54:9c:c1:73:98: 09:9e:98:39:49:24:ad:04:d0:09:bb:fd:e2:16:ae: fd:99:55:cd:ab:e5:12:75:8d:15:d8:e2:63:ac:56: 83:88:ca:d9:5d:01:13:05:f6:c7:09:65:2c:6e:dc: 99:48:a2:84:72:2b:a8:6f:77:03:b8:42:44:67:6c: f8:c4:cb:d5:cf:61:2d:6a:08:ee:f5:0b:85:e5:82: 64:8f:2a:94:9e:d2:68:1a:c6:ba:23:1e:d5:dc:9a: 19:c9:92:43:fd:92:29:e1:ad:20:3d:1d:ae:79:23: 3a:1d:b2:33:c0:f1:4b:bc:b0:53:7a:7b:c7:f0:04: a4:0f:ff:6f:28:60:5e:c5:0a:9b:b5:95:73:76:46: 52:17:83:73:05:4b:6e:83:f7:79:a5:58:7c:3f:da: eb:a1:0e:77:67:89:87:01:2c:23:cf:ea:48:ed:31: 36:ec:29:0e:d5:25:27:e1:f4:04:87:66:32:48:6e: 76:b3:2e:75:49:6c:53:a5:f3:35:fc:37:b1:49:8b: 8a:03:03:b4:ad:e8:da:a6:57:c9:47:0e:e0:e0:c0: 6d:c8:94:90:26:ef:88:0a:a3:25:7a:c5:08:96:21: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:13:1E:43:9E:B7:CA:CA:7B:5A:1D:17:C6:07:B0:34:E3:52:14:BE X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:dc:55:8d:51:37:28:f5:de:1a:68:a8:ec:3d:36:62:32:62: a6:9b:e6:4f:7d:39:a6:66:ab:41:c8:da:34:42:fe:92:6e:5e: 00:88:14:80:4c:4d:14:6d:19:4f:56:d2:24:d4:da:14:c5:9a: 88:87:a1:21:53:0b:d8:30:ea:34:a8:4a:4c:67:d3:a4:78:be: 84:3d:c2:b3:18:07:85:f2:80:4a:1a:9a:31:2a:bf:94:99:f6: a5:98:a1:d8:9e:ba:93:d4:3d:32:c5:ed:61:18:1c:5a:60:d5: cd:23:40:5a:e7:66:0a:c5:4a:6e:29:71:c6:79:15:3e:fc:6b: 68:e9:8c:c7:df:ce:35:06:df:b2:25:3c:53:90:aa:af:2b:fd: 75:5e:65:02:55:fa:8b:d4:b2:13:4e:7a:58:14:63:d0:63:a4: e3:0c:ba:af:59:46:3f:49:29:1c:33:c9:a4:7b:84:c5:87:c0: 64:77:5b:1e:29:f0:a3:c6:68:5e:60:18:ed:ce:a8:b9:02:eb: f6:ab:c4:73:f0:64:e8:eb:6d:45:50:f8:bf:45:2e:ac:62:b6: e8:64:c4:c2:ee:1b:5d:b2:e9:d3:1b:97:d3:22:79:1f:ab:55: ff:7a:50:aa:98:a1:30:7c:21:89:da:d5:64:93:99:a4:76:9d: 76:49:2f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjQxMTIwMTYzNTE4WhcNMjQxMTI3MTYzNTE4WjAYMRYwFAYD VQQDEw02NzNlMGZjNi1kYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukHBcIr58GnD9RFY6fNoWn1lDEQTYUYpVJzBc5gJnpg5SSStBNAJu/3iFq79 mVXNq+USdY0V2OJjrFaDiMrZXQETBfbHCWUsbtyZSKKEciuob3cDuEJEZ2z4xMvV z2Etagju9QuF5YJkjyqUntJoGsa6Ix7V3JoZyZJD/ZIp4a0gPR2ueSM6HbIzwPFL vLBTenvH8ASkD/9vKGBexQqbtZVzdkZSF4NzBUtug/d5pVh8P9rroQ53Z4mHASwj z+pI7TE27CkO1SUn4fQEh2YySG52sy51SWxTpfM1/DexSYuKAwO0rejaplfJRw7g 4MBtyJSQJu+ICqMlesUIliGPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUTHkOe t8rKe1odF8YHsDTjUhS+MB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT3FWNUTco9d4aaKjsPTZiMmKmm+ZPfTmmZqtByNo0Qv6Sbl4AiBSA TE0UbRlPVtIk1NoUxZqIh6EhUwvYMOo0qEpMZ9OkeL6EPcKzGAeF8oBKGpoxKr+U mfalmKHYnrqT1D0yxe1hGBxaYNXNI0Ba52YKxUpuKXHGeRU+/Gto6YzH3841Bt+y JTxTkKqvK/11XmUCVfqL1LITTnpYFGPQY6TjDLqvWUY/SSkcM8mke4TFh8Bkd1se KfCjxmheYBjtzqi5Auv2q8Rz8GTo621FUPi/RS6sYrboZMTC7htdsunTG5fTInkf q1X/elCqmKEwfCGJ2tVkk5mkdp12SS+W -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:06 2024 by rpki-client on console-fra.rpki-client.org