$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: oHE64dYNzfjT+F1ISaBTI9vkLQUnB60dKusHKzmWFnM= Subject key identifier: 93:20:0E:E2:C5:51:D6:BD:74:6F:9D:BA:8C:51:CB:A8:48:05:0C:6D Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 047C Signing time: Sun 24 Nov 2024 23:28:37 +0000 Manifest this update: Sun 24 Nov 2024 23:28:36 +0000 Manifest next update: Sun 01 Dec 2024 23:28:36 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: Hshd3sixXySpvzv658TFXBv6SoFLzqn2SL7COtD+xYQ=) 2: 67624B6088B611EFA5F28A68C4F9AE02.roa (hash: 323i9pL5yCtaBj88xS1UHgMbO3eo112xNP4z6u7enrE=) 3: D63B58C0849B11EF86A9C17FC4F9AE02.roa (hash: Ys2gxIys2N/hn2jIbNvMPW46oeoM0ncTwoG5tpMgdLE=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: 3+NsZX9fs90OleisLoi6Xf7dX8rP23oDYkK11SGrzUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Nov 24 23:28:36 2024 GMT Not After : Dec 1 23:28:36 2024 GMT Subject: CN=6743b6a5-b975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:47:d2:ca:14:ba:1c:fe:ec:c8:cc:3d:19: b0:81:b9:51:4b:f7:d8:04:bd:c3:01:6e:08:f8:66: 8f:9e:38:fd:dd:9b:4d:2a:f4:72:80:8f:c2:73:db: 86:ee:5a:ad:f1:da:8d:05:0b:3c:2b:c7:2e:a0:cd: 04:c2:45:1f:c3:b4:2e:c4:a8:d7:b9:c9:bb:85:9a: b5:4e:bd:f8:49:66:50:73:84:6f:97:08:5e:46:9f: 14:64:5c:f3:d9:cc:6d:20:6e:23:90:a1:d0:b3:26: 5d:18:62:a1:3d:18:97:8e:ec:4c:c5:ec:41:c3:e1: 54:7d:2b:27:b9:ec:de:d7:fa:05:c8:c4:24:e8:fd: df:fb:33:60:fd:8f:7a:e3:66:e7:c0:e1:6c:68:c1: 4b:e9:12:33:a8:c9:a9:d3:ac:e5:03:80:6a:b3:d6: 91:e2:cb:29:1c:83:d4:8f:0a:5f:5b:99:3b:39:86: ce:bd:c4:da:12:d6:22:da:04:29:67:13:3e:cd:23: 14:6f:f8:f1:26:81:ed:a7:30:b0:0c:7d:0a:fe:f9: 49:5c:14:93:64:2b:2a:b3:ba:20:a7:fa:4d:7c:dc: 8d:3d:1a:c2:b3:7e:09:74:76:2c:93:76:b3:ce:22: 53:e7:18:e8:d6:d1:9d:8b:dc:85:b6:c8:68:03:29: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:0E:E2:C5:51:D6:BD:74:6F:9D:BA:8C:51:CB:A8:48:05:0C:6D X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bf:68:c0:d7:69:81:a5:69:3e:6d:b5:be:38:1b:68:b7:3a: 66:d0:25:32:4b:69:ce:b6:3f:38:5b:e6:23:ab:30:7e:6b:11: d6:f4:76:42:96:d7:26:28:1c:7c:1c:b8:db:74:32:3d:3c:b2: 54:15:67:53:2a:0c:25:5f:67:93:27:7d:2d:04:ef:00:5f:00: cf:29:16:02:7d:25:64:d4:5b:5e:a3:c4:9a:6d:e9:69:4b:78: 79:2b:a4:81:25:70:70:9e:a5:e4:21:b4:09:60:32:a4:37:99: 45:15:5d:99:79:4a:07:8c:c3:b6:7f:3d:cc:e7:81:02:41:35: af:02:b3:cd:ce:b3:8c:6e:5e:8c:5b:19:e9:d4:a8:ba:fb:40: 6d:d9:c9:62:91:51:0c:f7:a4:61:2a:96:e5:14:1b:82:4e:ca: a5:92:24:1e:27:65:54:2e:26:51:14:7d:51:b6:ce:fd:ae:f0: 10:38:ae:54:c5:26:a9:e9:a5:8c:15:fe:30:10:ee:33:11:64: ab:cb:44:6b:14:d2:cc:86:89:c0:0d:59:b2:1f:74:29:f2:88: 5f:6e:f6:bc:13:ec:02:0c:74:57:03:27:48:e7:21:ec:69:0b: 36:18:f2:85:aa:b7:bf:4b:15:27:1d:ae:b6:dc:40:11:b4:57: d7:31:39:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjQxMTI0MjMyODM2WhcNMjQxMjAxMjMyODM2WjAYMRYwFAYD VQQDEw02NzQzYjZhNS1iOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG5H0soUuhz+7MjMPRmwgblRS/fYBL3DAW4I+GaPnjj93ZtNKvRygI/Cc9uG 7lqt8dqNBQs8K8cuoM0EwkUfw7QuxKjXucm7hZq1Tr34SWZQc4RvlwheRp8UZFzz 2cxtIG4jkKHQsyZdGGKhPRiXjuxMxexBw+FUfSsnueze1/oFyMQk6P3f+zNg/Y96 42bnwOFsaMFL6RIzqMmp06zlA4Bqs9aR4sspHIPUjwpfW5k7OYbOvcTaEtYi2gQp ZxM+zSMUb/jxJoHtpzCwDH0K/vlJXBSTZCsqs7ogp/pNfNyNPRrCs34JdHYsk3az ziJT5xjo1tGdi9yFtshoAylRnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMgDuLF Uda9dG+duoxRy6hIBQxtMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSv2jA12mBpWk+bbW+OBtotzpm0CUyS2nOtj84W+YjqzB+axHW9HZC ltcmKBx8HLjbdDI9PLJUFWdTKgwlX2eTJ30tBO8AXwDPKRYCfSVk1Fteo8Sabelp S3h5K6SBJXBwnqXkIbQJYDKkN5lFFV2ZeUoHjMO2fz3M54ECQTWvArPNzrOMbl6M Wxnp1Ki6+0Bt2clikVEM96RhKpblFBuCTsqlkiQeJ2VULiZRFH1Rts79rvAQOK5U xSap6aWMFf4wEO4zEWSry0RrFNLMhonADVmyH3Qp8ohfbva8E+wCDHRXAydI5yHs aQs2GPKFqre/SxUnHa623EARtFfXMTkE -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:33 2024 by rpki-client on console-fra.rpki-client.org