$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: if+sFDZgupUXoF75fKP7CukE21xAZ4Ane0LhNm4qu1U= Subject key identifier: 5A:63:31:1A:88:32:69:AA:0D:8C:8E:78:B1:A7:81:BC:E8:B2:9B:1B Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: 60 Signing time: Sat 23 Nov 2024 04:59:51 +0000 Manifest this update: Sat 23 Nov 2024 04:59:50 +0000 Manifest next update: Sat 30 Nov 2024 04:59:50 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: acY8EI5YQwUMLClnfjouwUaGeFQ5WM0OXMeQLcieDcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Nov 23 04:59:50 2024 GMT Not After : Nov 30 04:59:50 2024 GMT Subject: CN=67416146-5ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:8f:48:cb:c2:d5:4f:05:ab:f9:24:2e:8f: f8:3e:c6:e9:3c:e0:7e:14:18:51:3c:64:73:08:d6: ee:66:04:89:74:79:f7:4a:07:ce:45:de:49:d5:17: e2:ef:8c:bd:4c:7c:f3:49:d2:f0:04:a4:db:52:35: 98:01:9e:2a:7f:93:ae:72:64:36:73:a2:5f:d2:46: 7f:55:32:71:11:ca:f6:dd:90:9d:ba:e9:43:32:3f: b3:c7:d7:5e:2f:2d:bb:de:54:80:9c:24:82:b9:c4: 8f:af:20:49:21:e0:f7:be:52:a3:15:31:26:4f:78: 62:c1:3e:ed:ba:9f:dd:48:bb:05:82:1b:26:90:18: d1:98:2a:dd:ce:e3:d8:3c:67:a1:9a:77:37:fe:46: 13:35:61:62:90:6e:d3:cc:23:d1:42:8c:bc:e7:42: e7:e2:82:78:ca:c6:ad:51:01:74:be:42:1b:c0:24: 24:68:9b:41:bf:1d:0b:a7:01:10:be:af:eb:11:65: e1:62:96:43:4e:66:0a:22:15:62:11:0f:0c:1b:37: 2b:89:92:41:e3:9b:e1:b0:a4:22:f1:c6:df:69:be: 92:09:6c:98:1a:cb:e9:71:41:87:b3:7f:32:d3:8b: f3:bb:21:6a:84:db:76:89:68:e5:9f:8d:b8:91:9d: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:31:1A:88:32:69:AA:0D:8C:8E:78:B1:A7:81:BC:E8:B2:9B:1B X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:04:c0:91:ca:1f:e4:17:c1:d6:62:88:37:c8:d7:f0:5a: 25:df:3a:a7:35:d4:00:7e:71:42:41:d3:8a:38:95:99:13:c0: 2d:86:1a:6e:ed:fb:93:a8:70:c8:90:91:c1:78:f9:7b:6e:2d: 43:3f:6f:59:71:db:98:34:95:be:30:eb:b7:56:bf:d4:e5:92: 12:8d:0c:db:17:59:28:b9:37:36:16:1f:e6:6f:db:09:d5:a0: e9:7c:82:59:ba:85:c8:9f:ec:bb:ad:27:31:78:83:b5:f9:fe: 19:27:e3:e9:0d:64:bf:28:ac:8a:17:98:46:ca:d0:4b:eb:09: d4:6b:c8:59:29:2a:34:26:0e:61:fe:14:81:6c:23:94:a2:96: a3:52:54:a7:12:e0:96:82:31:a3:86:a9:72:9d:3f:75:3b:c2: ce:fc:a1:b8:96:80:a1:16:67:43:d4:8f:33:ca:f6:c2:42:ab: 50:ba:cb:02:d5:6c:c4:5d:0d:3e:5e:9d:48:91:ed:54:2a:04: 3e:35:5a:d8:58:36:07:e2:51:fd:cb:75:a3:0e:b8:70:7b:f6: 38:45:c5:ba:78:9a:22:96:17:e7:f7:fa:51:43:27:a4:ec:d8: 47:4f:c8:ee:53:eb:17:91:2f:2e:81:2e:74:47:19:2f:6e:0c: 1f:8a:af:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjJFMzExMC8GA1UEBRMoNjYwNUQ2NkE5ODA0N0VEQjA2QTQ5NEIzNzQyRjVFQzgy QjgxRENCMDAeFw0yNDExMjMwNDU5NTBaFw0yNDExMzAwNDU5NTBaMBgxFjAUBgNV BAMTDTY3NDE2MTQ2LTVlZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/9Y9Iy8LVTwWr+SQuj/g+xuk84H4UGFE8ZHMI1u5mBIl0efdKB85F3knVF+Lv jL1MfPNJ0vAEpNtSNZgBnip/k65yZDZzol/SRn9VMnERyvbdkJ266UMyP7PH114v LbveVICcJIK5xI+vIEkh4Pe+UqMVMSZPeGLBPu26n91IuwWCGyaQGNGYKt3O49g8 Z6Gadzf+RhM1YWKQbtPMI9FCjLznQufignjKxq1RAXS+QhvAJCRom0G/HQunARC+ r+sRZeFilkNOZgoiFWIRDwwbNyuJkkHjm+GwpCLxxt9pvpIJbJgay+lxQYezfzLT i/O7IWqE23aJaOWfjbiRnQhjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmMxGogy aaoNjI54saeBvOiymxswHwYDVR0jBBgwFoAUZgXWapgEftsGpJSzdC9eyCuB3LAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMkUzLzg0QjBBODVFMTcw QzExRUY5NEYxN0MxNEM0RjlBRTAyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmdYV2FwZ0VmdHNHcEpTemRDOWV5Q3VCM0xBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MkUzLzg0QjBBODVFMTcwQzExRUY5NEYxN0MxNEM0RjlBRTAyL1pnWFdhcGdFZnRz R3BKU3pkQzlleUN1QjNMQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUGBMCRyh/kF8HWYog3yNfwWiXfOqc11AB+cUJB04o4lZkTwC2GGm7t +5OocMiQkcF4+XtuLUM/b1lx25g0lb4w67dWv9TlkhKNDNsXWSi5NzYWH+Zv2wnV oOl8glm6hcif7LutJzF4g7X5/hkn4+kNZL8orIoXmEbK0EvrCdRryFkpKjQmDmH+ FIFsI5SilqNSVKcS4JaCMaOGqXKdP3U7ws78obiWgKEWZ0PUjzPK9sJCq1C6ywLV bMRdDT5enUiR7VQqBD41WthYNgfiUf3LdaMOuHB79jhFxbp4miKWF+f3+lFDJ6Ts 2EdPyO5T6xeRLy6BLnRHGS9uDB+Krzw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org