$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: cKfb+w8qMEYRBYsKu6uV9ViEWy14G3INT7nWl9Qaosw= Subject key identifier: E5:5C:EA:CA:37:FB:3A:10:27:32:50:63:32:0A:DF:C7:FC:AA:A2:E5 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 14 Signing time: Thu 19 Sep 2024 06:18:55 +0000 Manifest this update: Thu 19 Sep 2024 06:18:55 +0000 Manifest next update: Thu 26 Sep 2024 06:18:55 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: 81vBatODBNX3xL7NqfA604fxQwjVNjPYW5i/UmHNe9I=) 2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ok11TU/iv6LJLPAflEPHiwiFhyg6n0qqCM2K15cUC/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Sep 19 06:18:55 2024 GMT Not After : Sep 26 06:18:55 2024 GMT Subject: CN=66ebc24f-435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:09:76:3a:00:63:6d:5f:98:99:5d:f4:e3: ad:0b:1a:a2:3f:e0:9a:8d:4c:d1:fa:11:c5:44:1f: ce:f5:69:b3:84:9d:e7:d4:c6:0c:f2:e9:f4:a5:a9: 65:4b:65:12:0f:3f:02:80:2e:59:03:e1:2d:dc:6b: 2b:3b:6f:44:7b:ad:7c:ee:0b:48:7e:dc:70:01:be: 41:b6:9e:27:ec:08:bd:68:b0:18:10:8f:f1:e2:88: 58:2c:db:90:c1:48:16:ef:93:9c:45:be:4e:e5:86: c6:4d:f2:8a:a6:53:df:19:e9:a7:f3:b6:0a:6b:0c: 96:ea:1b:95:d7:9d:02:96:42:53:ce:16:ab:80:6e: de:3c:6b:5a:17:a5:5b:68:21:ad:5e:da:98:cd:af: 43:20:b1:43:8c:e6:b7:5e:e6:7f:34:aa:c4:71:74: 02:65:50:f7:8e:e0:3c:f7:f3:32:c2:d5:17:26:e4: 06:3c:f2:50:46:23:e8:30:c8:36:12:7e:82:89:1c: b5:cf:ca:01:93:2e:5b:30:1f:b7:68:fe:ed:69:09: eb:e4:2d:78:da:94:0d:1d:75:88:69:c5:a7:9c:f2: d8:de:83:c1:1b:2e:ab:60:2a:38:76:4c:83:76:47: f8:39:9e:2e:6e:98:41:1c:0f:84:fa:d4:98:c2:90: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5C:EA:CA:37:FB:3A:10:27:32:50:63:32:0A:DF:C7:FC:AA:A2:E5 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ea:4a:45:95:a9:25:4f:0b:66:e0:6d:9a:a7:6b:ab:63:9b: 38:29:25:13:b4:45:ef:39:b9:a3:9a:f3:e7:2f:79:a8:6d:91: 7d:82:42:95:ca:74:3b:d7:71:fb:d0:c6:e3:6c:38:25:3f:99: 62:45:1b:30:02:a7:51:8f:e3:a7:44:3d:66:bb:93:d0:16:f4: 4a:92:2f:d9:2e:e1:43:2d:92:73:11:10:a8:60:30:7a:4c:f1: 6a:53:45:e6:7c:ba:f3:59:80:e2:ce:3c:dd:f1:b2:66:88:f6: 0d:1e:3b:2a:b8:bc:50:d3:c7:d3:bb:0c:81:73:ea:d7:6f:f2: 65:ac:3b:91:e6:4b:12:79:3c:07:4b:bf:bb:9e:c4:02:da:7b: 09:46:77:94:96:7f:e8:7d:e3:4a:db:ba:93:36:53:7e:9a:19: 9f:5b:ae:d2:a5:f3:d0:b7:6b:41:26:5f:b9:60:a7:83:49:18: a2:8b:1e:a3:83:f1:f3:71:39:7f:8e:10:75:86:11:b2:22:05: 14:06:07:c8:e4:5e:76:f9:de:1d:ec:80:82:20:9e:20:ce:4a: 0e:39:af:e7:3a:23:a3:34:55:0f:5d:9a:45:04:8b:71:a9:c6: ee:91:b9:43:79:b6:60:4c:f2:ae:c6:1e:76:d3:02:67:05:af: 63:cd:da:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzdGMzExMC8GA1UEBRMoNjUxMTRCMTc0M0ZENjBERDc3MjhERUUxRTg1QjQ5RUVB MUJGMERBRDAeFw0yNDA5MTkwNjE4NTVaFw0yNDA5MjYwNjE4NTVaMBgxFjAUBgNV BAMTDTY2ZWJjMjRmLTQzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDIAl2OgBjbV+YmV30460LGqI/4JqNTNH6EcVEH871abOEnefUxgzy6fSlqWVL ZRIPPwKALlkD4S3cays7b0R7rXzuC0h+3HABvkG2nifsCL1osBgQj/HiiFgs25DB SBbvk5xFvk7lhsZN8oqmU98Z6afztgprDJbqG5XXnQKWQlPOFquAbt48a1oXpVto Ia1e2pjNr0MgsUOM5rde5n80qsRxdAJlUPeO4Dz38zLC1Rcm5AY88lBGI+gwyDYS foKJHLXPygGTLlswH7do/u1pCevkLXjalA0ddYhpxaec8tjeg8EbLqtgKjh2TIN2 R/g5ni5umEEcD4T61JjCkPB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Vzqyjf7 OhAnMlBjMgrfx/yqouUwHwYDVR0jBBgwFoAUZRFLF0P9YN13KN7h6FtJ7qG/Da0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3N0YzLzk0RUZDQzBDNUI5 QzExRUY4Q0VBMzE0NUM0RjlBRTAyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0Rh MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlJGTEYwUDlZTjEzS043aDZGdEo3cUdfRGEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 N0YzLzk0RUZDQzBDNUI5QzExRUY4Q0VBMzE0NUM0RjlBRTAyL1pSRkxGMFA5WU4x M0tON2g2RnRKN3FHX0RhMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTqSkWVqSVPC2bgbZqna6tjmzgpJRO0Re85uaOa8+cveahtkX2CQpXK dDvXcfvQxuNsOCU/mWJFGzACp1GP46dEPWa7k9AW9EqSL9ku4UMtknMREKhgMHpM 8WpTReZ8uvNZgOLOPN3xsmaI9g0eOyq4vFDTx9O7DIFz6tdv8mWsO5HmSxJ5PAdL v7uexALaewlGd5SWf+h940rbupM2U36aGZ9brtKl89C3a0EmX7lgp4NJGKKLHqOD 8fNxOX+OEHWGEbIiBRQGB8jkXnb53h3sgIIgniDOSg45r+c6I6M0VQ9dmkUEi3Gp xu6RuUN5tmBM8q7GHnbTAmcFr2PN2uE= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:26 2024 by rpki-client on console-fra.rpki-client.org