$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: KKkrEcuaafHxVapvgSikzLmZCJGlGGA0OUq/fSrUv4s= Subject key identifier: C0:F6:46:A7:82:4A:BC:18:CF:92:68:E2:B6:23:17:67:3A:E9:95:7F Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0877 Signing time: Wed 20 Nov 2024 20:18:40 +0000 Manifest this update: Wed 20 Nov 2024 20:18:40 +0000 Manifest next update: Wed 27 Nov 2024 20:18:40 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: B7jmtPY4931uc6/xab28Kw2B4TNDAB8V3ku+jP4Z5BU=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: JASfvNQGueVGvvI4vyDMOa1HuqKYc3UAFhDDUGxJcdo=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: Qq9CVIwOQl8iOT2IAZyZUQMWOjo9Ahg0VBSPTd2tmZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 20 20:18:40 2024 GMT Not After : Nov 27 20:18:40 2024 GMT Subject: CN=673e4420-08e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:4d:aa:f3:0f:c6:d8:4f:3a:e3:ec:d1:8d: dd:b3:e2:00:cd:69:71:99:81:7b:e8:5e:19:a7:92: f2:6e:1d:58:25:95:d0:5d:2f:2a:53:78:54:bf:eb: 6f:b4:ea:7d:4f:07:e5:d8:da:cc:43:44:80:09:ba: eb:62:0b:79:21:a4:ae:51:90:5f:e8:96:38:1a:3d: c2:20:70:1d:e4:2a:2a:3e:e3:d5:37:4c:87:05:c3: 86:ac:9b:f9:2a:e7:07:ce:8a:f3:87:63:e3:8f:89: 4f:36:de:df:6a:d9:7d:ae:d2:84:a7:4e:80:5c:b3: 8e:f3:9e:4e:95:62:f7:82:22:c2:dd:0a:0a:3f:be: 53:f2:5f:64:7d:94:2a:b5:33:f4:d2:46:6a:5e:92: a7:71:97:a7:ef:fe:43:d6:00:5e:41:d5:94:cd:bf: a0:b8:cd:e8:33:d7:6f:b9:41:a0:4c:b6:94:c1:e5: ed:35:ce:50:84:90:c4:5d:5e:2d:7c:3a:e1:8e:0b: ef:87:b4:28:b6:16:06:cb:5f:0c:24:84:e9:e8:8b: 6c:67:58:fc:90:10:52:94:66:90:20:39:96:8e:d5: e3:40:b1:85:25:e0:a0:43:38:b0:60:f6:28:c6:c7: 8f:ac:ad:d1:0e:99:2b:be:43:ae:03:b5:b6:4d:d8: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:46:A7:82:4A:BC:18:CF:92:68:E2:B6:23:17:67:3A:E9:95:7F X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b6:fb:05:f5:2c:08:31:18:df:a1:9d:08:aa:23:1b:6d:6b: 7a:7e:2b:e5:52:4b:93:87:9a:3c:5b:bd:87:08:7b:89:76:e1: ff:16:5d:7e:a7:69:0e:79:38:06:ce:09:13:d6:4d:fa:5c:4c: 77:e6:de:51:09:99:8e:e8:ac:b6:7a:6f:83:06:02:3c:e3:74: 45:0c:b8:69:9c:15:65:a5:16:50:7f:6f:8a:2b:88:5b:9e:01: 44:d6:5e:3f:00:2b:8a:49:29:6d:47:62:5f:c1:5c:87:d3:b4: 1f:1f:5f:f0:6d:01:2c:e7:a8:01:69:4f:42:18:a3:f4:13:31: bb:2d:d4:67:ee:3a:9d:46:c8:43:53:44:64:e2:cc:e3:38:9d: a8:ce:28:2a:34:eb:ab:13:f4:a3:b1:90:d3:e8:cb:95:df:76: f0:e9:b7:f6:fe:64:c8:39:45:63:23:27:2d:39:88:ca:65:67: 75:e2:7f:1a:ec:b0:1a:7e:98:52:5b:41:a3:91:14:02:ac:8d: 7b:a0:bd:a4:e5:d8:93:8e:5a:25:9b:94:ae:87:18:c0:23:3e: ff:93:2e:35:bd:e3:15:56:7f:ae:71:50:f7:80:68:66:ec:77: 88:8b:1f:41:ee:31:f5:5f:e3:2b:3f:46:88:b0:a2:49:ac:83: 40:26:2f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjQxMTIwMjAxODQwWhcNMjQxMTI3MjAxODQwWjAYMRYwFAYD VQQDEw02NzNlNDQyMC0wOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMJNqvMPxthPOuPs0Y3ds+IAzWlxmYF76F4Zp5Lybh1YJZXQXS8qU3hUv+tv tOp9Twfl2NrMQ0SACbrrYgt5IaSuUZBf6JY4Gj3CIHAd5CoqPuPVN0yHBcOGrJv5 KucHzorzh2Pjj4lPNt7fatl9rtKEp06AXLOO855OlWL3giLC3QoKP75T8l9kfZQq tTP00kZqXpKncZen7/5D1gBeQdWUzb+guM3oM9dvuUGgTLaUweXtNc5QhJDEXV4t fDrhjgvvh7QothYGy18MJITp6ItsZ1j8kBBSlGaQIDmWjtXjQLGFJeCgQziwYPYo xsePrK3RDpkrvkOuA7W2TdgMuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD2RqeC SrwYz5Jo4rYjF2c66ZV/MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCntvsF9SwIMRjfoZ0IqiMbbWt6fivlUkuTh5o8W72HCHuJduH/Fl1+ p2kOeTgGzgkT1k36XEx35t5RCZmO6Ky2em+DBgI843RFDLhpnBVlpRZQf2+KK4hb ngFE1l4/ACuKSSltR2JfwVyH07QfH1/wbQEs56gBaU9CGKP0EzG7LdRn7jqdRshD U0Rk4szjOJ2ozigqNOurE/SjsZDT6MuV33bw6bf2/mTIOUVjIyctOYjKZWd14n8a 7LAafphSW0GjkRQCrI17oL2k5diTjlolm5SuhxjAIz7/ky41veMVVn+ucVD3gGhm 7HeIix9B7jH1X+MrP0aIsKJJrINAJi8U -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:48 2024 by rpki-client on console-fra.rpki-client.org