$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: iwugWN65u1yLIx1dvZvBsy+EvbUeVgj6XmU/+QJ8zy0= Subject key identifier: F7:92:47:9A:AC:C8:D9:AC:AA:B2:5E:94:79:21:66:7E:3B:7C:DE:02 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0D48 Signing time: Fri 22 Nov 2024 18:08:31 +0000 Manifest this update: Fri 22 Nov 2024 18:08:31 +0000 Manifest next update: Fri 29 Nov 2024 18:08:31 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: xYFj7wlv6Pjqo+yEg1xd4fWVJkZcu5BUikkCj659E2c=) 2: 43EEDCEE3B0311EFA72E7B80C4F9AE02.roa (hash: clObT30ZZ4OZz90N/JcQoOLGlm8muOGA7OZEgrvkPvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Nov 22 18:08:31 2024 GMT Not After : Nov 29 18:08:31 2024 GMT Subject: CN=6740c89f-75ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:2a:66:16:60:34:26:9d:e7:54:1a:11:26: 4d:62:db:01:dd:2e:05:98:c1:8c:7d:8b:2b:5f:37: 32:3d:f1:39:80:57:6a:48:5f:01:cf:2d:fc:68:7c: 33:16:d4:62:b4:40:50:1b:63:56:a4:1f:9f:f7:39: 5c:27:b0:ac:0d:38:b7:4b:8d:ed:3b:4e:79:4f:9f: c6:ef:8f:45:23:3c:e0:8e:81:8a:9a:4b:05:6e:33: e5:46:ac:ab:7e:e5:d8:93:81:ee:b3:a4:ec:24:66: 72:99:2f:2d:ba:27:8b:e8:84:f2:d2:d2:11:fb:b8: 87:9c:22:25:1e:1f:58:8f:a7:52:c2:d5:9f:78:7b: eb:4f:1b:48:43:7c:b6:14:a1:df:a6:20:70:f5:33: 98:7b:8f:ec:8e:f9:b4:f1:95:88:82:bb:55:17:5e: 45:51:ab:e0:8e:ff:a7:82:3c:07:98:20:2a:5c:ea: 8b:6f:53:7a:89:8d:8d:28:15:f9:12:63:88:18:41: 52:f4:f7:d2:4c:a9:d7:bc:12:9c:25:f5:6e:b0:b8: 63:4f:6f:38:4e:3b:af:f5:5a:95:c2:46:41:b4:19: cf:c0:a9:13:d7:02:25:a2:5d:d7:05:94:7d:1f:86: 3a:96:04:0f:d7:78:aa:3c:5c:83:d6:f3:a0:b0:52: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:47:9A:AC:C8:D9:AC:AA:B2:5E:94:79:21:66:7E:3B:7C:DE:02 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:55:80:67:03:be:37:be:29:b1:3e:bd:54:c4:d5:97:f5:03: 4b:e1:09:37:66:ae:90:cf:55:10:58:83:13:dc:13:c8:dc:62: bd:eb:b3:9c:cb:62:a4:67:a6:e1:9f:3e:67:65:7f:83:34:e1: 7f:99:3f:29:f6:94:29:83:93:c1:f6:83:ca:f6:dd:6a:7b:4d: fe:9d:84:65:38:99:35:e3:c6:1e:5a:fa:9f:07:bd:76:09:42: e4:47:1b:f1:8c:60:2e:32:11:e2:22:e5:97:40:3a:27:aa:88: a2:a7:85:9d:10:a2:5b:17:0b:4f:fd:95:24:fc:39:e0:37:21: 4c:16:9d:72:a9:ce:a9:c4:30:08:ae:8b:5a:31:05:66:f3:48: 1a:34:1f:8d:d7:39:4a:0d:cd:45:c1:bf:1b:aa:fa:5e:54:2c: d9:69:60:06:f6:e2:a8:42:d3:3d:ab:ec:4f:04:80:b1:7b:12: eb:88:b6:84:93:35:34:5c:12:ea:a8:dd:16:80:e7:32:8e:47: 62:69:e4:c7:95:25:3a:cb:85:2c:52:50:19:a9:54:c5:02:c9: 8e:8d:82:31:ec:3e:30:a3:57:af:61:2e:0e:0e:a8:06:76:e3: 73:3c:9b:bf:67:7a:82:c8:a9:77:0a:c4:92:ac:fe:f1:72:a1: 8b:65:cb:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjQxMTIyMTgwODMxWhcNMjQxMTI5MTgwODMxWjAYMRYwFAYD VQQDEw02NzQwYzg5Zi03NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGEqZhZgNCad51QaESZNYtsB3S4FmMGMfYsrXzcyPfE5gFdqSF8Bzy38aHwz FtRitEBQG2NWpB+f9zlcJ7CsDTi3S43tO055T5/G749FIzzgjoGKmksFbjPlRqyr fuXYk4Hus6TsJGZymS8tuieL6ITy0tIR+7iHnCIlHh9Yj6dSwtWfeHvrTxtIQ3y2 FKHfpiBw9TOYe4/sjvm08ZWIgrtVF15FUavgjv+ngjwHmCAqXOqLb1N6iY2NKBX5 EmOIGEFS9PfSTKnXvBKcJfVusLhjT284Tjuv9VqVwkZBtBnPwKkT1wIlol3XBZR9 H4Y6lgQP13iqPFyD1vOgsFKVLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeSR5qs yNmsqrJelHkhZn47fN4CMB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKVYBnA743vimxPr1UxNWX9QNL4Qk3Zq6Qz1UQWIMT3BPI3GK967Oc y2KkZ6bhnz5nZX+DNOF/mT8p9pQpg5PB9oPK9t1qe03+nYRlOJk148YeWvqfB712 CULkRxvxjGAuMhHiIuWXQDonqoiip4WdEKJbFwtP/ZUk/DngNyFMFp1yqc6pxDAI rotaMQVm80gaNB+N1zlKDc1Fwb8bqvpeVCzZaWAG9uKoQtM9q+xPBICxexLriLaE kzU0XBLqqN0WgOcyjkdiaeTHlSU6y4UsUlAZqVTFAsmOjYIx7D4wo1evYS4ODqgG duNzPJu/Z3qCyKl3CsSSrP7xcqGLZcuT -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org