$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: USdaN7rQVEFN+G9DXcRlDGzOnhNMB9Y3s/dP5Dwd8Ak= Subject key identifier: 6C:A6:A2:85:54:1E:2B:AE:F6:65:84:4B:5F:B2:DE:3F:A9:10:E5:CE Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 0850 Signing time: Fri 22 Nov 2024 20:26:49 +0000 Manifest this update: Fri 22 Nov 2024 20:26:49 +0000 Manifest next update: Fri 29 Nov 2024 20:26:49 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: DcZaJHEBHMNTvOaq4cWZqZ9bnPeHcVQ+qRE7I9Iwe1M=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Nov 22 20:26:49 2024 GMT Not After : Nov 29 20:26:49 2024 GMT Subject: CN=6740e909-358c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:09:c4:80:b9:ae:1b:48:86:e9:37:3d:f6: d9:51:d2:6b:98:a1:6f:ce:b4:0d:49:02:fa:d7:54: 9e:84:41:e7:85:3c:4f:84:ad:48:4c:4a:8e:84:43: 00:56:85:3d:29:32:06:e3:b5:6e:c7:65:46:60:9d: d7:ea:65:f6:a0:a9:d1:36:c2:65:72:f0:c6:a8:f5: 40:5c:94:79:c9:16:fb:3e:5d:ff:d4:54:81:ce:43: 51:9e:66:58:66:1f:2c:70:fc:fc:45:01:b4:8e:05: 71:e0:dc:1e:e3:8f:09:91:0d:f0:22:de:3f:be:d4: 87:6c:e8:95:3d:87:e0:30:4a:b9:26:93:dd:19:6a: 11:35:dd:a1:1f:4a:0d:40:31:e3:51:8d:06:78:43: ba:ac:e9:bc:8b:7a:85:c8:1f:fb:76:94:96:00:fe: a3:c9:e1:9d:17:cb:44:a4:c2:9f:28:7f:75:89:b5: 8b:96:38:38:9b:80:86:4b:02:56:c4:3a:c6:5d:70: 9b:03:35:13:cf:55:af:06:12:6f:ff:9f:57:29:3b: 53:1b:62:40:67:e2:06:84:f4:e9:f3:46:4a:1a:ea: 63:7b:ee:85:c5:d1:48:de:6b:4b:43:17:db:b0:e9: e4:b4:bf:93:aa:9f:2b:9d:7a:f0:7a:ff:0c:62:ba: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A6:A2:85:54:1E:2B:AE:F6:65:84:4B:5F:B2:DE:3F:A9:10:E5:CE X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:9d:a5:d8:81:cb:21:11:33:31:a8:c2:db:f2:1b:07:ec:c6: fd:7f:09:07:9e:9d:26:e5:53:92:01:41:31:93:a6:90:31:a8: 5a:66:c7:d1:94:47:de:d6:37:70:d5:2c:22:bb:4a:aa:c6:c9: a9:8c:a3:f2:7d:40:76:48:a0:ce:7b:35:f6:cf:a9:21:71:43: 77:23:cf:74:c7:4f:2c:72:3d:e1:6d:0f:3f:6c:4d:e4:78:62: e4:16:0d:36:52:f6:e6:b4:d3:22:52:86:c9:45:e0:d9:45:47: ee:b8:1a:4f:ee:d0:08:79:1f:7e:fb:0f:d5:7a:a7:00:e9:3f: 86:df:05:5f:c2:4d:cd:db:d5:80:85:46:9b:3e:9c:a5:94:f9: 7c:f4:16:40:cd:56:b9:ed:6e:e9:b4:9e:bd:c1:1c:3f:4c:24: 74:01:e0:5b:d0:34:cc:71:6e:ce:15:59:b7:70:d8:9c:04:b0: 38:8d:83:c2:77:83:36:36:b7:aa:59:0e:dd:f2:4d:f5:40:3c: fd:ee:73:f0:a0:88:e7:14:21:81:4f:cd:a5:32:92:95:24:8e: ee:47:09:fe:d2:b7:9b:73:c9:9a:fd:30:34:8f:39:68:57:7d: 28:bb:b0:6b:44:96:27:dc:da:92:fb:86:4f:5e:c8:ac:df:fd: e8:51:a0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjQxMTIyMjAyNjQ5WhcNMjQxMTI5MjAyNjQ5WjAYMRYwFAYD VQQDEw02NzQwZTkwOS0zNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNIJxIC5rhtIhuk3PfbZUdJrmKFvzrQNSQL611SehEHnhTxPhK1ITEqOhEMA VoU9KTIG47Vux2VGYJ3X6mX2oKnRNsJlcvDGqPVAXJR5yRb7Pl3/1FSBzkNRnmZY Zh8scPz8RQG0jgVx4Nwe448JkQ3wIt4/vtSHbOiVPYfgMEq5JpPdGWoRNd2hH0oN QDHjUY0GeEO6rOm8i3qFyB/7dpSWAP6jyeGdF8tEpMKfKH91ibWLljg4m4CGSwJW xDrGXXCbAzUTz1WvBhJv/59XKTtTG2JAZ+IGhPTp80ZKGupje+6FxdFI3mtLQxfb sOnktL+Tqp8rnXrwev8MYrq0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGymooVU Hiuu9mWES1+y3j+pEOXOMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpnaXYgcshETMxqMLb8hsH7Mb9fwkHnp0m5VOSAUExk6aQMahaZsfR lEfe1jdw1Swiu0qqxsmpjKPyfUB2SKDOezX2z6khcUN3I890x08scj3hbQ8/bE3k eGLkFg02UvbmtNMiUobJReDZRUfuuBpP7tAIeR9++w/VeqcA6T+G3wVfwk3N29WA hUabPpyllPl89BZAzVa57W7ptJ69wRw/TCR0AeBb0DTMcW7OFVm3cNicBLA4jYPC d4M2NreqWQ7d8k31QDz97nPwoIjnFCGBT82lMpKVJI7uRwn+0rebc8ma/TA0jzlo V30ou7BrRJYn3NqS+4ZPXsis3/3oUaDG -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org