$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: AciT5dedkVpBMfmSySY7WRcKwL0ZIGHSN994bMEw8C8= Subject key identifier: 0A:E0:B1:19:B4:C0:56:32:1A:5E:BA:1D:D6:6A:9C:92:4C:A6:74:03 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 0646 Signing time: Wed 20 Nov 2024 22:22:58 +0000 Manifest this update: Wed 20 Nov 2024 22:22:57 +0000 Manifest next update: Wed 27 Nov 2024 22:22:57 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: 7NSwtEFrfroM6juMfDmVl6+j4ExlQtc0q+5ZnodEelg=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: bAUeoxBtbiQheQo5rWitJs3VRiUoXDry7Vgfb3IUS/8=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: FmdbY9QipzaQlUDFsL3jY9YqRtDMRVNSSqRy0Syi7ec=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: g+zMllLE2VCl9M+OB2Fx9FsTbN85M1LU1pE2Ig0HpqA=) 5: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: bdZg40gcDuasqdcf5c9xcUlQkygEWmmH+OxQDYlQCTY=) 6: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: 2/EpyYh9L3WQqowr9GLqzoOtq1n1Fu6tM/w0oRuJZFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Nov 20 22:22:57 2024 GMT Not After : Nov 27 22:22:57 2024 GMT Subject: CN=673e6141-f571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9d:9d:2c:95:38:ec:02:af:76:4a:97:7a:62: dc:4a:c3:8a:da:e4:b4:81:01:26:a1:fc:3e:1b:4e: a3:73:70:5b:78:1a:23:9c:5f:10:36:ed:00:ff:c1: f2:e5:05:44:30:17:3b:6a:2f:18:90:08:c2:98:7b: 64:30:94:4f:48:60:31:9d:3e:49:07:f3:c6:44:b5: 2e:6a:be:c6:7e:39:d4:81:d0:06:cf:e3:0d:8f:6a: 1a:ab:77:b6:c4:34:6c:b5:52:5b:eb:bc:9d:c5:46: bd:a8:33:0f:37:27:5a:df:20:bc:b1:5a:a6:f3:7d: a5:fc:76:a9:9c:a1:29:bc:31:4b:80:50:10:3b:31: 63:8c:c8:b6:7a:23:56:2a:05:2b:e1:cf:41:0d:c5: 53:75:c8:41:aa:a0:72:bf:d4:5f:df:a9:3e:4e:a9: 44:8f:c7:9f:21:6b:22:1d:cf:b8:aa:b9:98:38:b3: 55:e9:50:a6:b2:69:da:2e:f0:50:4f:d2:07:d6:47: 03:66:24:71:19:1e:33:e6:12:fb:f8:de:d2:2e:0d: 01:57:9a:f5:34:07:81:76:55:d8:5e:62:09:08:0a: bd:da:94:b7:c0:a2:d4:0d:d1:ff:14:bb:27:7f:08: b5:5f:f0:93:30:19:86:1b:71:2b:34:9a:62:1e:a1: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E0:B1:19:B4:C0:56:32:1A:5E:BA:1D:D6:6A:9C:92:4C:A6:74:03 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d6:eb:22:4c:17:ef:98:06:90:1f:d3:44:45:86:ec:e6:7f: 75:57:d1:fb:9f:e2:a9:da:f0:72:55:2a:11:9a:52:d0:bf:a0: 42:ab:96:56:6f:57:eb:a3:af:81:80:23:1e:5c:a9:86:d1:9c: a3:b7:ed:26:95:5c:8a:d5:e4:71:1c:34:ef:69:1e:60:f1:29: c2:90:b1:3a:81:68:77:73:43:69:87:b0:fd:9e:f4:45:b2:a0: 1f:57:47:fd:a4:33:78:61:19:64:55:f3:61:4c:ad:0b:04:44: e6:b8:01:47:a1:d7:b3:a5:55:af:0a:5e:8c:f0:eb:fc:23:0a: 2d:a6:8e:11:76:de:18:ed:82:37:66:79:a5:72:be:af:d4:9b: 30:26:e9:6a:b5:a6:c6:d1:89:be:53:dd:37:65:ec:c5:56:0b: f1:62:87:a2:33:8c:32:56:df:04:54:99:0b:a6:18:50:ea:d3: e1:25:d6:6e:44:0d:3a:27:d3:d3:07:60:03:5a:9e:44:c1:4a: da:3e:27:cd:b6:02:ab:6f:d6:45:5b:1e:e3:0a:f8:5c:a7:72: 92:78:7f:26:c9:cb:19:07:93:d8:d5:e8:7d:22:a9:58:a3:1b: 2b:d9:9d:17:29:e1:fa:d8:17:82:1a:a6:a9:9a:4b:29:e3:9b: ad:08:a0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjQxMTIwMjIyMjU3WhcNMjQxMTI3MjIyMjU3WjAYMRYwFAYD VQQDEw02NzNlNjE0MS1mNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Z2dLJU47AKvdkqXemLcSsOK2uS0gQEmofw+G06jc3BbeBojnF8QNu0A/8Hy 5QVEMBc7ai8YkAjCmHtkMJRPSGAxnT5JB/PGRLUuar7GfjnUgdAGz+MNj2oaq3e2 xDRstVJb67ydxUa9qDMPNyda3yC8sVqm832l/HapnKEpvDFLgFAQOzFjjMi2eiNW KgUr4c9BDcVTdchBqqByv9Rf36k+TqlEj8efIWsiHc+4qrmYOLNV6VCmsmnaLvBQ T9IH1kcDZiRxGR4z5hL7+N7SLg0BV5r1NAeBdlXYXmIJCAq92pS3wKLUDdH/FLsn fwi1X/CTMBmGG3ErNJpiHqE5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArgsRm0 wFYyGl66HdZqnJJMpnQDMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA71usiTBfvmAaQH9NERYbs5n91V9H7n+Kp2vByVSoRmlLQv6BCq5ZW b1fro6+BgCMeXKmG0Zyjt+0mlVyK1eRxHDTvaR5g8SnCkLE6gWh3c0Nph7D9nvRF sqAfV0f9pDN4YRlkVfNhTK0LBETmuAFHodezpVWvCl6M8Ov8Iwotpo4Rdt4Y7YI3 Znmlcr6v1JswJulqtabG0Ym+U903ZezFVgvxYoeiM4wyVt8EVJkLphhQ6tPhJdZu RA06J9PTB2ADWp5EwUraPifNtgKrb9ZFWx7jCvhcp3KSeH8mycsZB5PY1eh9IqlY oxsr2Z0XKeH62BeCGqapmksp45utCKAt -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:03 2024 by rpki-client on console-ams.rpki-client.org