$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json) Hash identifier: 3ezOEPeXJxPKHVjIycR9s/PpXxjE/NrAacIRQBMiQYA= Subject key identifier: 95:D3:37:4F:63:9D:56:4C:57:88:BA:0D:FF:90:80:8C:BA:8F:95:2F Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft Manifest number: 23 Signing time: Wed 23 Oct 2024 06:27:48 +0000 Manifest this update: Wed 23 Oct 2024 06:27:47 +0000 Manifest next update: Wed 30 Oct 2024 06:27:47 +0000 Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: /W5ofVjqERI3NNBgkTGyO8sEkS8KTNGkPzv+FRyp68U=) 2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: ap2qykakUMtuugznllb9ElqWzxnqoH122Li4BLMbH9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Validity Not Before: Oct 23 06:27:47 2024 GMT Not After : Oct 30 06:27:47 2024 GMT Subject: CN=67189763-d1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:d0:16:26:33:61:4f:ef:27:d8:34:6b:9d: 45:89:a9:7f:fb:21:38:9c:5b:a9:1b:f0:9b:18:4e: 15:39:93:75:e9:2b:cc:34:fc:67:88:03:d0:60:d3: e6:2e:51:0c:ee:74:83:d8:55:85:bb:99:7d:2c:1a: a5:b8:68:d8:1b:23:31:54:9f:a2:4a:56:cf:fb:00: c8:f6:ca:c9:9c:7f:bc:f4:e6:17:d6:8e:81:0b:7a: ef:40:c6:b1:b9:4a:a5:cf:99:b2:01:41:d5:4d:04: 6b:e2:21:33:61:07:3d:60:ca:f6:9b:ae:9d:71:88: e4:3c:50:9b:f5:06:5d:e1:ab:06:63:32:10:80:95: 28:00:85:d7:16:9a:f0:d6:47:9c:4a:44:f9:39:75: 01:13:c0:cb:63:e0:78:60:bb:9c:6c:53:d4:89:5a: 07:e2:02:4a:f8:9d:6a:11:68:1c:62:98:f5:01:74: d9:6d:9a:27:d1:bf:46:de:d2:61:07:95:c1:44:31: 4e:4e:2e:9a:67:06:d5:76:db:35:68:83:91:11:2e: b7:a5:42:f3:fc:ab:33:bb:db:ca:d2:78:4c:f5:34: 38:8f:f5:81:b1:15:29:24:22:17:c6:6a:7e:f7:6c: 12:f7:61:ab:b8:0b:cc:91:a9:2d:07:0e:ab:76:0a: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:37:4F:63:9D:56:4C:57:88:BA:0D:FF:90:80:8C:BA:8F:95:2F X509v3 Authority Key Identifier: keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f1:fe:d4:c1:3f:75:41:ee:cd:46:e1:07:cd:c3:bd:78:53: c2:9d:c1:8e:3b:c1:48:0d:c4:44:14:1a:21:df:3d:24:bc:7a: e5:77:79:06:3b:d6:00:a3:88:16:fe:30:58:13:af:22:15:03: 8a:d5:f8:59:46:f0:8d:14:e8:4f:06:c3:a0:2a:a5:8e:61:66: 6e:55:5b:10:9f:12:50:50:13:d0:6d:29:05:c3:f4:ed:08:17: 1f:8a:74:5e:bd:a4:72:81:ca:48:20:8e:cf:3b:5d:2f:64:b3: cd:42:b2:f7:7a:b4:6c:f5:fa:4c:e5:b2:83:19:6b:17:0e:48: 53:95:9f:10:32:96:7e:57:fc:4b:39:bb:0a:6a:b3:07:44:76: a0:11:43:f9:35:a8:16:c6:df:da:13:0d:8d:0e:a4:60:3a:32: 38:dc:ce:20:4b:5c:f8:23:2d:ac:73:63:a8:db:bd:c2:c8:fa: c8:ac:46:f5:b4:13:b3:89:b2:07:36:2d:0c:cb:bb:95:6c:6a: 8d:89:cf:03:37:2c:e3:5c:c0:31:e1:c2:a8:78:60:5d:61:54: 76:29:76:ac:dc:ac:d3:16:d5:83:35:ef:c2:4a:f7:3f:ae:7f: 48:d6:90:e3:13:72:56:f2:ed:ef:11:c7:9d:4d:fe:71:70:fd: fe:e4:db:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OEY5QjExMC8GA1UEBRMoQ0ZCQjAzOEZEQjgzODY1NDIwNDk2Mjk4MEFEMjIxQzk0 MTVENUNGRjAeFw0yNDEwMjMwNjI3NDdaFw0yNDEwMzAwNjI3NDdaMBgxFjAUBgNV BAMTDTY3MTg5NzYzLWQxYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYfdAWJjNhT+8n2DRrnUWJqX/7ITicW6kb8JsYThU5k3XpK8w0/GeIA9Bg0+Yu UQzudIPYVYW7mX0sGqW4aNgbIzFUn6JKVs/7AMj2ysmcf7z05hfWjoELeu9AxrG5 SqXPmbIBQdVNBGviITNhBz1gyvabrp1xiOQ8UJv1Bl3hqwZjMhCAlSgAhdcWmvDW R5xKRPk5dQETwMtj4Hhgu5xsU9SJWgfiAkr4nWoRaBximPUBdNltmifRv0be0mEH lcFEMU5OLppnBtV22zVog5ERLrelQvP8qzO728rSeEz1NDiP9YGxFSkkIhfGan73 bBL3Yau4C8yRqS0HDqt2Cl9RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUldM3T2Od VkxXiLoN/5CAjLqPlS8wHwYDVR0jBBgwFoAUz7sDj9uDhlQgSWKYCtIhyUFdXP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4RjlCL0Y5MDJFNTMwNURC RDExRUY4QTA2RUQ0MEM0RjlBRTAyL3o3c0RqOXVEaGxRZ1NXS1lDdEloeVVGZFhQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejdzRGo5dURobFFnU1dLWUN0SWh5VUZkWFA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 RjlCL0Y5MDJFNTMwNURCRDExRUY4QTA2RUQ0MEM0RjlBRTAyL3o3c0RqOXVEaGxR Z1NXS1lDdEloeVVGZFhQOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALTx/tTBP3VB7s1G4QfNw714U8KdwY47wUgNxEQUGiHfPSS8euV3eQY7 1gCjiBb+MFgTryIVA4rV+FlG8I0U6E8Gw6AqpY5hZm5VWxCfElBQE9BtKQXD9O0I Fx+KdF69pHKBykggjs87XS9ks81Csvd6tGz1+kzlsoMZaxcOSFOVnxAyln5X/Es5 uwpqswdEdqARQ/k1qBbG39oTDY0OpGA6MjjcziBLXPgjLaxzY6jbvcLI+sisRvW0 E7OJsgc2LQzLu5Vsao2JzwM3LONcwDHhwqh4YF1hVHYpdqzcrNMW1YM178JK9z+u f0jWkOMTclby7e8Rx51N/nFw/f7k2/o= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:27 2024 by rpki-client on console-fra.rpki-client.org