$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: ME3WYmP6X9x5dv2GCIPkNZp/j1bv3cR90G/PuE+nrjw= Subject key identifier: 56:02:7C:AA:78:06:D7:2A:C7:59:37:CE:DF:7D:FF:A8:43:61:5E:56 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 0C Signing time: Wed 25 Dec 2024 06:10:47 +0000 Manifest this update: Wed 25 Dec 2024 06:10:46 +0000 Manifest next update: Wed 01 Jan 2025 06:10:46 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: pkGd/mQKH4+I4pQjlwd6NEb5jEOyEoBma2Abz2bBtSY=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Dec 25 06:10:46 2024 GMT Not After : Jan 1 06:10:46 2025 GMT Subject: CN=676ba1e7-8179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:b3:fe:2d:0b:18:90:ab:6c:db:7c:ad:5a: 87:f5:25:d8:45:79:3a:f9:8f:07:07:d2:fa:b0:f5: f0:74:bd:76:9b:a8:45:c8:bf:53:f4:3f:cf:d4:de: 37:da:b5:e3:6b:c7:70:df:7e:35:38:14:e6:fb:ec: 13:af:07:0c:b5:13:92:5b:ff:19:d7:98:46:b6:86: 93:81:27:18:09:b7:56:e3:7e:72:e9:28:12:9c:07: 76:c1:68:2d:d0:91:83:2a:91:82:27:e4:ce:94:54: 8e:2e:e7:94:ad:e4:f3:c3:f6:51:d3:0d:85:05:7f: f0:62:64:a3:09:8d:50:27:55:ef:66:b0:b1:66:24: 78:2e:89:6c:44:ad:39:1b:48:d5:7d:64:49:eb:76: ed:85:91:58:9d:5a:61:7e:fe:32:2c:a0:b4:00:03: 3b:08:9f:da:a6:3d:75:fc:18:35:f6:95:5f:66:4f: 48:38:c1:21:fa:0d:81:07:1c:71:a8:99:71:6b:22: c8:a4:9d:65:35:be:b7:cc:85:bb:aa:3d:4c:7a:42: 8b:3d:96:0b:00:aa:de:e1:18:f0:83:aa:05:5e:ed: 60:9c:79:d8:df:d4:f7:cd:2e:e4:6d:f3:0a:3c:8b: 91:4e:98:07:1e:5e:e3:19:0e:0c:4f:1b:a6:29:c8: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:7C:AA:78:06:D7:2A:C7:59:37:CE:DF:7D:FF:A8:43:61:5E:56 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:61:c1:e6:0a:c6:5b:b0:c2:5d:dc:e6:04:4e:80:8f:34:70: 3c:a0:44:9e:c9:34:65:04:88:5f:92:b6:4b:02:36:f7:3d:bc: c1:a1:d9:39:a5:96:7d:98:ce:dd:09:02:6b:0f:e7:60:29:6b: 30:e0:60:38:99:48:92:09:48:0f:04:af:c9:2f:a0:f2:c6:d5: 25:29:46:b4:17:68:f4:aa:d0:97:55:53:e8:19:8e:ca:34:b9: 04:47:cc:7f:08:e9:13:8e:90:e4:11:0c:fe:20:98:8b:e3:de: a3:9f:c3:03:35:0c:63:26:18:81:54:05:4a:af:47:52:55:76: d6:09:37:17:46:31:75:77:b3:45:41:b2:db:9a:f8:23:b0:87: 1d:ae:29:33:d9:6b:02:84:de:ea:0c:12:4e:62:b6:f7:d3:bc: 81:d1:ae:dd:25:61:4b:f1:f1:0a:9d:db:1a:7f:46:f9:80:b8: 77:39:6a:e6:14:36:72:00:ed:40:63:e6:df:4d:7c:af:57:f1: 98:ce:09:13:13:d9:f9:4d:59:64:92:bf:57:17:e2:ab:c7:dd: ef:89:c5:dc:e1:51:87:49:af:ed:83:02:e6:2a:7f:bd:9d:e4: 7e:c2:77:df:db:25:7e:b9:b2:8d:28:8d:d5:c9:76:c7:0e:4a: 12:d7:b6:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNDEyMjUwNjEwNDZaFw0yNTAxMDEwNjEwNDZaMBgxFjAUBgNV BAMTDTY3NmJhMWU3LTgxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy3LP+LQsYkKts23ytWof1JdhFeTr5jwcH0vqw9fB0vXabqEXIv1P0P8/U3jfa teNrx3DffjU4FOb77BOvBwy1E5Jb/xnXmEa2hpOBJxgJt1bjfnLpKBKcB3bBaC3Q kYMqkYIn5M6UVI4u55St5PPD9lHTDYUFf/BiZKMJjVAnVe9msLFmJHguiWxErTkb SNV9ZEnrdu2FkVidWmF+/jIsoLQAAzsIn9qmPXX8GDX2lV9mT0g4wSH6DYEHHHGo mXFrIsiknWU1vrfMhbuqPUx6Qos9lgsAqt7hGPCDqgVe7WCcedjf1PfNLuRt8wo8 i5FOmAceXuMZDgxPG6YpyPZzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVgJ8qngG 1yrHWTfO333/qENhXlYwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABxhweYKxluwwl3c5gROgI80cDygRJ7JNGUEiF+StksCNvc9vMGh2Tml ln2Yzt0JAmsP52ApazDgYDiZSJIJSA8Er8kvoPLG1SUpRrQXaPSq0JdVU+gZjso0 uQRHzH8I6ROOkOQRDP4gmIvj3qOfwwM1DGMmGIFUBUqvR1JVdtYJNxdGMXV3s0VB stua+COwhx2uKTPZawKE3uoMEk5itvfTvIHRrt0lYUvx8Qqd2xp/RvmAuHc5auYU NnIA7UBj5t9NfK9X8ZjOCRMT2flNWWSSv1cX4qvH3e+JxdzhUYdJr+2DAuYqf72d 5H7Cd9/bJX65so0ojdXJdscOShLXti0= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:08 2024 by rpki-client on console-ams.rpki-client.org