$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft File: GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json) Hash identifier: WMs88B7lfu4XxScJmEgCO0Zq/uuGgTi5OpRUXVfsS4Q= Subject key identifier: 2A:33:8D:27:42:CA:37:4B:3E:DC:4F:40:A7:7E:1F:37:2B:45:21:B2 Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 Certificate issuer: /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft Manifest number: E4 Signing time: Thu 21 Nov 2024 03:35:54 +0000 Manifest this update: Thu 21 Nov 2024 03:35:53 +0000 Manifest next update: Thu 28 Nov 2024 03:35:53 +0000 Files and hashes: 1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: Y1AN1Z/HQlAOHR53POYjU35ALL0Ujhtx48hHls0wPuo=) 2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Validity Not Before: Nov 21 03:35:53 2024 GMT Not After : Nov 28 03:35:53 2024 GMT Subject: CN=673eaa9a-6511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:27:0b:83:bf:b0:82:a6:56:6e:4e:13:6a: aa:af:55:90:e4:67:4d:f6:27:6d:3e:21:54:dd:a3: 80:3d:8d:a9:ac:79:0f:30:b8:fc:6a:df:4b:65:d8: 5a:bc:47:f6:ba:82:32:65:05:a5:3e:ad:3b:56:ca: b5:e9:59:4b:c6:77:cb:00:52:28:2a:c1:07:6a:f2: ac:08:11:c5:37:8e:c0:5b:d1:f8:93:c9:06:cb:fc: 85:19:b3:da:ee:c9:50:31:b2:84:4a:1d:56:50:2f: 86:91:74:db:a9:ef:75:4b:18:ce:cc:2b:c0:bd:2c: 33:40:a2:6a:3b:15:8a:62:1b:1b:71:7f:1e:2b:ed: eb:c0:8a:8f:de:38:63:f8:29:89:54:52:bf:60:8f: 43:94:be:4f:ea:02:f7:be:a0:4f:cb:32:94:35:51: 5f:b8:b7:59:5b:29:f1:55:8b:0b:76:44:c7:af:ae: 49:48:d7:2c:e0:08:19:4a:51:f9:d0:79:c8:e7:a8: 17:65:00:16:7f:26:25:ec:e0:28:f7:de:e0:2e:00: b6:3d:5e:47:ae:54:52:fa:c3:40:00:24:31:09:4a: 74:36:d3:35:42:3b:f5:95:79:3f:bb:22:b1:a2:63: ba:42:b1:64:99:f0:5a:ef:8b:94:f9:90:75:84:6a: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:8D:27:42:CA:37:4B:3E:DC:4F:40:A7:7E:1F:37:2B:45:21:B2 X509v3 Authority Key Identifier: keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4a:4d:6d:0c:c9:84:02:63:77:32:25:85:89:11:28:e1:13: 74:9f:1b:61:2f:f7:fe:67:bf:45:ca:da:52:24:f3:dd:7d:f1: 97:bc:3b:73:1d:01:b7:a9:d9:36:dd:4e:b3:4e:d4:9b:b1:0b: 83:14:0e:54:1a:48:73:66:eb:99:7a:0a:4f:1b:68:ab:01:91: 62:83:c2:6c:94:45:3b:7b:e9:e6:50:10:01:68:c1:6e:67:22: 2a:d4:32:66:fd:cc:2f:fa:6f:78:a3:1a:a7:39:35:72:ae:76: c1:b6:83:e4:63:92:5f:26:e3:7f:d8:19:db:46:93:62:25:fa: ee:ac:f6:e1:a4:2d:f9:96:9b:f7:0b:90:29:d5:df:6a:c9:2a: 2d:91:2d:05:eb:e9:99:9e:1e:d5:90:a9:c2:4e:48:a3:92:4f: 80:bf:62:83:3c:2e:a2:00:a2:58:39:51:47:b0:bf:4c:d4:23: d4:5a:bb:24:b6:5a:30:86:61:29:61:99:0e:54:90:52:9b:c6: 18:e5:83:23:14:07:c9:ef:6b:62:27:da:b0:30:1d:f6:af:a1: 12:27:fa:0c:67:8c:24:a1:7c:72:a3:fe:fa:45:16:5c:db:23: b4:c6:5f:4e:3d:d4:4d:e6:90:86:ae:34:60:45:5f:c1:c5:6c: 23:c3:84:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4 RTJBNjI2NjEwHhcNMjQxMTIxMDMzNTUzWhcNMjQxMTI4MDMzNTUzWjAYMRYwFAYD VQQDEw02NzNlYWE5YS02NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFgnC4O/sIKmVm5OE2qqr1WQ5GdN9idtPiFU3aOAPY2prHkPMLj8at9LZdha vEf2uoIyZQWlPq07Vsq16VlLxnfLAFIoKsEHavKsCBHFN47AW9H4k8kGy/yFGbPa 7slQMbKESh1WUC+GkXTbqe91SxjOzCvAvSwzQKJqOxWKYhsbcX8eK+3rwIqP3jhj +CmJVFK/YI9DlL5P6gL3vqBPyzKUNVFfuLdZWynxVYsLdkTHr65JSNcs4AgZSlH5 0HnI56gXZQAWfyYl7OAo997gLgC2PV5HrlRS+sNAACQxCUp0NtM1Qjv1lXk/uyKx omO6QrFkmfBa74uU+ZB1hGpWwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCozjSdC yjdLPtxPQKd+HzcrRSGyMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT MGFnanN2S2RyY0NPS21KbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Sk1tDMmEAmN3MiWFiREo4RN0nxthL/f+Z79FytpSJPPdffGXvDtz HQG3qdk23U6zTtSbsQuDFA5UGkhzZuuZegpPG2irAZFig8JslEU7e+nmUBABaMFu ZyIq1DJm/cwv+m94oxqnOTVyrnbBtoPkY5JfJuN/2BnbRpNiJfrurPbhpC35lpv3 C5Ap1d9qySotkS0F6+mZnh7VkKnCTkijkk+Av2KDPC6iAKJYOVFHsL9M1CPUWrsk tlowhmEpYZkOVJBSm8YY5YMjFAfJ72tiJ9qwMB32r6ESJ/oMZ4wkoXxyo/76RRZc 2yO0xl9OPdRN5pCGrjRgRV/BxWwjw4Q8 -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org