$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: 5xkZun27MI+DFoupHZs6BeqHJw12MGgdid/K/HPaRP0= Subject key identifier: C6:00:4B:77:EE:50:F4:CA:25:DB:23:50:4F:0F:DC:73:EC:68:0C:15 Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: 0147 Signing time: Sat 23 Nov 2024 02:32:09 +0000 Manifest this update: Sat 23 Nov 2024 02:32:08 +0000 Manifest next update: Sat 30 Nov 2024 02:32:08 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: kzhGFpCmreou0dk3/3y8OUZue90N9mpvYq9GkKLNY6U=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: 9pZw51RMY8f+N/Au2Y/vvtY+MBxGFT8ZPDNyzQSdAP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: Nov 23 02:32:08 2024 GMT Not After : Nov 30 02:32:08 2024 GMT Subject: CN=67413ea8-2c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:b4:03:01:2c:93:61:bf:83:16:92:ae:55: f7:5e:af:4f:bb:4c:6c:b3:1b:69:72:d1:3d:d1:2a: d2:9e:48:b9:9b:57:bf:dc:25:dd:ef:25:1f:41:a0: 0c:02:e6:1f:11:e1:36:a5:87:7e:f6:4f:9e:eb:4e: 06:08:3b:a8:05:f0:10:18:36:9b:60:7c:b8:d8:3e: 25:40:2d:3e:dc:0d:67:12:f6:bf:2b:43:7c:43:51: 68:cd:4a:05:46:0d:4a:66:39:93:57:9a:bb:9d:9b: d8:a3:33:8b:68:e4:ab:65:eb:a3:db:0f:62:fa:e5: 20:e4:aa:3e:a1:35:52:e5:79:54:d1:8f:a3:cd:80: 29:1f:b9:62:bb:63:44:da:c4:4d:92:5e:e9:21:7d: 6b:9d:5d:0f:fa:75:13:51:f2:6d:be:43:32:56:ec: 00:42:77:29:89:e2:de:48:3e:ad:df:fa:fb:40:7d: 02:96:2a:30:0b:5c:da:2d:33:54:2a:11:1b:1c:a9: 00:87:da:f9:9a:2e:46:ca:00:c0:a7:cf:71:90:48: 83:a7:e8:cb:45:95:7a:13:cd:11:e3:7d:c3:88:1c: b2:7f:de:07:32:4a:17:88:2d:a4:61:e8:25:a4:2b: 6d:0f:23:45:87:1f:20:50:1a:58:22:4b:db:2c:7e: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:00:4B:77:EE:50:F4:CA:25:DB:23:50:4F:0F:DC:73:EC:68:0C:15 X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:07:72:69:4f:2d:d9:d3:7d:1c:ee:c7:ed:bb:e9:40:96:37: 20:71:fb:b6:5c:5b:47:21:8f:44:d7:5f:c8:8f:ae:36:e8:b1: 9a:18:b5:f1:cb:4b:c7:83:e1:62:a3:94:7d:5c:a9:b6:16:1d: 8a:f7:c8:88:2c:28:2e:fd:71:40:4d:ec:05:4b:8c:24:e7:a3: f8:e7:40:4d:c8:fe:b1:cb:0d:fb:76:14:56:b6:57:e7:f2:bd: 97:3f:5c:f1:0d:a5:51:41:eb:38:8d:5f:b0:5c:4e:1f:79:df: 9c:f5:c6:78:f7:59:50:1a:6b:ee:df:63:4c:73:5d:d5:13:d6: 51:1c:11:04:65:b8:3e:da:e1:8a:6b:14:44:06:e6:41:9f:21: e1:99:d6:46:49:91:e5:6b:7a:cf:09:5e:6e:e6:ec:2d:5f:23: 3e:5b:b4:3b:03:b2:f2:43:c2:7b:81:cd:9b:19:47:f8:0c:04: 96:64:68:d2:94:45:e9:7f:fd:b5:16:6f:6f:e6:5e:66:1d:86: cb:0a:e6:6b:79:f9:ad:37:1f:de:81:15:6a:04:5c:c1:79:67: 98:19:14:21:86:d2:9f:98:ff:67:65:ae:d9:13:90:53:51:9c: 6e:84:91:ca:e8:dc:4d:88:22:4e:74:6c:2e:1f:51:68:46:81: 8e:c1:ef:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjQxMTIzMDIzMjA4WhcNMjQxMTMwMDIzMjA4WjAYMRYwFAYD VQQDEw02NzQxM2VhOC0yYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4W0AwEsk2G/gxaSrlX3Xq9Pu0xssxtpctE90SrSnki5m1e/3CXd7yUfQaAM AuYfEeE2pYd+9k+e604GCDuoBfAQGDabYHy42D4lQC0+3A1nEva/K0N8Q1FozUoF Rg1KZjmTV5q7nZvYozOLaOSrZeuj2w9i+uUg5Ko+oTVS5XlU0Y+jzYApH7liu2NE 2sRNkl7pIX1rnV0P+nUTUfJtvkMyVuwAQncpieLeSD6t3/r7QH0CliowC1zaLTNU KhEbHKkAh9r5mi5GygDAp89xkEiDp+jLRZV6E80R433DiByyf94HMkoXiC2kYegl pCttDyNFhx8gUBpYIkvbLH4F0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYAS3fu UPTKJdsjUE8P3HPsaAwVMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnB3JpTy3Z030c7sftu+lAljcgcfu2XFtHIY9E11/Ij6426LGaGLXx y0vHg+Fio5R9XKm2Fh2K98iILCgu/XFATewFS4wk56P450BNyP6xyw37dhRWtlfn 8r2XP1zxDaVRQes4jV+wXE4fed+c9cZ491lQGmvu32NMc13VE9ZRHBEEZbg+2uGK axREBuZBnyHhmdZGSZHla3rPCV5u5uwtXyM+W7Q7A7LyQ8J7gc2bGUf4DASWZGjS lEXpf/21Fm9v5l5mHYbLCuZrefmtNx/egRVqBFzBeWeYGRQhhtKfmP9nZa7ZE5BT UZxuhJHK6NxNiCJOdGwuH1FoRoGOwe8D -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:49 2024 by rpki-client on console-fra.rpki-client.org