$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft File: gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft (raw, json) Hash identifier: +lFWjyADxqnu7rzdrvmOMbgDiRc4HvkGPs+oPG2qxUs= Subject key identifier: 72:DF:0D:CD:ED:E3:5C:D7:F5:C5:85:A1:DA:D8:59:A4:AF:55:6F:80 Authority key identifier: 81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF Certificate issuer: /CN=A91C9F4F/serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft Manifest number: 0104 Signing time: Sat 23 Nov 2024 03:12:26 +0000 Manifest this update: Sat 23 Nov 2024 03:12:25 +0000 Manifest next update: Sat 30 Nov 2024 03:12:25 +0000 Files and hashes: 1: gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl (hash: IPHHc93zKxfKhuiDwfCvMx92+Km2DgsypP50dsFFYQk=) 2: 81E588C21B1F11EE8F6BA876C4F9AE02.roa (hash: YbSnSO8idK0DmEg6LCnsVKLIIYfjTfvJo7EtnNr+cS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F4F/serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Validity Not Before: Nov 23 03:12:25 2024 GMT Not After : Nov 30 03:12:25 2024 GMT Subject: CN=6741481a-8318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:ba:3d:c9:de:fd:42:82:25:75:52:27:0d: ce:9f:b6:d7:cc:f1:dc:c6:05:e0:25:c8:7c:06:5e: e4:54:86:46:8d:f3:d4:44:e7:e7:e0:0e:22:93:f9: 55:85:5b:31:59:94:58:4a:bf:84:c3:c2:a1:a0:4d: 8a:a1:f2:a5:62:ae:1d:d5:85:21:98:fb:b0:08:b1: 16:f5:8a:3b:79:61:64:ea:bf:09:a1:9e:87:8b:40: ca:52:29:da:76:b9:7a:e9:ad:91:ed:16:e5:24:98: 3d:43:4e:c0:5a:61:06:8e:41:dd:c7:6a:ca:cf:f5: 94:f9:d3:2f:d0:c1:64:e8:4b:f2:69:be:dc:16:ff: 9a:a6:24:55:cc:f2:0b:0a:a8:0a:da:bc:64:ff:9f: 55:05:c8:e6:c8:15:76:bd:7f:fc:4e:8c:c0:f3:02: 71:ca:07:36:d2:c7:a6:1f:39:7f:6e:ff:8a:b9:ea: b4:35:d1:65:77:81:25:bf:0c:8c:ed:c3:5e:42:10: 53:09:27:43:7c:83:62:e8:b4:5e:2d:53:66:29:04: 58:1c:ce:8a:f3:b2:a4:ae:d5:06:75:70:d7:40:cd: 85:70:83:49:a5:6b:80:76:92:13:d9:2d:49:70:c2: b3:05:f7:59:b9:0c:22:39:9b:d7:0f:1c:8d:19:0d: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DF:0D:CD:ED:E3:5C:D7:F5:C5:85:A1:DA:D8:59:A4:AF:55:6F:80 X509v3 Authority Key Identifier: keyid:81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d2:05:02:77:9f:9b:6d:7e:09:a5:5b:34:e6:3a:42:05:d4: f7:a0:f8:39:41:c0:16:d2:d8:38:b2:05:56:5f:1a:36:9e:ed: 1b:12:40:01:77:05:72:dd:59:0f:4d:56:c7:ae:33:a9:76:c9: 37:f3:80:95:44:78:78:ce:57:1e:f4:23:67:be:2c:dc:76:ef: cf:2c:15:14:27:b8:f2:88:40:d0:2b:7f:98:06:1a:54:19:84: f0:fa:6e:2a:3d:77:49:bc:cc:39:3b:db:56:a9:74:a9:b1:48: 4d:bf:f9:03:23:63:eb:95:cb:ac:5a:71:a1:97:7c:eb:25:14: 54:2f:6d:5c:ca:b9:55:c2:a2:b6:6a:b0:d8:10:93:07:d1:4a: 79:ae:ca:42:e1:bf:25:5e:d5:31:eb:1f:e1:79:1b:23:3f:9b: 6a:45:6b:c4:19:36:ea:b9:84:7d:81:7a:93:7e:9a:cc:33:05: ad:ae:52:80:12:6e:40:4b:ba:18:71:53:ce:d8:4d:24:73:e6: 1d:6c:1b:43:ba:18:9e:3b:dc:cb:5e:a3:b8:a9:54:7b:52:e9: 64:1e:57:cd:4f:53:97:56:a9:77:aa:a9:36:c8:b7:39:d1:78: 8d:fd:eb:94:76:6c:9b:bc:08:b4:3c:12:51:05:28:06:26:af: be:4c:8b:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlGNEYxMTAvBgNVBAUTKDgxREMxREVFMDcwODMzQTdFNzUzOTcyMDg3NUExNzYw N0VFMTI2Q0YwHhcNMjQxMTIzMDMxMjI1WhcNMjQxMTMwMDMxMjI1WjAYMRYwFAYD VQQDEw02NzQxNDgxYS04MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0u6Pcne/UKCJXVSJw3On7bXzPHcxgXgJch8Bl7kVIZGjfPUROfn4A4ik/lV hVsxWZRYSr+Ew8KhoE2KofKlYq4d1YUhmPuwCLEW9Yo7eWFk6r8JoZ6Hi0DKUina drl66a2R7RblJJg9Q07AWmEGjkHdx2rKz/WU+dMv0MFk6Evyab7cFv+apiRVzPIL CqgK2rxk/59VBcjmyBV2vX/8TozA8wJxygc20semHzl/bv+Kueq0NdFld4ElvwyM 7cNeQhBTCSdDfINi6LReLVNmKQRYHM6K87KkrtUGdXDXQM2FcINJpWuAdpIT2S1J cMKzBfdZuQwiOZvXDxyNGQ28KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLfDc3t 41zX9cWFodrYWaSvVW+AMB8GA1UdIwQYMBaAFIHcHe4HCDOn51OXIIdaF2B+4SbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUY0Ri82RjBEMDUxMDFC MUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02Zm5VNWNnaDFvWFlIN2hK czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dkd2Q3Z2NJTTZmblU1Y2doMW9YWUg3aEpzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUY0Ri82RjBEMDUxMDFCMUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02 Zm5VNWNnaDFvWFlIN2hKczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb0gUCd5+bbX4JpVs05jpCBdT3oPg5QcAW0tg4sgVWXxo2nu0bEkAB dwVy3VkPTVbHrjOpdsk384CVRHh4zlce9CNnvizcdu/PLBUUJ7jyiEDQK3+YBhpU GYTw+m4qPXdJvMw5O9tWqXSpsUhNv/kDI2PrlcusWnGhl3zrJRRUL21cyrlVwqK2 arDYEJMH0Up5rspC4b8lXtUx6x/heRsjP5tqRWvEGTbquYR9gXqTfprMMwWtrlKA Em5AS7oYcVPO2E0kc+YdbBtDuhieO9zLXqO4qVR7UulkHlfNT1OXVql3qqk2yLc5 0XiN/euUdmybvAi0PBJRBSgGJq++TItJ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org