$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: 7ziNGKNxLuHbeAfeLaX7/vAS6s6pZ2FIFQr/9Ku3KH8= Subject key identifier: BA:18:DC:5B:F4:F5:88:DB:7B:12:0E:AA:90:B0:72:75:64:1A:CB:FA Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 05E6 Signing time: Fri 22 Nov 2024 22:26:49 +0000 Manifest this update: Fri 22 Nov 2024 22:26:48 +0000 Manifest next update: Fri 29 Nov 2024 22:26:48 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: s724j3vPgi5Q8KtPrSumQqNCxNx5HikEumzrArwVFFw=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: 01f25j3R54MWvOTz10L2YoiOpP1/37rLlOmREDYrZ44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: Nov 22 22:26:48 2024 GMT Not After : Nov 29 22:26:48 2024 GMT Subject: CN=67410529-a5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:2a:36:a0:9c:47:a3:92:d7:cf:3f:9b:62: 2e:4f:44:02:97:2a:19:20:89:f3:76:4e:39:ad:85: 44:c2:d5:95:55:46:22:86:b3:94:5c:92:ef:62:e0: 61:3b:5a:aa:b0:74:78:52:65:00:56:c6:5c:0b:94: 8b:b4:4e:44:b4:cb:89:10:75:c4:07:f8:87:d9:eb: e3:bf:f4:7f:47:f6:55:4b:3f:07:6a:72:37:79:b6: 9d:70:e7:d6:b4:6e:06:7b:3f:86:49:77:63:09:70: dc:41:7f:43:51:c8:82:ee:e1:55:00:40:10:08:43: 83:60:f4:b3:c7:94:ff:80:82:03:0d:62:85:8f:f4: 18:8c:f5:57:d9:86:d4:bb:fc:b8:f4:39:fe:4a:c4: 66:0b:e4:32:f5:8b:15:ff:fe:74:82:d3:c9:6a:60: c2:3d:36:94:57:4b:46:59:75:d4:e4:43:a7:f5:3e: 10:fe:9a:78:56:2f:4c:49:4b:6f:b8:00:93:76:fe: 43:9a:d9:07:34:05:96:42:09:c5:64:05:31:23:c8: 57:ba:f9:ea:49:b8:6f:56:6a:40:85:44:da:c8:f8: 0b:20:e6:31:b7:37:83:5a:36:95:b0:f9:e4:a3:86: 10:c6:68:3b:b6:d2:65:70:20:2e:ef:5b:e5:7f:7d: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:18:DC:5B:F4:F5:88:DB:7B:12:0E:AA:90:B0:72:75:64:1A:CB:FA X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:78:3d:d9:81:6b:0c:1f:64:59:39:3a:89:de:ef:b1:75:67: 33:e0:6a:1f:5e:84:f3:5c:81:45:3e:cc:45:d8:d7:02:2e:28: 7b:61:bc:3d:85:50:76:34:23:71:71:d2:4f:8f:c8:7f:bc:75: 14:e3:8d:5a:a3:3a:47:f7:20:f9:5f:30:33:ce:a8:9e:b1:da: 49:f3:39:65:50:e8:73:5f:06:f5:8d:2a:ee:ef:a7:09:2b:a0: dc:0b:da:25:46:f6:01:eb:8e:b3:20:6f:01:d9:5a:dc:c5:2b: 3b:0e:e1:07:0f:b0:64:ce:20:78:4f:da:24:54:39:07:ba:79: 76:60:83:f7:2b:db:a0:f0:29:73:62:e6:d8:b5:a8:91:3d:0c: 29:8d:3e:88:3c:0a:22:78:f1:09:2d:82:11:6e:ad:66:3f:e2: 33:4d:01:1f:25:c0:2e:17:53:e3:34:c3:5b:ad:6f:9a:31:a7: 5f:3b:51:5e:6a:08:7d:0c:29:60:8c:e9:11:44:f0:2a:89:40: cd:72:32:6f:e0:32:d1:f4:7c:f5:d7:8b:3e:d6:65:6b:7d:76: b6:94:be:73:9a:a0:b6:45:fb:19:dc:a2:ba:a3:6d:fa:05:b2: ef:f3:f7:4b:5f:0a:f9:5e:fb:f9:f4:16:bf:34:dd:cc:50:54: a4:c9:6e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjQxMTIyMjIyNjQ4WhcNMjQxMTI5MjIyNjQ4WjAYMRYwFAYD VQQDEw02NzQxMDUyOS1hNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vkqNqCcR6OS188/m2IuT0QClyoZIInzdk45rYVEwtWVVUYihrOUXJLvYuBh O1qqsHR4UmUAVsZcC5SLtE5EtMuJEHXEB/iH2evjv/R/R/ZVSz8HanI3ebadcOfW tG4Gez+GSXdjCXDcQX9DUciC7uFVAEAQCEODYPSzx5T/gIIDDWKFj/QYjPVX2YbU u/y49Dn+SsRmC+Qy9YsV//50gtPJamDCPTaUV0tGWXXU5EOn9T4Q/pp4Vi9MSUtv uACTdv5DmtkHNAWWQgnFZAUxI8hXuvnqSbhvVmpAhUTayPgLIOYxtzeDWjaVsPnk o4YQxmg7ttJlcCAu71vlf30giwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoY3Fv0 9YjbexIOqpCwcnVkGsv6MB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDeD3ZgWsMH2RZOTqJ3u+xdWcz4GofXoTzXIFFPsxF2NcCLih7Ybw9 hVB2NCNxcdJPj8h/vHUU441aozpH9yD5XzAzzqiesdpJ8zllUOhzXwb1jSru76cJ K6DcC9olRvYB646zIG8B2VrcxSs7DuEHD7BkziB4T9okVDkHunl2YIP3K9ug8Clz YubYtaiRPQwpjT6IPAoiePEJLYIRbq1mP+IzTQEfJcAuF1PjNMNbrW+aMadfO1Fe agh9DClgjOkRRPAqiUDNcjJv4DLR9Hz114s+1mVrfXa2lL5zmqC2RfsZ3KK6o236 BbLv8/dLXwr5Xvv59Ba/NN3MUFSkyW4X -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org