$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: fAhPsA3WnI8W9eO79L6ZusOqClvkRFJmXCY47Ce6O3w= Subject key identifier: 16:23:E0:CB:88:9D:E5:80:0B:E8:D5:19:5F:91:A1:08:5D:3B:28:90 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 02B2 Signing time: Thu 21 Nov 2024 01:03:02 +0000 Manifest this update: Thu 21 Nov 2024 01:03:02 +0000 Manifest next update: Thu 28 Nov 2024 01:03:02 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: FIlfnjy7IypNBJuds+dT2a5ApoRBmL5q6WgE1ElhqDY=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Nov 21 01:03:02 2024 GMT Not After : Nov 28 01:03:02 2024 GMT Subject: CN=673e86c6-5517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:db:4b:b8:ae:d8:38:b4:40:92:bb:c9:a8: 25:b0:7f:33:28:dc:ab:be:30:0b:ad:48:98:30:d6: 5b:3a:5d:09:7a:55:ac:e9:f6:1d:43:2b:33:d2:1b: 7b:93:1e:56:89:73:91:d9:48:f6:de:45:cf:f9:23: 6a:56:bd:24:8a:38:57:c0:cd:ad:bc:9b:1f:7d:9a: 7f:5b:20:de:2a:e1:73:3f:de:ac:a9:ed:0d:28:10: ad:c6:22:c2:de:d6:38:0c:9e:32:9f:5d:53:d5:3e: 0f:78:93:78:95:90:7e:e2:ae:f3:59:32:b5:bb:92: 2e:c1:a8:4c:63:84:b3:3e:17:0a:bc:b0:ce:73:82: 45:4d:d4:3d:cd:be:53:b9:8f:ca:4d:56:af:e8:8a: 08:bf:f9:91:43:83:09:8c:ce:60:7f:51:37:7b:b2: 61:df:bb:b7:ee:ed:8a:bf:02:93:c6:83:c6:eb:b6: fb:0c:0f:61:88:26:7f:1a:be:f9:c1:05:5a:e3:58: ae:56:d3:0e:15:24:ca:01:b4:bb:8b:2d:52:bf:42: 29:28:86:09:ed:6d:fd:36:be:bc:49:a2:2f:d8:53: 72:f6:72:29:31:4d:a2:ea:a3:50:36:41:bf:1a:cf: 9f:b9:f1:bb:2b:09:fa:87:60:31:6e:a0:8f:ad:98: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:23:E0:CB:88:9D:E5:80:0B:E8:D5:19:5F:91:A1:08:5D:3B:28:90 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f0:06:3b:99:4f:b1:a6:64:25:10:03:20:3d:28:ce:3a:4a: 29:49:dc:0e:0d:18:f1:ef:90:9a:aa:54:6c:8d:93:10:09:bb: e0:a5:19:33:74:9b:83:c6:a4:dc:19:54:bc:f1:bb:31:58:f8: b5:5f:87:67:37:03:9c:fa:9c:0d:e0:41:c0:19:45:07:c6:8f: 2d:7d:37:0b:a6:06:c0:61:59:90:20:e9:d9:f2:f5:70:38:c8: 32:dd:13:3a:ff:fb:bc:6c:8d:c5:69:39:b0:41:f3:52:33:75: 67:ee:2b:50:79:93:48:a5:a2:cd:d7:ef:d5:7e:e9:64:b5:fa: 51:54:80:33:13:5e:85:81:68:02:a5:c9:81:c5:1c:9d:be:4f: e5:ba:51:b0:01:0e:e7:82:b8:61:86:58:2a:6c:fa:1c:c0:cb: 48:39:b1:d6:35:a8:9c:d9:9c:f9:bc:0d:72:f6:c9:96:e5:f2: 21:4c:8c:49:36:e3:47:5c:6a:30:1e:ab:d4:6b:37:62:e3:77: 02:21:76:18:80:81:b1:b0:4c:60:82:22:de:36:28:12:ce:3e: 31:e9:c6:7c:6c:d1:43:14:65:d0:9f:6d:7b:2d:1f:e3:03:a4: fd:98:48:ac:ed:6b:b0:e8:b2:9c:ba:12:7e:76:ad:d8:72:7c: 15:cb:53:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjQxMTIxMDEwMzAyWhcNMjQxMTI4MDEwMzAyWjAYMRYwFAYD VQQDEw02NzNlODZjNi01NTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d7bS7iu2Di0QJK7yaglsH8zKNyrvjALrUiYMNZbOl0JelWs6fYdQysz0ht7 kx5WiXOR2Uj23kXP+SNqVr0kijhXwM2tvJsffZp/WyDeKuFzP96sqe0NKBCtxiLC 3tY4DJ4yn11T1T4PeJN4lZB+4q7zWTK1u5IuwahMY4SzPhcKvLDOc4JFTdQ9zb5T uY/KTVav6IoIv/mRQ4MJjM5gf1E3e7Jh37u37u2KvwKTxoPG67b7DA9hiCZ/Gr75 wQVa41iuVtMOFSTKAbS7iy1Sv0IpKIYJ7W39Nr68SaIv2FNy9nIpMU2i6qNQNkG/ Gs+fufG7Kwn6h2AxbqCPrZjLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYj4MuI neWAC+jVGV+RoQhdOyiQMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX8AY7mU+xpmQlEAMgPSjOOkopSdwODRjx75CaqlRsjZMQCbvgpRkz dJuDxqTcGVS88bsxWPi1X4dnNwOc+pwN4EHAGUUHxo8tfTcLpgbAYVmQIOnZ8vVw OMgy3RM6//u8bI3FaTmwQfNSM3Vn7itQeZNIpaLN1+/VfulktfpRVIAzE16FgWgC pcmBxRydvk/lulGwAQ7ngrhhhlgqbPocwMtIObHWNaic2Zz5vA1y9smW5fIhTIxJ NuNHXGowHqvUazdi43cCIXYYgIGxsExggiLeNigSzj4x6cZ8bNFDFGXQn217LR/j A6T9mEis7Wuw6LKcuhJ+dq3YcnwVy1NV -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:51 2024 by rpki-client on console-fra.rpki-client.org