$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: luzom9uB5CtA6e47E/u1KTOvHYEW/5sWRpcb7h86C8E= Subject key identifier: B4:65:6E:FB:F8:44:78:88:5F:F3:B2:7F:F9:D5:18:B4:5F:A9:C4:B9 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1BDC Signing time: Fri 22 Nov 2024 16:13:20 +0000 Manifest this update: Fri 22 Nov 2024 16:13:20 +0000 Manifest next update: Fri 29 Nov 2024 16:13:20 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: mVkbyRELb6zToL6SHXaitKr7OK34Akkf7sPq5X9y8S8=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: U3IpEIQd/Tw2xubAYPeBmnwW+xhdoTFgtE7qEfwYvec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7147 (0x1beb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Nov 22 16:13:20 2024 GMT Not After : Nov 29 16:13:20 2024 GMT Subject: CN=6740ada0-3ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:e5:fb:7d:90:21:a2:6a:57:06:79:32:94: b8:48:b6:f7:25:c7:a2:82:d4:25:1d:ea:35:bb:cb: 34:71:b4:35:c6:42:9e:48:e0:4b:35:ee:15:66:11: 70:b9:f3:ff:cb:09:16:ca:f1:3f:cc:f9:29:8b:fa: 56:c3:b6:c6:b1:be:ad:3f:77:ae:88:8b:87:c4:19: 33:f6:44:cc:70:bc:f9:07:d0:92:7f:e5:5d:3e:25: c9:4d:64:90:9a:60:21:28:10:1e:e0:c9:47:c7:65: 9b:51:24:a8:2b:40:9b:0e:65:ab:39:a4:c9:16:9f: 34:05:6d:4a:c5:b9:6c:ca:5a:4b:83:25:08:4e:1b: c2:1b:34:5b:e7:74:03:9b:be:1d:53:f2:48:78:c5: 3c:8d:e8:01:a8:47:0f:cb:22:f9:cf:94:40:9a:21: 14:72:84:2b:78:f6:8e:9f:71:cc:7d:f8:f7:73:7b: 99:16:95:c3:72:88:23:7c:80:ef:73:28:47:56:8d: 81:fd:4d:93:91:52:83:25:28:cc:20:01:08:ae:42: 7f:57:eb:f5:12:c8:ee:93:29:92:06:fc:71:90:1e: 0f:6b:ba:0b:0c:18:89:d8:be:31:2c:33:9d:eb:98: 7b:43:7d:58:51:8c:dd:d6:8d:fc:42:57:35:c3:27: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:6E:FB:F8:44:78:88:5F:F3:B2:7F:F9:D5:18:B4:5F:A9:C4:B9 X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8e:80:64:9b:eb:36:9d:27:06:ae:e1:c1:69:ee:43:0e:92: d1:45:6c:11:9b:e1:8b:d0:a3:de:28:26:05:64:98:14:14:d4: 2d:fe:c2:13:9f:51:19:c1:de:8e:38:4b:28:3e:98:dc:77:01: 4a:55:aa:11:9d:f2:da:c9:cd:02:50:83:ae:d5:03:b3:c5:4a: a5:73:e8:28:08:38:1c:b7:82:74:9c:7d:e1:6b:12:2e:f9:89: bd:f9:19:25:a9:29:1c:83:3b:3d:89:f4:11:21:99:21:f0:41: 63:12:a9:58:06:23:2d:5b:e3:c5:8c:56:fd:fa:ea:11:e1:59: 83:1e:b0:37:1c:d3:a0:81:94:3f:57:88:c0:c4:0f:af:8f:79: ea:df:92:0a:f0:d7:c8:d3:70:81:c4:6f:a6:c3:68:f6:48:2a: 2a:60:1c:32:c3:35:6d:a3:7a:8f:af:10:9b:a1:b1:9a:f2:c5: c8:26:10:1b:c9:d5:df:a3:11:20:9f:c3:a8:8c:cb:23:ed:d9: e0:43:57:32:1e:f7:fc:49:1f:9c:63:d9:c4:0d:24:00:27:a6: 1c:83:bd:ea:f0:d6:f2:1f:46:05:e9:1b:30:99:51:2b:e4:2a: 39:e5:ca:34:dc:01:03:0d:b9:0d:63:07:fb:15:f3:86:ad:c7: 47:11:0b:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjQxMTIyMTYxMzIwWhcNMjQxMTI5MTYxMzIwWjAYMRYwFAYD VQQDEw02NzQwYWRhMC0zZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6Ll+32QIaJqVwZ5MpS4SLb3JceigtQlHeo1u8s0cbQ1xkKeSOBLNe4VZhFw ufP/ywkWyvE/zPkpi/pWw7bGsb6tP3euiIuHxBkz9kTMcLz5B9CSf+VdPiXJTWSQ mmAhKBAe4MlHx2WbUSSoK0CbDmWrOaTJFp80BW1KxblsylpLgyUIThvCGzRb53QD m74dU/JIeMU8jegBqEcPyyL5z5RAmiEUcoQrePaOn3HMffj3c3uZFpXDcogjfIDv cyhHVo2B/U2TkVKDJSjMIAEIrkJ/V+v1EsjukymSBvxxkB4Pa7oLDBiJ2L4xLDOd 65h7Q31YUYzd1o38Qlc1wydmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRlbvv4 RHiIX/Oyf/nVGLRfqcS5MB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDjoBkm+s2nScGruHBae5DDpLRRWwRm+GL0KPeKCYFZJgUFNQt/sIT n1EZwd6OOEsoPpjcdwFKVaoRnfLayc0CUIOu1QOzxUqlc+goCDgct4J0nH3haxIu +Ym9+RklqSkcgzs9ifQRIZkh8EFjEqlYBiMtW+PFjFb9+uoR4VmDHrA3HNOggZQ/ V4jAxA+vj3nq35IK8NfI03CBxG+mw2j2SCoqYBwywzVto3qPrxCbobGa8sXIJhAb ydXfoxEgn8OojMsj7dngQ1cyHvf8SR+cY9nEDSQAJ6Ycg73q8NbyH0YF6RswmVEr 5Co55co03AEDDbkNYwf7FfOGrcdHEQu2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org