$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json) Hash identifier: /SGy4772jEBoroKGFXjcs3JEKODnrM6Lr05o8B97xTI= Subject key identifier: 5E:C6:91:7B:9A:07:B5:15:FC:A4:FF:68:2C:D2:49:81:F4:81:24:F9 Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft Manifest number: 019A Signing time: Sat 23 Nov 2024 01:51:28 +0000 Manifest this update: Sat 23 Nov 2024 01:51:28 +0000 Manifest next update: Sat 30 Nov 2024 01:51:28 +0000 Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: NtvQGjqAIEP8EmLnZtwqZAHhtIIPhRTY4gDhAifhuqE=) 2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: Nov 23 01:51:28 2024 GMT Not After : Nov 30 01:51:28 2024 GMT Subject: CN=67413520-eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:4a:0a:4a:57:da:18:16:69:ea:6e:5d:c2: 2e:ea:0e:19:f0:61:90:49:7e:a3:36:55:9f:87:d5: 6c:83:d8:cc:3d:87:fe:e7:b7:81:61:34:e5:58:10: 52:d6:e2:6b:65:48:fd:67:d7:d9:af:b9:58:5d:2f: 55:68:23:46:e4:63:0e:af:16:e9:db:1d:11:b0:d0: 14:a9:62:2b:af:6e:2a:10:8e:31:48:60:ba:b9:7c: 1f:e2:44:1a:c1:07:dc:0b:69:54:ab:3e:3f:f7:fd: a6:c6:7a:ae:cf:b0:2d:15:d3:d2:b9:f0:fe:08:fa: 03:d5:bf:c5:80:5e:10:61:0b:b8:6d:ff:17:54:5f: 39:51:ee:af:0b:1b:fd:a2:e4:e9:ed:ef:c1:16:ea: 82:b3:48:85:69:73:d4:b8:f9:47:31:19:4e:df:24: cf:78:98:92:cc:bf:d5:82:6d:f5:e8:a7:86:74:4a: c4:e3:e9:1e:33:29:8e:f4:1d:7e:52:79:50:a2:43: fa:57:e8:33:40:bf:03:6f:02:5a:14:f7:4b:bc:56: 3c:96:f6:e2:ab:03:2f:70:71:5e:de:6d:0b:db:08: f5:cf:84:29:de:ea:a7:81:42:7f:e2:a8:55:f7:bb: dc:11:ae:45:5d:c0:64:49:8b:bf:a0:c9:98:13:04: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:91:7B:9A:07:B5:15:FC:A4:FF:68:2C:D2:49:81:F4:81:24:F9 X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:81:d8:c2:fb:01:ab:2c:4c:66:9d:14:b5:26:73:93:e4:96: 94:81:f3:e4:f6:07:30:e9:82:6b:91:aa:08:2a:67:05:5e:f9: 60:a5:83:ce:b2:86:be:4b:9d:4f:07:94:e2:db:f9:02:3a:28: b1:8e:8d:93:30:bd:98:f0:78:34:96:47:95:01:96:1a:84:49: 9d:83:18:ca:e2:d1:bb:e0:35:fd:ae:ec:d4:16:ce:c8:e3:7f: 01:f3:a2:1e:b6:a6:1c:81:e0:86:0e:53:5c:bf:44:db:15:43: af:55:57:ef:c2:12:45:c8:ed:74:40:2b:6d:4a:6e:8a:f9:db: 02:3d:1a:c2:78:29:6e:6f:b3:52:88:2a:2d:fe:4c:45:97:75: e3:28:33:f6:8e:a1:e3:46:2a:45:4a:31:22:a1:cb:e3:21:9b: a6:6e:e9:49:cd:85:55:61:13:72:f8:10:ff:97:6d:5f:6f:32: ee:95:62:52:0b:b9:d1:f4:d2:2a:3b:61:67:e9:3c:ca:6a:81: 79:ce:6d:46:f7:57:f0:0a:71:db:5c:39:7a:18:85:ef:2b:45: 1e:b4:2c:4c:e3:7e:03:19:b9:73:b7:ba:49:e4:45:a6:1e:d4: a0:f2:7d:eb:fa:dc:2b:23:75:f9:93:91:24:01:c5:8e:e2:54: 59:cb:fe:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjQxMTIzMDE1MTI4WhcNMjQxMTMwMDE1MTI4WjAYMRYwFAYD VQQDEw02NzQxMzUyMC1lYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1VKCkpX2hgWaepuXcIu6g4Z8GGQSX6jNlWfh9Vsg9jMPYf+57eBYTTlWBBS 1uJrZUj9Z9fZr7lYXS9VaCNG5GMOrxbp2x0RsNAUqWIrr24qEI4xSGC6uXwf4kQa wQfcC2lUqz4/9/2mxnquz7AtFdPSufD+CPoD1b/FgF4QYQu4bf8XVF85Ue6vCxv9 ouTp7e/BFuqCs0iFaXPUuPlHMRlO3yTPeJiSzL/Vgm316KeGdErE4+keMymO9B1+ UnlQokP6V+gzQL8DbwJaFPdLvFY8lvbiqwMvcHFe3m0L2wj1z4Qp3uqngUJ/4qhV 97vcEa5FXcBkSYu/oMmYEwSj+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7GkXua B7UV/KT/aCzSSYH0gST5MB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6gdjC+wGrLExmnRS1JnOT5JaUgfPk9gcw6YJrkaoIKmcFXvlgpYPO soa+S51PB5Ti2/kCOiixjo2TML2Y8Hg0lkeVAZYahEmdgxjK4tG74DX9ruzUFs7I 438B86IetqYcgeCGDlNcv0TbFUOvVVfvwhJFyO10QCttSm6K+dsCPRrCeClub7NS iCot/kxFl3XjKDP2jqHjRipFSjEiocvjIZumbulJzYVVYRNy+BD/l21fbzLulWJS C7nR9NIqO2Fn6TzKaoF5zm1G91fwCnHbXDl6GIXvK0UetCxM434DGblzt7pJ5EWm HtSg8n3r+twrI3X5k5EkAcWO4lRZy/4/ -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org