$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: I6whp3G+HT+A2az/lNb004in+NalPVwxWxLcZZCSmQQ= Subject key identifier: 8C:AD:96:D3:FE:B0:B7:97:19:02:F4:D3:58:26:0C:9B:4E:7E:E4:96 Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 022B Signing time: Wed 27 Nov 2024 01:30:37 +0000 Manifest this update: Wed 27 Nov 2024 01:30:36 +0000 Manifest next update: Wed 04 Dec 2024 01:30:36 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: B5zLOd9F56h4Eh/Mc9PSNvo/uF/2jt4F18shN2AUWts=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Validity Not Before: Nov 27 01:30:36 2024 GMT Not After : Dec 4 01:30:36 2024 GMT Subject: CN=6746763c-1281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:83:87:30:7a:1f:e0:cc:8c:7f:22:22:e3: ea:e0:6e:57:57:d2:51:81:aa:e0:2d:74:71:68:3e: 02:76:eb:6a:8e:a5:f8:e2:f2:6e:85:a5:5f:ea:a7: 0e:35:c4:29:f3:e2:b6:89:56:5a:58:e5:93:fe:4c: 38:dc:3e:62:20:01:50:d4:1e:8d:02:47:d7:48:54: c3:ed:1f:f0:df:8e:2e:48:e4:f7:63:f2:ab:91:eb: 68:62:16:98:44:a5:c4:01:fa:c7:74:ce:50:c6:e3: 2b:da:3d:6a:b6:85:33:98:29:79:ce:c6:70:22:a6: 42:99:65:c5:cd:2e:9e:ec:90:24:e2:10:44:fd:2a: bb:d5:e2:aa:17:09:dc:15:7c:58:d4:7b:e9:15:90: 35:cd:b8:4f:54:dd:a2:3b:c9:4d:fa:5c:06:d0:da: 58:25:9a:a7:ab:e9:20:b8:8a:dc:ef:03:a0:a2:eb: 0a:0b:10:71:57:8e:02:f6:22:06:94:dc:17:30:61: 17:01:43:1b:6a:a3:a1:6d:65:8b:8e:16:2e:1b:33: 9c:3e:ed:19:c9:a0:ea:d3:3c:27:ff:1e:f3:58:f3: c1:a6:ad:ee:75:a7:f4:e3:56:77:23:c8:bf:f1:0b: e7:07:83:f7:b4:4b:ee:b2:84:29:e8:3d:b4:d0:f6: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:96:D3:FE:B0:B7:97:19:02:F4:D3:58:26:0C:9B:4E:7E:E4:96 X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:56:2c:81:bd:67:70:76:80:d9:a3:0d:06:04:8a:b0:a6:a3: 48:6d:8f:04:fa:2b:36:8d:ef:a3:b4:64:a2:10:55:82:41:50: 17:ca:8b:9e:ee:99:24:c3:70:d5:93:d9:72:31:00:3e:78:94: 6d:dc:4b:b6:5f:26:ce:82:a6:6e:b6:3c:4f:1d:11:da:e1:33: 6d:b7:5e:b4:47:d9:6d:46:08:ed:f3:73:56:b9:fd:6d:99:bc: 75:bf:89:bf:4c:99:62:e0:dd:3a:f9:a7:ab:1a:6c:1c:c4:52: 03:71:cd:46:e6:5d:95:ed:10:12:4d:7e:4b:47:0c:98:90:62: 8b:c7:5f:3d:34:a1:90:b3:53:a2:d2:7f:6c:91:83:47:b4:8f: ba:a6:a4:ce:61:21:d0:57:6d:23:6e:23:27:10:99:9a:96:4c: 06:d5:a4:4b:a9:80:6a:c3:0f:9a:e3:31:78:1f:b5:59:ca:00: 33:42:d1:1b:d0:45:05:13:f7:13:4a:13:6e:75:80:83:d4:1d: c3:07:29:65:17:7d:ab:1e:22:9c:48:51:a1:3c:24:a7:3b:29: 51:3f:ba:a6:83:83:28:40:8b:f4:d0:7f:60:76:62:ed:23:e5: 91:b7:b5:fa:d4:7c:a5:5d:32:75:70:4e:93:b1:d9:ac:b0:dd: 5b:b0:03:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjQxMTI3MDEzMDM2WhcNMjQxMjA0MDEzMDM2WjAYMRYwFAYD VQQDEw02NzQ2NzYzYy0xMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3aDhzB6H+DMjH8iIuPq4G5XV9JRgargLXRxaD4CdutqjqX44vJuhaVf6qcO NcQp8+K2iVZaWOWT/kw43D5iIAFQ1B6NAkfXSFTD7R/w344uSOT3Y/KrketoYhaY RKXEAfrHdM5QxuMr2j1qtoUzmCl5zsZwIqZCmWXFzS6e7JAk4hBE/Sq71eKqFwnc FXxY1HvpFZA1zbhPVN2iO8lN+lwG0NpYJZqnq+kguIrc7wOgousKCxBxV44C9iIG lNwXMGEXAUMbaqOhbWWLjhYuGzOcPu0ZyaDq0zwn/x7zWPPBpq3udaf041Z3I8i/ 8QvnB4P3tEvusoQp6D200Pb7mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIytltP+ sLeXGQL001gmDJtOfuSWMB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ViyBvWdwdoDZow0GBIqwpqNIbY8E+is2je+jtGSiEFWCQVAXyoue 7pkkw3DVk9lyMQA+eJRt3Eu2XybOgqZutjxPHRHa4TNtt160R9ltRgjt83NWuf1t mbx1v4m/TJli4N06+aerGmwcxFIDcc1G5l2V7RASTX5LRwyYkGKLx189NKGQs1Oi 0n9skYNHtI+6pqTOYSHQV20jbiMnEJmalkwG1aRLqYBqww+a4zF4H7VZygAzQtEb 0EUFE/cTShNudYCD1B3DByllF32rHiKcSFGhPCSnOylRP7qmg4MoQIv00H9gdmLt I+WRt7X61HylXTJ1cE6TsdmssN1bsAOT -----END CERTIFICATE-----Generated at Wed Nov 27 04:07:02 2024 by rpki-client on console-ams.rpki-client.org