$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: GpnME1ENEjVb+9x00UxRTbEZ/Frjn92VKfijHqKKqtc= Subject key identifier: 08:6E:6E:F1:6A:97:62:72:70:7D:C2:03:F1:8D:30:D8:C6:40:CD:72 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 07A0 Signing time: Fri 22 Nov 2024 20:50:17 +0000 Manifest this update: Fri 22 Nov 2024 20:50:16 +0000 Manifest next update: Fri 29 Nov 2024 20:50:16 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: rToRAbkWUSftghD7biha6mWYe+X5PVaFxOa/TtGBXQg=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Nov 22 20:50:16 2024 GMT Not After : Nov 29 20:50:16 2024 GMT Subject: CN=6740ee88-48f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:c8:b0:34:bd:d6:bf:8a:7a:d4:29:34:59: f2:d9:0f:3b:59:ce:c5:ce:01:b0:3e:9c:5a:6f:d8: 40:98:a4:65:28:10:16:24:ec:bc:62:8f:d4:dd:1b: 16:d9:38:46:55:a3:28:14:6c:1b:3b:7f:5c:c2:a5: ff:82:1e:8f:8e:43:20:aa:26:22:5f:8e:00:1a:a7: 6e:10:38:25:45:6c:60:d1:5b:11:25:e6:5d:34:ed: eb:62:47:3b:9c:73:73:d3:1a:5b:9f:16:6f:98:a3: 60:fa:65:a9:f0:6d:1b:5f:be:21:14:0a:2d:f2:2d: 8b:f7:fb:c5:d8:ac:6e:ee:f7:43:b7:3a:b1:b2:73: f4:0f:42:ac:b6:0e:84:ca:17:93:42:2a:89:3a:98: fe:aa:74:c9:b9:b0:09:4c:ac:2a:a3:2a:56:b0:8e: 06:34:f3:c3:fd:09:97:8b:b8:6d:a9:ab:6f:45:b7: 14:61:14:c9:9d:1a:d7:a0:b2:ac:59:05:bb:2d:40: 5d:1c:3d:0d:a2:b0:f9:ae:07:33:d5:13:7d:16:f1: b7:2c:4e:3f:a3:34:5f:a3:6f:0c:33:33:8d:96:aa: fb:09:2c:e0:63:df:01:11:8c:fd:ae:23:2e:7b:6e: 5b:b8:63:e7:28:b5:5d:b3:1d:0e:6a:8f:34:7c:ce: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6E:6E:F1:6A:97:62:72:70:7D:C2:03:F1:8D:30:D8:C6:40:CD:72 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6d:46:c3:fc:bf:a4:3c:2f:ff:b4:79:9b:53:38:f0:bd:b5: 78:a3:52:36:d3:91:38:a7:97:a7:9a:08:f9:f7:f1:47:39:fb: ac:e4:5c:40:45:80:1e:46:01:5d:aa:37:f3:f2:e2:15:f5:a1: 9e:2b:b1:2d:26:fe:0b:0d:69:14:86:d6:2a:81:45:24:2d:41: 29:59:41:34:18:16:93:88:bb:22:f7:3b:77:84:bb:bb:54:0e: 45:3f:07:6a:49:fc:3b:e7:1d:14:cc:d6:49:0a:97:d2:50:9c: 8d:38:24:80:36:11:c2:7c:94:db:77:a1:34:1b:c7:a2:02:1b: d4:78:ed:59:70:02:cd:7d:b9:cf:ee:e9:12:03:65:57:28:20: ed:25:41:f1:df:45:ac:96:68:13:7a:79:34:52:9f:01:ef:46: 37:16:d7:2f:da:70:f0:99:27:66:3e:ce:90:d9:0d:b9:d0:9d: 43:b8:84:84:ba:2c:b8:ed:3d:c5:4a:3a:2e:7c:3c:7f:33:37: 01:7b:e4:eb:70:1a:c2:e3:48:f8:7f:04:50:47:31:f3:db:8a: 03:01:8c:39:7f:1f:92:49:0a:f4:99:ec:bf:45:e6:23:d9:bd: 4a:f0:58:7f:60:be:fb:ba:70:7f:40:ed:ad:41:43:1f:2d:6f: 7c:25:95:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjQxMTIyMjA1MDE2WhcNMjQxMTI5MjA1MDE2WjAYMRYwFAYD VQQDEw02NzQwZWU4OC00OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNDIsDS91r+KetQpNFny2Q87Wc7FzgGwPpxab9hAmKRlKBAWJOy8Yo/U3RsW 2ThGVaMoFGwbO39cwqX/gh6PjkMgqiYiX44AGqduEDglRWxg0VsRJeZdNO3rYkc7 nHNz0xpbnxZvmKNg+mWp8G0bX74hFAot8i2L9/vF2Kxu7vdDtzqxsnP0D0Kstg6E yheTQiqJOpj+qnTJubAJTKwqoypWsI4GNPPD/QmXi7htqatvRbcUYRTJnRrXoLKs WQW7LUBdHD0NorD5rgcz1RN9FvG3LE4/ozRfo28MMzONlqr7CSzgY98BEYz9riMu e25buGPnKLVdsx0Oao80fM5xvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhubvFq l2JycH3CA/GNMNjGQM1yMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUbUbD/L+kPC//tHmbUzjwvbV4o1I205E4p5enmgj59/FHOfus5FxA RYAeRgFdqjfz8uIV9aGeK7EtJv4LDWkUhtYqgUUkLUEpWUE0GBaTiLsi9zt3hLu7 VA5FPwdqSfw75x0UzNZJCpfSUJyNOCSANhHCfJTbd6E0G8eiAhvUeO1ZcALNfbnP 7ukSA2VXKCDtJUHx30WslmgTenk0Up8B70Y3Ftcv2nDwmSdmPs6Q2Q250J1DuISE uiy47T3FSjoufDx/MzcBe+TrcBrC40j4fwRQRzHz24oDAYw5fx+SSQr0mey/ReYj 2b1K8Fh/YL77unB/QO2tQUMfLW98JZWm -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org