$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: XOaIvSZ23sCcGNkKEwtcMM3dmLEFOfHU8lAiyIBEDQU= Subject key identifier: 98:3D:3B:D2:D3:CD:0C:4B:30:F2:83:B5:35:22:A2:C2:52:7E:06:CE Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 09C0 Signing time: Fri 22 Nov 2024 19:44:37 +0000 Manifest this update: Fri 22 Nov 2024 19:44:36 +0000 Manifest next update: Fri 29 Nov 2024 19:44:36 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: iCL/4NaV4JSe0BvgNch53E2yp7k4WRDV90CFMJ1ILls=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: 9EGc7zo1rzNKxXV6Dja051NIq2qalXgFXf2PEqhm154=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Nov 22 19:44:36 2024 GMT Not After : Nov 29 19:44:36 2024 GMT Subject: CN=6740df24-738c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:ba:14:73:55:95:a8:08:0a:2a:e3:be:6e: 3c:23:d8:32:ed:1a:8c:b3:56:d3:70:77:7e:b0:d4: 9b:3f:c6:4c:33:76:d5:28:00:dd:f8:ef:a8:5c:97: df:55:5d:39:51:d0:5f:3a:5a:e1:e6:99:52:37:f6: 39:2d:77:00:77:c9:ff:cd:11:86:d9:1c:c7:fc:ce: 37:3f:71:2d:27:6f:c4:09:1f:70:04:2c:e3:be:93: c0:6e:62:a4:5d:23:42:9d:8b:8f:54:10:2e:24:7b: 57:e2:b5:44:17:d6:bf:b1:49:63:58:9f:f6:0a:ae: c0:59:44:d3:e5:64:ae:a9:d8:9a:df:a7:49:f2:2d: 3b:b5:7d:76:1f:37:11:8b:cf:65:06:8d:ac:a3:31: 8b:90:05:4a:07:66:d7:15:be:f7:37:39:57:c2:53: fc:84:bc:05:ca:54:b6:73:75:81:ec:31:cd:85:3c: 61:e4:5a:91:bc:db:43:0c:ca:02:48:53:35:91:7a: ce:d5:4c:26:d3:43:6f:8e:af:1f:d8:27:83:ee:36: 8f:62:ce:2b:43:f1:bf:68:74:d1:f2:37:35:f4:a5: 99:fd:e2:a4:27:55:2c:6d:c9:97:3f:4b:f3:c6:c2: 2f:91:c9:2b:e8:c2:17:f5:2b:e4:29:3b:16:d2:f7: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:3B:D2:D3:CD:0C:4B:30:F2:83:B5:35:22:A2:C2:52:7E:06:CE X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:14:e4:a4:c8:b1:3c:91:7d:eb:79:96:ce:0b:39:12:29:97: e0:a4:8b:67:8d:a6:08:75:83:9e:60:7e:00:30:44:65:76:5a: 21:9c:7d:a6:ef:24:61:cf:2f:1a:d8:5f:29:0d:3f:ae:5d:61: e1:fc:86:d6:b4:e7:d9:76:0e:38:95:ad:a2:16:43:0e:39:3b: f7:35:c3:14:27:39:5e:20:e5:a3:5e:9a:26:83:13:e0:47:cb: 40:a1:63:0d:45:cc:3b:fa:0b:d6:31:50:dd:f4:4e:31:6b:16: 2b:a2:d8:cb:85:e5:8f:d8:eb:5c:40:97:a6:67:20:c4:df:7f: 2d:d1:51:76:7b:37:92:e0:31:2e:35:6e:d2:84:b8:bf:79:90: a4:c1:74:70:6e:8d:a9:54:d8:87:21:9e:0d:c5:79:55:01:64: 8e:ef:06:d4:ec:60:df:c9:22:34:a8:67:2e:82:a1:5f:c2:ab: aa:b7:e3:0b:cf:4e:b9:2a:e9:c6:22:59:31:f5:ce:ce:21:1b: 1d:01:e9:3d:1a:63:02:6d:88:64:28:24:1e:3b:4e:a2:05:50: f7:6f:ed:6e:80:e9:88:35:ef:95:70:05:91:a6:4c:3d:de:90: 49:9d:37:9a:d4:72:10:c8:00:09:05:e8:66:a3:30:52:79:de: 6b:e7:c3:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjQxMTIyMTk0NDM2WhcNMjQxMTI5MTk0NDM2WjAYMRYwFAYD VQQDEw02NzQwZGYyNC03MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUK6FHNVlagICirjvm48I9gy7RqMs1bTcHd+sNSbP8ZMM3bVKADd+O+oXJff VV05UdBfOlrh5plSN/Y5LXcAd8n/zRGG2RzH/M43P3EtJ2/ECR9wBCzjvpPAbmKk XSNCnYuPVBAuJHtX4rVEF9a/sUljWJ/2Cq7AWUTT5WSuqdia36dJ8i07tX12HzcR i89lBo2sozGLkAVKB2bXFb73NzlXwlP8hLwFylS2c3WB7DHNhTxh5FqRvNtDDMoC SFM1kXrO1Uwm00Nvjq8f2CeD7jaPYs4rQ/G/aHTR8jc19KWZ/eKkJ1UsbcmXP0vz xsIvkckr6MIX9SvkKTsW0vcCyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg9O9LT zQxLMPKDtTUiosJSfgbOMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqFOSkyLE8kX3reZbOCzkSKZfgpItnjaYIdYOeYH4AMERldlohnH2m 7yRhzy8a2F8pDT+uXWHh/IbWtOfZdg44la2iFkMOOTv3NcMUJzleIOWjXpomgxPg R8tAoWMNRcw7+gvWMVDd9E4xaxYrotjLheWP2OtcQJemZyDE338t0VF2ezeS4DEu NW7ShLi/eZCkwXRwbo2pVNiHIZ4NxXlVAWSO7wbU7GDfySI0qGcugqFfwquqt+ML z065KunGIlkx9c7OIRsdAek9GmMCbYhkKCQeO06iBVD3b+1ugOmINe+VcAWRpkw9 3pBJnTea1HIQyAAJBehmozBSed5r58Oi -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org