$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: dyd08nPR9oitS3v+zsL7t4qkBvdVb+uW5tLLaBNisNw= Subject key identifier: 96:E0:DD:0E:34:F2:D5:26:4E:22:14:2E:5F:19:52:59:FF:16:F5:26 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 0125 Signing time: Sat 23 Nov 2024 02:57:59 +0000 Manifest this update: Sat 23 Nov 2024 02:57:58 +0000 Manifest next update: Sat 30 Nov 2024 02:57:58 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: 5UW9CXFdOyya8PVoWBkJkQhkowivMBAlsQjwbSw9TnM=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: XDKLEB0Itrm1xWCw6e4E/02jNXmBNEL6rySB0+zkMHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Nov 23 02:57:58 2024 GMT Not After : Nov 30 02:57:58 2024 GMT Subject: CN=674144b7-435d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:af:bc:e0:94:f3:51:b6:5c:49:10:25:a5: c9:1d:25:a1:49:3c:26:4e:7b:c0:75:17:58:71:54: 88:b3:1a:94:0b:24:a8:cf:4a:30:74:36:19:e0:3a: d8:71:24:81:55:74:9d:ec:30:df:69:3d:c7:cf:27: 77:66:c7:db:3e:81:23:1c:20:3d:df:4d:96:a0:7a: 06:74:f9:e3:62:bf:0b:dc:ff:8e:89:1d:e3:1b:e9: ea:2a:01:95:61:18:db:3b:ff:95:c0:c5:b6:43:cc: 47:f2:ed:27:22:51:76:96:48:02:99:b4:f6:84:ce: bd:80:b0:5c:aa:a2:c0:b0:f5:bb:f8:8e:59:7f:0f: 0f:61:55:e5:20:08:83:94:ec:21:94:64:a7:32:64: 4a:78:db:cc:87:df:b1:3e:a3:4f:15:46:ea:ed:89: 7a:86:94:43:31:cd:1f:30:a4:7a:2a:51:8d:41:78: 19:a8:cf:28:03:3b:08:91:a7:5c:ce:9d:16:65:e7: f1:b8:79:f2:6e:24:6c:ab:2a:90:07:98:0a:2f:7d: 7e:b3:dd:29:74:57:2e:82:3e:42:18:f1:9a:f7:66: 68:bb:6f:65:4f:8a:91:e6:d7:8e:99:d6:5e:61:fd: 52:06:92:33:85:e3:62:7e:28:a9:a2:31:a0:73:8a: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:DD:0E:34:F2:D5:26:4E:22:14:2E:5F:19:52:59:FF:16:F5:26 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f2:bc:ee:9a:35:86:4d:53:29:1e:5d:36:9c:ba:b1:5a:9d: 1b:62:92:55:d2:a4:69:62:82:1f:a9:12:d4:bb:f4:26:5c:ad: 84:be:79:a5:d3:37:be:c9:d0:b6:be:93:6f:14:e5:42:98:d8: 9d:22:17:80:c7:94:0c:e5:6f:2e:e4:d4:ac:1c:c7:5e:af:be: a0:8a:da:9b:04:bd:08:bf:37:a4:03:91:b3:c3:c4:00:99:b1: e4:76:42:6a:a0:5d:6c:d7:ec:5d:94:b9:1f:26:4a:9d:f3:8e: 4d:34:8b:1a:cb:4c:4a:7a:61:ee:2e:1c:43:0f:87:cc:ad:63: d0:53:3a:03:39:ea:91:61:0a:76:dc:4e:d3:db:bb:32:fe:c6: a5:36:da:35:25:53:8f:31:a0:2c:15:72:26:6e:e3:bb:e4:bc: 3e:31:20:02:81:b1:5b:ca:ca:24:16:3e:6c:3c:28:18:4a:fc: e8:b1:df:93:3c:af:f1:34:73:a2:98:4c:56:3a:8c:22:c9:09: b8:af:8e:48:5c:ba:77:75:2b:de:11:6c:76:f9:34:a5:69:3a: b0:48:70:ee:f4:52:da:f7:7d:c6:85:04:43:44:e1:e3:cd:c1: 33:15:f5:44:ec:fd:f4:e7:85:ef:63:f7:99:ed:1c:a7:9b:90: e0:86:ca:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjQxMTIzMDI1NzU4WhcNMjQxMTMwMDI1NzU4WjAYMRYwFAYD VQQDEw02NzQxNDRiNy00MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+GvvOCU81G2XEkQJaXJHSWhSTwmTnvAdRdYcVSIsxqUCySoz0owdDYZ4DrY cSSBVXSd7DDfaT3Hzyd3ZsfbPoEjHCA9302WoHoGdPnjYr8L3P+OiR3jG+nqKgGV YRjbO/+VwMW2Q8xH8u0nIlF2lkgCmbT2hM69gLBcqqLAsPW7+I5Zfw8PYVXlIAiD lOwhlGSnMmRKeNvMh9+xPqNPFUbq7Yl6hpRDMc0fMKR6KlGNQXgZqM8oAzsIkadc zp0WZefxuHnybiRsqyqQB5gKL31+s90pdFcugj5CGPGa92Zou29lT4qR5teOmdZe Yf1SBpIzheNifiipojGgc4qEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbg3Q40 8tUmTiIULl8ZUln/FvUmMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG8rzumjWGTVMpHl02nLqxWp0bYpJV0qRpYoIfqRLUu/QmXK2Evnml 0ze+ydC2vpNvFOVCmNidIheAx5QM5W8u5NSsHMder76gitqbBL0IvzekA5Gzw8QA mbHkdkJqoF1s1+xdlLkfJkqd845NNIsay0xKemHuLhxDD4fMrWPQUzoDOeqRYQp2 3E7T27sy/salNto1JVOPMaAsFXImbuO75Lw+MSACgbFbysokFj5sPCgYSvzosd+T PK/xNHOimExWOowiyQm4r45IXLp3dSveEWx2+TSlaTqwSHDu9FLa933GhQRDROHj zcEzFfVE7P3054XvY/eZ7Rynm5DghsoW -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org