$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: lTuWPE70q7vSsXbftZ6URKQoa7ap3bodGlaTeBPjOJc= Subject key identifier: AA:C6:CC:0A:6D:76:BB:F3:6D:72:E8:94:6F:66:A2:1A:E8:52:6C:55 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 66 Signing time: Sat 23 Nov 2024 04:56:29 +0000 Manifest this update: Sat 23 Nov 2024 04:56:28 +0000 Manifest next update: Sat 30 Nov 2024 04:56:28 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: rUyNvemItAYdZPLKoe7DVZapNtIrPC9crvjQbAPQ5bY=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: iAqTeq7DYC2XzKkxp4XaSsZwdjNAq/KDqtcN89ShlXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Nov 23 04:56:28 2024 GMT Not After : Nov 30 04:56:28 2024 GMT Subject: CN=6741607c-b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:5d:1b:fa:94:d3:dd:2c:00:15:7f:ab:aa: a8:a7:17:c9:fb:44:5c:a8:49:4a:05:95:50:34:5d: 83:06:29:a4:12:3a:c3:2e:74:f6:b5:aa:24:e2:53: 95:43:b1:10:fc:90:ab:ab:89:21:ce:7c:a2:59:25: a8:af:1d:a3:63:f4:cb:57:b8:d0:1c:ad:3f:58:3a: 9a:c0:ca:8f:e8:42:82:cc:aa:22:6d:39:ee:99:81: df:45:d1:48:77:d6:42:18:a0:3a:fd:45:5f:cd:8d: 1a:c0:f5:4f:7c:f8:41:3a:15:0d:e0:80:90:64:44: 30:95:fc:c6:11:23:5a:f1:2a:fb:f0:bc:36:16:40: 7d:45:09:15:e3:61:01:85:0c:80:f1:df:77:60:3b: 94:aa:12:31:1f:20:06:c3:78:df:16:a2:0c:76:49: 6e:61:70:d0:14:32:14:cb:6b:f0:0c:8b:c1:fe:f0: d8:ca:f8:6a:78:cd:60:bc:7d:a6:40:1f:d8:ae:80: 85:0a:71:af:e0:61:1c:dd:20:a4:cc:2e:f1:5d:59: 85:22:9e:45:70:22:fd:52:bd:ed:f4:b2:6d:3b:22: 80:7f:e8:61:66:76:62:c8:ad:1f:d5:0a:86:24:0e: 75:3f:e8:bf:48:a2:d6:dc:bb:65:86:22:0b:27:e4: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:CC:0A:6D:76:BB:F3:6D:72:E8:94:6F:66:A2:1A:E8:52:6C:55 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:23:24:f7:9e:97:93:74:a9:63:b7:46:e8:fe:1c:27:a3:8b: 49:06:c8:0e:54:15:fc:46:16:56:4c:12:30:2b:80:6b:92:8c: 07:a8:1e:67:6f:d1:65:fd:36:2e:b4:3b:f3:84:7d:9f:11:9d: 4f:12:c8:b8:a2:ce:74:af:94:8e:9c:b2:39:df:15:11:d4:72: 23:e1:9b:03:7c:2d:66:20:d9:6f:6b:33:bd:de:da:79:f3:b5: 49:64:17:89:cc:44:12:51:57:33:0c:f3:0a:50:97:9a:82:50: ff:7e:9b:24:35:2e:05:36:5a:f2:fb:ad:80:ce:3b:80:90:36: df:b5:2e:b4:1e:f7:97:56:be:be:50:14:08:7a:4d:78:d4:d9: 5b:e5:b6:11:aa:d7:87:d7:15:80:7e:ae:76:34:88:12:88:f4: 88:82:01:bf:bd:94:6b:fb:a1:e8:99:cb:fb:99:19:51:bf:30: 65:95:d7:ae:7d:a5:8c:e4:00:17:f6:4e:2d:67:44:d2:12:b7: e6:e9:c5:fd:11:a4:34:e8:aa:d4:3f:dd:45:54:7b:c3:82:ec: fd:58:1f:6c:a2:5f:6b:0f:22:71:ec:fa:40:87:d5:bc:6d:8b: 2d:40:aa:4e:3a:77:6f:1b:2b:c4:66:18:bf:04:eb:16:90:fc: eb:a7:4f:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Rjc5MzExMC8GA1UEBRMoRjA2MkY1MDNFQzkyMjNGQUY2ODFFNkE0RENEODk4NDkx QTI2RTQ5NDAeFw0yNDExMjMwNDU2MjhaFw0yNDExMzAwNDU2MjhaMBgxFjAUBgNV BAMTDTY3NDE2MDdjLWI0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+P10b+pTT3SwAFX+rqqinF8n7RFyoSUoFlVA0XYMGKaQSOsMudPa1qiTiU5VD sRD8kKuriSHOfKJZJaivHaNj9MtXuNAcrT9YOprAyo/oQoLMqiJtOe6Zgd9F0Uh3 1kIYoDr9RV/NjRrA9U98+EE6FQ3ggJBkRDCV/MYRI1rxKvvwvDYWQH1FCRXjYQGF DIDx33dgO5SqEjEfIAbDeN8Wogx2SW5hcNAUMhTLa/AMi8H+8NjK+Gp4zWC8faZA H9iugIUKca/gYRzdIKTMLvFdWYUinkVwIv1Sve30sm07IoB/6GFmdmLIrR/VCoYk DnU/6L9Iotbcu2WGIgsn5DGjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqsbMCm12 u/NtcuiUb2aiGuhSbFUwHwYDVR0jBBgwFoAU8GL1A+ySI/r2geak3NiYSRom5JQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNzkzLzBGNkJEM0UwMERE MjExRUY5MTgxMTEzQUM0RjlBRTAyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVK US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEdMMUEteVNJX3IyZ2VhazNOaVlTUm9tNUpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NzkzLzBGNkJEM0UwMEREMjExRUY5MTgxMTEzQUM0RjlBRTAyLzhHTDFBLXlTSV9y MmdlYWszTmlZU1JvbTVKUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEjJPeel5N0qWO3Ruj+HCeji0kGyA5UFfxGFlZMEjArgGuSjAeoHmdv 0WX9Ni60O/OEfZ8RnU8SyLiiznSvlI6csjnfFRHUciPhmwN8LWYg2W9rM73e2nnz tUlkF4nMRBJRVzMM8wpQl5qCUP9+myQ1LgU2WvL7rYDOO4CQNt+1LrQe95dWvr5Q FAh6TXjU2VvlthGq14fXFYB+rnY0iBKI9IiCAb+9lGv7oeiZy/uZGVG/MGWV1659 pYzkABf2Ti1nRNISt+bpxf0RpDToqtQ/3UVUe8OC7P1YH2yiX2sPInHs+kCH1bxt iy1Aqk46d28bK8RmGL8E6xaQ/OunT60= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org