$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: BwlEyB6Qvmky4tZf/RAqpN7OoCtHssjmVIBHooYOBcU= Subject key identifier: 62:0F:0F:77:A9:09:BE:7E:25:93:06:30:21:85:1D:78:2B:96:45:C7 Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: 14 Signing time: Thu 19 Sep 2024 06:16:32 +0000 Manifest this update: Thu 19 Sep 2024 06:16:31 +0000 Manifest next update: Thu 26 Sep 2024 06:16:31 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: Qwd/0zJJTI4jsCxhHOarVQc+KFSc2JrGX1m2dHfZPhQ=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: JHAlsO4c21BzMuIuY3/wvgeixXnzMgWJvjLhenU5Qhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Sep 19 06:16:31 2024 GMT Not After : Sep 26 06:16:31 2024 GMT Subject: CN=66ebc1c0-6306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:18:78:51:a0:5b:77:b6:1c:a7:db:fd:f4:a0: 37:12:a1:95:0b:4f:7e:e7:24:a1:ce:22:2a:51:a1: 25:bc:9e:bd:06:6a:ec:2c:ec:04:31:c5:4a:c8:96: 11:ee:51:8b:4e:da:60:d4:e5:dd:16:2b:33:3f:18: de:e9:5c:6f:42:64:55:c1:da:49:81:24:ec:c6:d1: fb:df:07:09:1f:0c:95:0e:7e:98:fb:fc:21:57:63: d7:1f:37:61:fe:c8:34:1d:ca:4a:42:f7:25:54:10: 54:35:54:19:1c:0a:b2:40:45:16:2b:54:df:9e:e4: b7:cb:37:4c:15:71:53:d0:52:56:73:b0:dd:b5:b1: 74:21:75:fd:da:16:e0:20:ee:04:10:7f:22:00:7e: 77:ab:8c:67:30:f3:46:ef:36:16:4a:81:f5:f7:e2: a8:02:ef:d2:cd:86:85:3e:a5:ca:86:50:4c:f0:e0: b3:7f:b4:53:76:fb:75:1f:13:a1:98:f4:6b:7e:84: 9a:2b:10:01:b5:c9:57:ce:ad:c0:90:44:c0:64:d7: eb:12:65:ca:17:7e:44:06:63:f0:72:fa:56:21:11: 59:c7:02:ed:0a:6d:c0:70:ef:c6:8a:55:01:3d:d4: 6b:a7:fa:51:d8:59:5c:04:20:02:09:38:b7:ea:d5: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0F:0F:77:A9:09:BE:7E:25:93:06:30:21:85:1D:78:2B:96:45:C7 X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:cb:c8:bd:85:45:79:70:f0:7d:58:a0:b7:5f:7a:d4:7f: 78:b2:3b:c5:96:1e:6b:ff:f7:56:44:f5:aa:c8:bd:06:a0:88: 58:85:70:75:f0:50:fd:ad:c0:ff:25:f8:7b:4a:bf:f0:0e:eb: 8c:0b:c8:6e:f4:ad:27:d8:bc:52:2d:88:77:6f:c1:61:5a:b8: 13:82:7e:69:3f:7d:48:99:0f:55:4d:ff:5b:1a:c2:da:a5:ab: 70:98:a8:8b:cc:ec:57:39:64:63:ae:02:46:48:8d:a3:80:c1: ef:35:43:0b:04:15:8c:02:37:c7:a3:88:21:8f:bc:ba:6d:25: 9a:51:c8:15:b1:c4:97:e0:af:90:c8:28:df:c1:c0:61:9d:48: 42:c3:51:f2:45:96:91:d4:29:04:e8:91:c3:cd:1f:ef:da:40: 15:4c:f3:26:73:d9:23:3d:0e:9c:37:b7:8b:e7:f5:a1:7a:d2: c9:05:f6:4c:ef:f9:41:e7:cc:b1:95:26:91:dd:0f:0a:36:d5: dc:9c:43:fc:66:7c:3b:77:b8:3a:8b:bc:f5:d4:29:6e:fd:e2: e5:5d:96:b7:75:08:c8:08:f4:84:6d:26:80:fa:30:de:fd:e8: 84:4f:fd:93:0f:47:9d:f0:a1:8a:b4:22:07:e0:e4:bb:d0:5a: d4:42:13:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMzMjExMC8GA1UEBRMoODE5OTQ5M0FEMjY1QUQyREM3MzM5NkY2QkEwQjZFRDZD QzQxRTEwQjAeFw0yNDA5MTkwNjE2MzFaFw0yNDA5MjYwNjE2MzFaMBgxFjAUBgNV BAMTDTY2ZWJjMWMwLTYzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzGHhRoFt3thyn2/30oDcSoZULT37nJKHOIipRoSW8nr0Gauws7AQxxUrIlhHu UYtO2mDU5d0WKzM/GN7pXG9CZFXB2kmBJOzG0fvfBwkfDJUOfpj7/CFXY9cfN2H+ yDQdykpC9yVUEFQ1VBkcCrJARRYrVN+e5LfLN0wVcVPQUlZzsN21sXQhdf3aFuAg 7gQQfyIAfnerjGcw80bvNhZKgfX34qgC79LNhoU+pcqGUEzw4LN/tFN2+3UfE6GY 9Gt+hJorEAG1yVfOrcCQRMBk1+sSZcoXfkQGY/By+lYhEVnHAu0KbcBw78aKVQE9 1Gun+lHYWVwEIAIJOLfq1UkDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYg8Pd6kJ vn4lkwYwIYUdeCuWRccwHwYDVR0jBBgwFoAUgZlJOtJlrS3HM5b2ugtu1sxB4Qsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzMyLzBGMDkyODU0NUFE RTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1psSk90SmxyUzNITTViMnVndHUxc3hCNFFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QzMyLzBGMDkyODU0NUFERTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMz SE01YjJ1Z3R1MXN4QjRRcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAL4y8i9hUV5cPB9WKC3X3rUf3iyO8WWHmv/91ZE9arIvQagiFiFcHXw UP2twP8l+HtKv/AO64wLyG70rSfYvFItiHdvwWFauBOCfmk/fUiZD1VN/1sawtql q3CYqIvM7Fc5ZGOuAkZIjaOAwe81QwsEFYwCN8ejiCGPvLptJZpRyBWxxJfgr5DI KN/BwGGdSELDUfJFlpHUKQTokcPNH+/aQBVM8yZz2SM9Dpw3t4vn9aF60skF9kzv +UHnzLGVJpHdDwo21dycQ/xmfDt3uDqLvPXUKW794uVdlrd1CMgI9IRtJoD6MN79 6IRP/ZMPR53woYq0Igfg5LvQWtRCE+o= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org