$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: ZG65QxdaBhAaNxk3JdGuVLRJwXXlxT+SHIF8RGzNKmM= Subject key identifier: B9:80:C0:38:DA:8B:01:53:CB:09:34:D1:39:74:07:0C:B8:EC:CB:DF Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:36:40 +0000 Manifest this update: Thu 21 Nov 2024 05:36:39 +0000 Manifest next update: Thu 28 Nov 2024 05:36:39 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: 4Fj5z9I+OVod2ojm8LQFAqnbzh3aHrklvAMrq899VY4=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: JHAlsO4c21BzMuIuY3/wvgeixXnzMgWJvjLhenU5Qhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Nov 21 05:36:39 2024 GMT Not After : Nov 28 05:36:39 2024 GMT Subject: CN=673ec6e8-0607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:44:d4:1a:4c:98:3e:f0:f2:f8:80:f3:c9: 52:01:d2:ae:22:4b:e5:aa:27:e5:34:39:1b:94:8f: 82:b2:fa:a9:d9:db:c4:7e:13:04:af:79:29:3b:d3: ac:d4:1b:c4:f8:cc:ef:23:3d:c6:71:29:8f:99:85: d0:ba:54:7d:31:c0:17:7b:4d:82:b6:57:3d:09:fa: 97:1e:b3:77:2a:7e:96:43:16:16:05:32:7e:a5:e1: 84:dd:4a:bd:1b:43:bd:09:88:f0:03:c4:99:5a:6e: a9:8b:98:bd:6c:a4:31:6b:b0:08:08:34:71:2a:b7: 6d:76:e6:94:f8:58:a5:90:96:d7:3d:10:17:c5:c9: 51:ca:5b:b9:9d:19:da:a4:f3:d9:77:3b:e0:ed:f4: ad:e0:ca:06:3e:67:a3:a2:c5:92:f5:cb:2c:35:71: 18:34:3d:ea:49:a7:15:13:4b:e5:a5:29:f7:32:7a: e3:25:5b:25:0f:d5:20:d3:29:f1:6a:c3:cb:51:2b: 2b:88:7e:1c:2f:3b:ea:48:03:72:38:02:fb:0e:f7: b5:30:bd:24:20:6a:a4:b6:a5:9c:2e:4b:bd:06:2f: 3e:d4:44:36:1f:37:9f:0f:4e:d4:d9:62:f4:17:e3: a8:75:d1:0c:d2:75:f7:ce:4a:0d:57:c4:3a:92:bb: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:C0:38:DA:8B:01:53:CB:09:34:D1:39:74:07:0C:B8:EC:CB:DF X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:65:ab:23:25:3c:3d:9e:a7:34:06:e7:1e:1b:ec:3a:0b: 74:28:62:a1:a8:73:f1:5a:1a:a8:2d:bd:a9:06:8e:46:00:b7: f4:87:4e:20:16:cf:b3:a3:c5:da:02:c3:78:65:d6:66:4d:cb: 92:21:1f:d6:14:01:85:f8:12:39:4e:89:d5:42:54:1b:40:70: 77:da:e6:57:68:d2:eb:e5:03:2d:69:79:e2:3d:a3:fd:6c:ac: b5:49:b0:27:13:23:0c:74:b3:df:7e:28:58:91:b0:5c:b9:8a: d0:0b:11:af:4f:da:a7:bb:49:80:88:6f:a9:c1:3b:70:7a:d6: f6:8c:92:90:ac:fe:69:43:d7:5d:33:76:b3:8a:40:07:af:6c: 47:2f:fd:00:2c:ac:1a:e2:e2:8c:6f:63:14:03:ba:7a:4b:61: f4:ac:86:04:d0:91:69:08:16:14:d4:e8:b1:8d:38:c2:1b:a2: 41:c5:6d:22:e4:44:69:45:f4:c2:32:90:67:f1:be:93:99:2d: 44:86:41:26:41:91:e7:4b:75:14:b0:df:93:f7:cf:cb:fa:9b: 57:b0:b8:75:af:9a:49:8e:0d:79:82:e6:d0:0a:0d:0d:04:08: cb:a7:34:76:c1:3b:1b:4e:85:10:28:22:18:0b:9d:04:69:90: 56:65:2e:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMzMjExMC8GA1UEBRMoODE5OTQ5M0FEMjY1QUQyREM3MzM5NkY2QkEwQjZFRDZD QzQxRTEwQjAeFw0yNDExMjEwNTM2MzlaFw0yNDExMjgwNTM2MzlaMBgxFjAUBgNV BAMTDTY3M2VjNmU4LTA2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr/0TUGkyYPvDy+IDzyVIB0q4iS+WqJ+U0ORuUj4Ky+qnZ28R+EwSveSk706zU G8T4zO8jPcZxKY+ZhdC6VH0xwBd7TYK2Vz0J+pces3cqfpZDFhYFMn6l4YTdSr0b Q70JiPADxJlabqmLmL1spDFrsAgINHEqt2125pT4WKWQltc9EBfFyVHKW7mdGdqk 89l3O+Dt9K3gygY+Z6OixZL1yyw1cRg0PepJpxUTS+WlKfcyeuMlWyUP1SDTKfFq w8tRKyuIfhwvO+pIA3I4AvsO97UwvSQgaqS2pZwuS70GLz7URDYfN58PTtTZYvQX 46h10QzSdffOSg1XxDqSuwyVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuYDAONqL AVPLCTTROXQHDLjsy98wHwYDVR0jBBgwFoAUgZlJOtJlrS3HM5b2ugtu1sxB4Qsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzMyLzBGMDkyODU0NUFE RTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1psSk90SmxyUzNITTViMnVndHUxc3hCNFFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QzMyLzBGMDkyODU0NUFERTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMz SE01YjJ1Z3R1MXN4QjRRcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI80ZasjJTw9nqc0BuceG+w6C3QoYqGoc/FaGqgtvakGjkYAt/SHTiAW z7OjxdoCw3hl1mZNy5IhH9YUAYX4EjlOidVCVBtAcHfa5ldo0uvlAy1peeI9o/1s rLVJsCcTIwx0s99+KFiRsFy5itALEa9P2qe7SYCIb6nBO3B61vaMkpCs/mlD110z drOKQAevbEcv/QAsrBri4oxvYxQDunpLYfSshgTQkWkIFhTU6LGNOMIbokHFbSLk RGlF9MIykGfxvpOZLUSGQSZBkedLdRSw35P3z8v6m1ewuHWvmkmODXmC5tAKDQ0E CMunNHbBOxtOhRAoIhgLnQRpkFZlLhU= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org