$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json) Hash identifier: eDhKjB8NkALhfgJiLOU17AFeu4eNfas5+f+QT1M++LY= Subject key identifier: 36:F3:72:98:1D:DF:28:42:99:BD:02:3C:F9:2C:40:66:D6:92:36:BF Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft Manifest number: 06D2 Signing time: Fri 22 Nov 2024 21:38:01 +0000 Manifest this update: Fri 22 Nov 2024 21:38:00 +0000 Manifest next update: Fri 29 Nov 2024 21:38:00 +0000 Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: HPNJ8lwT4Y/K5ghWvn4YW4Uq5hfqut5LTggkNN8rG3s=) 2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Validity Not Before: Nov 22 21:38:00 2024 GMT Not After : Nov 29 21:38:00 2024 GMT Subject: CN=6740f9b9-49d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:f4:06:a2:bc:d5:27:bc:a8:0b:b6:94:23: 70:b4:76:a9:64:e4:31:e7:ba:e1:1b:d2:5f:d3:5e: 4b:f0:66:6b:be:71:94:0c:59:67:93:43:20:fa:ee: 21:de:9d:ae:dc:84:39:62:4b:86:04:77:79:68:fd: d4:68:af:bc:ea:90:61:d7:75:3e:64:e1:5f:5b:43: 6e:b6:dd:27:16:db:c1:85:53:f1:73:0e:3d:1f:97: 67:7f:b7:96:b5:0d:ff:c5:37:45:9a:2a:ca:4b:00: 66:44:ae:71:0f:04:0f:49:a2:5a:04:ae:3c:ad:f6: 2b:bc:97:11:f4:41:82:70:54:e0:aa:70:51:e5:06: eb:ab:b4:c9:33:b6:0e:d1:7a:0b:46:24:6f:4a:b5: a3:f2:91:bc:35:f0:dc:01:fb:22:b8:99:ce:d2:93: 8a:60:3b:f0:bd:5e:86:64:b1:88:97:06:0a:22:66: 76:e6:8a:ce:5e:56:ce:58:4b:d6:3e:84:b1:24:98: c3:8a:14:33:42:7d:84:af:cd:29:74:f7:96:5b:bd: bc:0f:d4:98:72:ac:6e:9b:ee:98:47:0b:6e:d6:9d: 15:16:3d:51:a1:79:d1:e2:8f:0b:4a:21:b2:08:49: f9:ff:d0:c3:3a:26:ce:15:3b:4d:1f:16:02:9b:4e: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:72:98:1D:DF:28:42:99:BD:02:3C:F9:2C:40:66:D6:92:36:BF X509v3 Authority Key Identifier: keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:78:59:5c:90:b2:3a:f7:93:4b:91:13:75:e6:97:55:67: af:e3:25:c1:fc:e0:cf:44:44:c6:01:cf:71:5b:79:dc:0e:d3: 73:8a:fe:ee:4d:c1:b1:81:4e:7d:70:d4:ec:1a:61:c2:0a:e3: fc:ee:fb:22:ac:92:c1:c6:f7:a2:51:e2:b9:c2:c2:b8:cc:6f: f2:be:ba:c2:8b:6f:49:c4:c5:36:65:e6:b2:7b:58:1a:06:d5: c1:87:2b:ef:76:08:c1:ee:e9:fc:05:73:08:92:04:bb:65:60: 73:bd:ae:86:f8:40:55:0a:82:97:c3:9c:8f:9a:1e:e0:9c:3e: d6:d8:09:f5:a9:67:cd:d4:13:38:2d:10:05:65:8d:db:a7:29: ae:1d:77:bb:dc:63:be:e6:a2:51:b0:bd:0e:e8:31:57:3d:ca: 5c:94:62:b1:1e:60:6e:79:1c:15:d0:1f:1e:55:7e:8d:76:3a: 9c:7a:8d:69:77:fd:5b:91:c4:2b:92:11:de:72:2f:04:9f:70: d8:20:d0:9e:99:30:49:66:17:aa:f7:89:71:50:14:66:8e:34: ae:9d:63:7b:24:37:e1:0e:3a:a2:50:e9:d7:d6:d9:2d:ba:51: fe:73:7f:16:50:27:e0:ce:7b:9e:bc:f6:70:44:74:b1:c1:29: eb:e7:69:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwMjkxMTAvBgNVBAUTKDgzMkNDMDU2RTIzRTM4OEFFMzc4MUE1MjBCREQ5MTE2 OTYzNkU1OUIwHhcNMjQxMTIyMjEzODAwWhcNMjQxMTI5MjEzODAwWjAYMRYwFAYD VQQDEw02NzQwZjliOS00OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7r0BqK81Se8qAu2lCNwtHapZOQx57rhG9Jf015L8GZrvnGUDFlnk0Mg+u4h 3p2u3IQ5YkuGBHd5aP3UaK+86pBh13U+ZOFfW0Nutt0nFtvBhVPxcw49H5dnf7eW tQ3/xTdFmirKSwBmRK5xDwQPSaJaBK48rfYrvJcR9EGCcFTgqnBR5Qbrq7TJM7YO 0XoLRiRvSrWj8pG8NfDcAfsiuJnO0pOKYDvwvV6GZLGIlwYKImZ25orOXlbOWEvW PoSxJJjDihQzQn2Er80pdPeWW728D9SYcqxum+6YRwtu1p0VFj1RoXnR4o8LSiGy CEn5/9DDOibOFTtNHxYCm05/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbzcpgd 3yhCmb0CPPksQGbWkja/MB8GA1UdIwQYMBaAFIMswFbiPjiK43gaUgvdkRaWNuWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTAyOS8xMDg5N0IzMjJG QjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9JcmplQnBTQzkyUkZwWTI1 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5ekFWdUktT0lyamVCcFNDOTJSRnBZMjVacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTAyOS8xMDg5N0IzMjJGQjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9J cmplQnBTQzkyUkZwWTI1WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLHhZXJCyOveTS5ETdeaXVWev4yXB/ODPRETGAc9xW3ncDtNziv7u TcGxgU59cNTsGmHCCuP87vsirJLBxveiUeK5wsK4zG/yvrrCi29JxMU2Zeaye1ga BtXBhyvvdgjB7un8BXMIkgS7ZWBzva6G+EBVCoKXw5yPmh7gnD7W2An1qWfN1BM4 LRAFZY3bpymuHXe73GO+5qJRsL0O6DFXPcpclGKxHmBueRwV0B8eVX6Ndjqceo1p d/1bkcQrkhHeci8En3DYINCemTBJZheq94lxUBRmjjSunWN7JDfhDjqiUOnX1tkt ulH+c38WUCfgznuevPZwRHSxwSnr52lu -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org